pkg update -f
refreshes fetches your package catalogue (latest or quarterly - see
/etc/pkg/FreeBSD.conf). After that you should be able to upgrade the
package.
Regards,
Robert
On 15.04.24 16:19, Marek Anioła wrote:
No, it only shows the old version:
~ # pkg search cpu-microcode-intel
cpu-microcode-intel-20231114 Intel CPU microcode updates
~ #
The latest version (20240312) is not available.
From: Martin Simmons <mar...@lispworks.com>
Sent: Monday, April 15, 2024 15:56
To: Marek Anioła <man130...@outlook.com>
Cc: freebsd-security@freebsd.org <freebsd-security@freebsd.org>
Subject: Re: cpu-microcode-intel-20231114
On Mon, 15 Apr 2024 09:09:57 +0000, =?iso-8859-2?Q?Marek Anio=B3a?= said:
As of 13 March 2024. "pkg audit" reports the following vulnerabilities in
FreeBSD 13.3-RELEASE-p1:
cpu-microcode-intel-20231114 is vulnerable:
Intel processors - multiple vulnerabilities
CVE: CVE-2023-43490
CVE: CVE-2023-22655
CVE: CVE-2023-28746
CVE: CVE-2023-38575
CVE: CVE-2023-39368
WWW:
https://vuxml.FreeBSD.org/freebsd/b6dd9d93-e09b-11ee-92fc-1c697a616631.html
Found 1 issue(s) in 1 installed package(s).
The website https://www.freshports.org/sysutils/cpu-microcode-intel/ shows that
an update to the package appeared the day before (2024-03-12), but the BINARY
package providing THE UPDATE IS STILL NOT AVAILABLE!
Should this be the case?
Or, should I update the microcode in some other way?
pkg search cpu-microcode-intel says the latest version is called
cpu-microcode-intel-20240312. I don't know why these packages have dates in
their names so they don't upgrade automatically.
