amd64-microcode, version number, no-dsa

2020-03-14 Thread Anton Gladky
Dear LTS team, I am still preparing an update for amd64-microcode for Jessie to fix CVE-2017-5715. Security team marked this issue as no-dsa for Stretch [1], it can be fixed through next point release. For Jessie I am not able to use now the package version 3.20181128.1~deb8u1, because it is high

Re: amd64-microcode, version number, no-dsa

2020-03-14 Thread Adrian Bunk
On Sat, Mar 14, 2020 at 10:16:30PM +0100, Anton Gladky wrote: >... > * Package is non-free, should the amd64 and i386 binary packages both > be uploaded? >... No, the buildds can build packages in non-free. https://www.debian.org/doc/manuals/developers-reference/pkgs.en.html#marking-non-free-pa