From nobody Sat Aug 10 23:36:25 2024 X-Original-To: dev-commits-ports-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4WhHGx5xYtz5TP3f; Sat, 10 Aug 2024 23:36:25 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4WhHGx5Qz8z4GN2; Sat, 10 Aug 2024 23:36:25 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1723332985; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=6UN9EpfoCByQhkcF4qhMpRtkl87Ut8xYUFHplGSiSRI=; b=Y9JaB1zBuvwbmIqhqzUDrlxE4tkW+h98EOqMJBTYhvuGEJVE5EiINh1ungX+W87NVvWDCU PNZQIbPeP/5DjHd2aRIV1GBew6wz0da9SjwBjksjNQo8UkPGOkqvsf92LXO95cWvgpXVtC Kg5NoQFfkb47FYATZFRjs7nCWS4gujmogZ167Nsd44HbgHVfRG5j1Sq92zw+nkKdtbWTia b26Z/EKONUn4k4YYInVpvq1yjn6N/Bi6HQq8EzSgRRrrwoKsc1vNTiXPUkZLaegQxutbUJ +VPznLMxY9cpFXi8MbvTWGwhqoLgBHmcnSRwxeqq6TGRLGi7X1MS/LlL/1Zjtg== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1723332985; a=rsa-sha256; cv=none; b=LIXhvE3/nJwTqYQS+hzZnlqdrKRFCrJNk5xBg9eJhV8Bjq/qQddwjlwwZFm9rngqaMxt00 A0LZaqUFtp46n+iDDrsznhxj7Yb1rJwwY5G8u2CtCCF1uiOh+Wc4C66GwvSYEPSrIVTwrq ryQXsAdv3ATLbVIGxU3UYJWBI/icsrGT/7LwxkjhCTnN0MLbSjrSZ7RXdxgioe9zCHbb1/ RtnRBM6+rYArAyo0zPrZ/QrEsvBJmAm6mnivl5h1sOsUeeTRpYgC7c/9J7fwkaHtdwoMJx ORjF/1Is/cXiENXIc5azA/RLD6QHtx1ZX/ny9lV6TbNi89z9bcWFFIc+D3gJJw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1723332985; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=6UN9EpfoCByQhkcF4qhMpRtkl87Ut8xYUFHplGSiSRI=; b=onLJOKBckzBpwtgrYZj6Tcu4T37Zqh/QEwcNWzuoN0vi/0WqnNZi5ZUw3WohosC7JCL80c +4hPyMIG8xC2Ctak5fBxZqc3YgPkWnoxQLNIz8R+aIEns1fuyh/EE0WOsNoGIn38GTtDZm s1g+MbhYrtTJG7k7JAUSjt3Litar0gFFiLWcCYA1iJXfhBDplFS9oL5mTNDP9tx3dWQqN8 rP/ewSj2RUw/ZgxEZjrbN1s+RhDzyI2tlXne3du/N6F40Z04mGzmOdpkjI40MZJUWjsr0X qEKrJ+UrdEypSVYxt3Z3BWXx29Ou+YiTXecwL/E0rbjJ62tqReknZF3H7j6h6A== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4WhHGx4yzfzK80; Sat, 10 Aug 2024 23:36:25 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.18.1/8.18.1) with ESMTP id 47ANaPvt049088; Sat, 10 Aug 2024 23:36:25 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.18.1/8.18.1/Submit) id 47ANaPRH049085; Sat, 10 Aug 2024 23:36:25 GMT (envelope-from git) Date: Sat, 10 Aug 2024 23:36:25 GMT Message-Id: <202408102336.47ANaPRH049085@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Joseph Mingrone Subject: git: d72a8184c782 - main - security/vuxml: Document AMD CPU vulnerabilities List-Id: Commits to the main branch of the FreeBSD ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-ports-main@freebsd.org Sender: owner-dev-commits-ports-main@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: jrm X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: d72a8184c782e00f6023be8c240e3a2d8d8194d1 Auto-Submitted: auto-generated The branch main has been updated by jrm: URL: https://cgit.FreeBSD.org/ports/commit/?id=d72a8184c782e00f6023be8c240e3a2d8d8194d1 commit d72a8184c782e00f6023be8c240e3a2d8d8194d1 Author: Joseph Mingrone AuthorDate: 2024-08-10 23:02:15 +0000 Commit: Joseph Mingrone CommitDate: 2024-08-10 23:09:56 +0000 security/vuxml: Document AMD CPU vulnerabilities Security: CVE-2023-31315 Sponsored by: The FreeBSD Foundation --- security/vuxml/vuln/2024.xml | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) diff --git a/security/vuxml/vuln/2024.xml b/security/vuxml/vuln/2024.xml index 0564e3ef1330..0599afd6fff2 100644 --- a/security/vuxml/vuln/2024.xml +++ b/security/vuxml/vuln/2024.xml @@ -1,3 +1,36 @@ + + AMD CPUs -- Guest Memory Vulnerabilities + + + cpu-microcode-amd + 20240810 + + + + +

AMD reports:

+
+

+ Researchers from IOActive have reported that it may be possible for + an attacker with ring 0 access to modify the configuration of System + Management Mode (SMM) even when SMM Lock is enabled. Improper + validation in a model specific register (MSR) could allow a malicious + program with ring0 access to modify SMM configuration while SMI lock + is enabled, potentially leading to arbitrary code execution. +

+
+ + + + CVE-2023-31315 + https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7014.html + + + 2024-08-09 + 2024-08-10 + + + Roundcube -- Multiple vulnerabilities