Debian alert DLA-4347-1 (intel-microcode)

From:
             
 
Tobias Frost <tobi@debian.org>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 4347-1] intel-microcode security update
Date:
             
 
Sat, 25 Oct 2025 22:21:27 +0200
Message-ID:
             
 
<aP0xR8LtNOKL-13g@isildor2.loewenhoehle.ip>
-------------------------------------------------------------------------
Debian LTS Advisory DLA-4347-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                         Tobias Frost
October 25, 2025                              https://wiki.debian.org/LTS
-------------------------------------------------------------------------

Package        : intel-microcode
Version        : 3.20250812.1~deb11u1
CVE ID         : CVE-2025-20053 CVE-2025-20109 CVE-2025-21090 CVE-2025-22839 
                 CVE-2025-22840 CVE-2025-22889 CVE-2025-24305 CVE-2025-26403 
                 CVE-2025-32086
Debian Bug     : 1110983 1112168

This update ships updated CPU microcode for some types of Intel CPUs and
provides mitigations for security vulnerabilities which could result in
privilege escalation or denial of service.

For Debian 11 bullseye, these problems have been fixed in version
3.20250812.1~deb11u1.

We recommend that you upgrade your intel-microcode packages.

For the detailed security status of intel-microcode please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/intel-microcode

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=v8p7
-----END PGP SIGNATURE-----