Toshiba Satellite Z30-B-10W - Debian - 2019 archive

tingo@z30b:~$ sudo apt install vlc
Reading package lists... Done
Building dependency tree      
Reading state information... Done
The following additional packages will be installed:
  fonts-freefont-ttf libaribb24-0 libbasicusageenvironment1 libcddb2 libdvbpsi10 libebml4v5 libgles2 libgroupsock8 libixml10 liblirc-client0
  liblivemedia64 liblua5.2-0 libmad0 libmatroska6v5 libmicrodns0 libopenmpt-modplug1 libplacebo7 libprotobuf-lite17 libproxy-tools
  libresid-builder0c2a libsdl-image1.2 libsidplay2 libspatialaudio0 libupnp13 libusageenvironment3 libva-wayland2 libvlc-bin libvlc5 libvlccore9
  libxcb-xv0 vlc-bin vlc-data vlc-l10n vlc-plugin-base vlc-plugin-notify vlc-plugin-qt vlc-plugin-samba vlc-plugin-skins2 vlc-plugin-video-output
  vlc-plugin-video-splitter vlc-plugin-visualization
Suggested packages:
  lirc libdvdcss2
The following NEW packages will be installed:
  fonts-freefont-ttf libaribb24-0 libbasicusageenvironment1 libcddb2 libdvbpsi10 libebml4v5 libgles2 libgroupsock8 libixml10 liblirc-client0
  liblivemedia64 liblua5.2-0 libmad0 libmatroska6v5 libmicrodns0 libopenmpt-modplug1 libplacebo7 libprotobuf-lite17 libproxy-tools
  libresid-builder0c2a libsdl-image1.2 libsidplay2 libspatialaudio0 libupnp13 libusageenvironment3 libva-wayland2 libvlc-bin libvlc5 libvlccore9
  libxcb-xv0 vlc vlc-bin vlc-data vlc-l10n vlc-plugin-base vlc-plugin-notify vlc-plugin-qt vlc-plugin-samba vlc-plugin-skins2
  vlc-plugin-video-output vlc-plugin-video-splitter vlc-plugin-visualization
0 upgraded, 42 newly installed, 0 to remove and 0 not upgraded.
Need to get 19.6 MB of archives.
After this operation, 82.1 MB of additional disk space will be used.
[..]
Processing triggers for fontconfig (2.13.1-2) ...
Processing triggers for libvlc-bin:amd64 (3.0.8-0+deb10u1) ...

tingo@z30b:~$ sudo apt upgrade
Reading package lists... Done
Building dependency tree      
Reading state information... Done
Calculating upgrade... Done
The following packages will be upgraded:
  chromium chromium-common chromium-sandbox firefox-esr git git-man libnss3 libvpx5
8 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 112 MB of archives.
After this operation, 26.6 kB disk space will be freed.
[..]
Processing triggers for man-db (2.8.5-2) ...
Processing triggers for desktop-file-utils (0.23-4) ...

tingo@z30b:~$ sudo apt install calibre
Reading package lists... Done
Building dependency tree      
Reading state information... Done
The following additional packages will be installed:
  calibre-bin libchm1 libjs-coffeescript libpodofo0.9.6 libqt5designer5 libqt5help5 libqt5test5 libtidy5deb1 optipng python-apsw python-asn1crypto
  python-bs4 python-cffi-backend python-chardet python-cherrypy3 python-cryptography python-css-parser python-cssselect python-cssutils
  python-dnspython python-enum34 python-feedparser python-html5-parser python-html5lib python-ipaddress python-libxml2 python-lxml python-markdown
  python-mechanize python-msgpack python-netifaces python-openssl python-pygments python-pyqt5 python-pyqt5.qtsvg python-pyqt5.qtwebkit
  python-regex python-repoze.lru python-routes python-simplejson python-sip python-soupsieve python-utidylib python-webencodings python-webob
  python-yaml
Suggested packages:
  python-unrardll coffeescript python-apsw-doc python-cryptography-doc python-cryptography-vectors python-enum34-doc python-genshi python-lxml-dbg
  python-lxml-doc python-markdown-doc python-openssl-doc python-openssl-dbg python-pygments-doc python-pyqt5-dbg python-paste python-webob-doc
The following NEW packages will be installed:
  calibre calibre-bin libchm1 libjs-coffeescript libpodofo0.9.6 libqt5designer5 libqt5help5 libqt5test5 libtidy5deb1 optipng python-apsw
  python-asn1crypto python-bs4 python-cffi-backend python-chardet python-cherrypy3 python-cryptography python-css-parser python-cssselect
  python-cssutils python-dnspython python-enum34 python-feedparser python-html5-parser python-html5lib python-ipaddress python-libxml2 python-lxml
  python-markdown python-mechanize python-msgpack python-netifaces python-openssl python-pygments python-pyqt5 python-pyqt5.qtsvg
  python-pyqt5.qtwebkit python-regex python-repoze.lru python-routes python-simplejson python-sip python-soupsieve python-utidylib
  python-webencodings python-webob python-yaml
0 upgraded, 47 newly installed, 0 to remove and 0 not upgraded.
Need to get 36.2 MB of archives.
After this operation, 107 MB of additional disk space will be used.
[..]
Processing triggers for shared-mime-info (1.10-1) ...
Processing triggers for desktop-file-utils (0.23-4) ...

Dec  3 03:39:08 z30b NetworkManager[597]: <info>  [1575340748.2169] manager: sleep: sleep requested (sleeping: no  enabled: yes)
Dec  3 03:39:08 z30b NetworkManager[597]: <info>  [1575340748.2170] manager: NetworkManager state is now ASLEEP
Dec  3 03:39:08 z30b kernel: [20581.844090] PM: hibernation entry
Dec  3 03:39:08 z30b kernel: [20581.844319] (NULL device *): firmware: direct-loading firmware intel/ibt-hw-37.7.10-fw-1.0.1.2d.d.bseq
Dec  3 03:39:08 z30b kernel: [20581.844512] (NULL device *): firmware: direct-loading firmware iwlwifi-3160-17.ucode
Dec  3 03:39:08 z30b kernel: [20581.844522] PM: Syncing filesystems ...

Dec  3 08:10:16 z30b kernel: [20581.847585] PM: done.
Dec  3 08:10:16 z30b kernel: [20581.847586] Freezing user space processes ... (elapsed 0.001 seconds) done.
Dec  3 08:10:16 z30b kernel: [20581.849221] OOM killer disabled.
Dec  3 08:10:16 z30b kernel: [20581.850120] PM: Preallocating image memory... done (allocated 888167 pages)
Dec  3 08:10:16 z30b kernel: [20582.190887] PM: Allocated 3552668 kbytes in 0.34 seconds (10449.02 MB/s)
Dec  3 08:10:16 z30b kernel: [20582.190888] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done.
Dec  3 08:10:16 z30b kernel: [20582.192449] Suspending console(s) (use no_console_suspend to debug)
Dec  3 08:10:16 z30b kernel: [20582.192481] wlp2s0: deauthenticating from e0:cb:4e:86:81:0b by local choice (Reason: 3=DEAUTH_LEAVING)
Dec  3 08:10:16 z30b kernel: [20583.508440] Disabling non-boot CPUs ...
Dec  3 08:10:16 z30b kernel: [20583.528038] smpboot: CPU 1 is now offline
Dec  3 08:10:16 z30b kernel: [20583.547916] smpboot: CPU 2 is now offline
Dec  3 08:10:16 z30b kernel: [20583.571499] smpboot: CPU 3 is now offline
Dec  3 08:10:16 z30b kernel: [20583.574695] PM: Creating hibernation image:
Dec  3 08:10:16 z30b kernel: [20584.270412] PM: Need to copy 884784 pages
Dec  3 08:10:16 z30b kernel: [20583.577105] Enabling non-boot CPUs ...
Dec  3 08:10:16 z30b kernel: [20583.577175] x86: Booting SMP configuration:
Dec  3 08:10:16 z30b kernel: [20583.577177] smpboot: Booting Node 0 Processor 1 APIC 0x1
Dec  3 08:10:16 z30b kernel: [20583.578449]  cache: parent cpu1 should not be sleeping
Dec  3 08:10:16 z30b kernel: [20583.579305] CPU1 is up
Dec  3 08:10:16 z30b kernel: [20583.579354] smpboot: Booting Node 0 Processor 2 APIC 0x2
Dec  3 08:10:16 z30b kernel: [20583.580575]  cache: parent cpu2 should not be sleeping
Dec  3 08:10:16 z30b kernel: [20583.581020] CPU2 is up
Dec  3 08:10:16 z30b kernel: [20583.581062] smpboot: Booting Node 0 Processor 3 APIC 0x3
Dec  3 08:10:16 z30b kernel: [20583.582257]  cache: parent cpu3 should not be sleeping
Dec  3 08:10:16 z30b kernel: [20583.582714] CPU3 is up
Dec  3 08:10:16 z30b kernel: [20583.732716] usb usb1: root hub lost power or was reset
Dec  3 08:10:16 z30b kernel: [20583.732719] usb usb2: root hub lost power or was reset
Dec  3 08:10:16 z30b kernel: [20583.733961] iwlwifi 0000:02:00.0: RF_KILL bit toggled to enable radio.
Dec  3 08:10:16 z30b kernel: [20583.738325] ACPI: button: The lid device is not compliant to SW_LID.
Dec  3 08:10:16 z30b kernel: [20583.743003] sd 0:0:0:0: [sda] Starting disk
Dec  3 08:10:16 z30b kernel: [20584.055181] ata1: SATA link up 6.0 Gbps (SStatus 133 SControl 300)

tingo@z30b:~$ sudo apt install seahorse
Reading package lists... Done
Building dependency tree      
Reading state information... Done
The following NEW packages will be installed:
  seahorse
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 1,178 kB of archives.
After this operation, 7,435 kB of additional disk space will be used.
[..]
Selecting previously unselected package seahorse.
(Reading database ... 166611 files and directories currently installed.)
Preparing to unpack .../seahorse_3.30.1.1-1_amd64.deb ...
Unpacking seahorse (3.30.1.1-1) ...
Setting up seahorse (3.30.1.1-1) ...
Processing triggers for desktop-file-utils (0.23-4) ...
Processing triggers for mime-support (3.62) ...
Processing triggers for hicolor-icon-theme (0.17-2) ...
Processing triggers for libglib2.0-0:amd64 (2.58.3-2+deb10u2) ...
Processing triggers for man-db (2.8.5-2) ...

tingo@z30b:~$ cat /etc/debian_version
10.2

tingo@z30b:~$ uname -a
Linux z30b 4.19.0-6-amd64 #1 SMP Debian 4.19.67-2+deb10u2 (2019-11-11) x86_64 GNU/Linux

tingo@z30b:~$ sudo apt upgrade
Reading package lists... Done
Building dependency tree      
Reading state information... Done
Calculating upgrade... Done
The following packages will be upgraded:
  base-files cron distro-info-data fonts-opensymbol ghostscript gir1.2-javascriptcoregtk-4.0 gir1.2-webkit2-4.0 gnustep-base-common
  gnustep-base-runtime libfreetype6 libglib2.0-0 libglib2.0-bin libglib2.0-data libgnustep-base1.26 libgs9 libgs9-common
  libjavascriptcoregtk-4.0-18 libmariadb3 libncurses5 libncurses6 libncursesw5 libncursesw6 libnm0 libnss-systemd libpam-systemd libpython2.7
  libpython2.7-minimal libpython2.7-stdlib libreoffice libreoffice-avmedia-backend-gstreamer libreoffice-base libreoffice-base-core
  libreoffice-base-drivers libreoffice-calc libreoffice-common libreoffice-core libreoffice-draw libreoffice-gtk2 libreoffice-help-common
  libreoffice-help-en-us libreoffice-impress libreoffice-java-common libreoffice-librelogo libreoffice-math libreoffice-nlpsolver
  libreoffice-report-builder libreoffice-report-builder-bin libreoffice-script-provider-bsh libreoffice-script-provider-js
  libreoffice-script-provider-python libreoffice-sdbc-firebird libreoffice-sdbc-hsqldb libreoffice-sdbc-postgresql libreoffice-style-colibre
  libreoffice-style-tango libreoffice-wiki-publisher libreoffice-writer libsystemd0 libtinfo5 libtinfo6 libudev1 libwebkit2gtk-4.0-37 libxslt1.1
  linux-image-4.19.0-6-amd64 linux-libc-dev mariadb-common ncurses-base ncurses-bin ncurses-term network-manager python2.7 python2.7-minimal
  python3-cryptography python3-uno systemd systemd-sysv udev uno-libs3 ure xsltproc
80 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 204 MB of archives.
After this operation, 66.6 kB of additional disk space will be used.
[..]
Processing triggers for initramfs-tools (0.133+deb10u1) ...
update-initramfs: Generating /boot/initrd.img-4.19.0-6-amd64

tingo@z30b:~$ sudo apt upgrade
Reading package lists... Done
Building dependency tree      
Reading state information... Done
Calculating upgrade... Done
The following packages will be upgraded:
  chromium chromium-common chromium-sandbox
3 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 55.5 MB of archives.
After this operation, 4,647 kB of additional disk space will be used.
[..]
Processing triggers for man-db (2.8.5-2) ...
Processing triggers for desktop-file-utils (0.23-4) ...

tingo@z30b:~$ sudo apt upgrade
Reading package lists... Done
Building dependency tree      
Reading state information... Done
Calculating upgrade... Done
The following NEW packages will be installed:
  xdg-dbus-proxy
The following packages will be upgraded:
  file firefox-esr gir1.2-javascriptcoregtk-4.0 gir1.2-webkit2-4.0 libarchive13 libfribidi0 libjavascriptcoregtk-4.0-18 libmagic-mgc libmagic1
  libqt5concurrent5 libqt5core5a libqt5dbus5 libqt5gui5 libqt5network5 libqt5opengl5 libqt5printsupport5 libqt5sql5 libqt5sql5-sqlite
  libqt5widgets5 libqt5xml5 libwebkit2gtk-4.0-37 qt5-gtk-platformtheme
22 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 74.7 MB of archives.
After this operation, 17.1 MB of additional disk space will be used.
[..]
Processing triggers for desktop-file-utils (0.23-4) ...

tingo@z30b:~$ sudo apt upgrade
Reading package lists... Done
Building dependency tree      
Reading state information... Done
Calculating upgrade... Done
The following packages will be upgraded:
  openjdk-11-jre openjdk-11-jre-headless
2 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 37.3 MB of archives.
After this operation, 146 kB of additional disk space will be used.
[..]
Processing triggers for desktop-file-utils (0.23-4) ...

tingo@z30b:~$ sudo apt upgrade
Reading package lists... Done
Building dependency tree      
Reading state information... Done
Calculating upgrade... Done
The following packages will be upgraded:
  libssl1.1 libunbound8 openssh-client openssh-server openssh-sftp-server openssl sudo
7 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 5,265 kB of archives.
After this operation, 1,024 B disk space will be freed.
[..]
Processing triggers for libc-bin (2.28-10) ...

tingo@z30b:~$ grep . /sys/devices/system/cpu/vulnerabilities/*
/sys/devices/system/cpu/vulnerabilities/l1tf:Mitigation: PTE Inversion; VMX: conditional cache flushes, SMT vulnerable
/sys/devices/system/cpu/vulnerabilities/mds:Vulnerable: Clear CPU buffers attempted, no microcode; SMT vulnerable
/sys/devices/system/cpu/vulnerabilities/meltdown:Mitigation: PTI
/sys/devices/system/cpu/vulnerabilities/spec_store_bypass:Vulnerable
/sys/devices/system/cpu/vulnerabilities/spectre_v1:Mitigation: usercopy/swapgs barriers and __user pointer sanitization
/sys/devices/system/cpu/vulnerabilities/spectre_v2:Mitigation: Full generic retpoline, IBPB: conditional, IBRS_FW, STIBP: conditional, RSB filling

tingo@z30b:~/work/spectre-meltdown-checker$ sudo ./spectre-meltdown-checker.sh --no-color
Spectre and Meltdown mitigation detection tool v0.42-7-gf5ec320

Checking for vulnerabilities on current system
Kernel is Linux 4.19.0-6-amd64 #1 SMP Debian 4.19.67-2+deb10u1 (2019-09-20) x86_64
CPU is Intel(R) Core(TM) i5-5200U CPU @ 2.20GHz

Hardware check
* Hardware support (CPU microcode) for mitigation techniques
  * Indirect Branch Restricted Speculation (IBRS)
    * SPEC_CTRL MSR is available: YES
    * CPU indicates IBRS capability: YES (SPEC_CTRL feature bit)
  * Indirect Branch Prediction Barrier (IBPB)
    * PRED_CMD MSR is available: YES
    * CPU indicates IBPB capability: YES (SPEC_CTRL feature bit)
  * Single Thread Indirect Branch Predictors (STIBP)
    * SPEC_CTRL MSR is available: YES
    * CPU indicates STIBP capability: YES (Intel STIBP feature bit)
  * Speculative Store Bypass Disable (SSBD)
    * CPU indicates SSBD capability: NO
  * L1 data cache invalidation
    * FLUSH_CMD MSR is available: NO
    * CPU indicates L1D flush capability: NO
  * Microarchitectural Data Sampling
    * VERW instruction is available: NO
  * Enhanced IBRS (IBRS_ALL)
    * CPU indicates ARCH_CAPABILITIES MSR availability: NO
    * ARCH_CAPABILITIES MSR advertises IBRS_ALL capability: NO
  * CPU explicitly indicates not being vulnerable to Meltdown/L1TF (RDCL_NO): NO
  * CPU explicitly indicates not being vulnerable to Variant 4 (SSB_NO): NO
  * CPU/Hypervisor indicates L1D flushing is not necessary on this system: NO
  * Hypervisor indicates host CPU might be vulnerable to RSB underflow (RSBA): NO
  * CPU explicitly indicates not being vulnerable to Microarchitectural Data Sampling (MDS_NO): NO
  * CPU supports Software Guard Extensions (SGX): NO
  * CPU microcode is known to cause stability problems: NO (model 0x3d family 0x6 stepping 0x4 ucode 0x2a cpuid 0x306d4)
  * CPU microcode is the latest known available version: NO (latest version is 0x2d dated 2019/03/07 according to builtin MCExtractor DB v112 - 2019/05/22)
* CPU vulnerability to the speculative execution attack variants
  * Vulnerable to CVE-2017-5753 (Spectre Variant 1, bounds check bypass): YES
  * Vulnerable to CVE-2017-5715 (Spectre Variant 2, branch target injection): YES
  * Vulnerable to CVE-2017-5754 (Variant 3, Meltdown, rogue data cache load): YES
  * Vulnerable to CVE-2018-3640 (Variant 3a, rogue system register read): YES
  * Vulnerable to CVE-2018-3639 (Variant 4, speculative store bypass): YES
  * Vulnerable to CVE-2018-3615 (Foreshadow (SGX), L1 terminal fault): NO
  * Vulnerable to CVE-2018-3620 (Foreshadow-NG (OS), L1 terminal fault): YES
  * Vulnerable to CVE-2018-3646 (Foreshadow-NG (VMM), L1 terminal fault): YES
  * Vulnerable to CVE-2018-12126 (Fallout, microarchitectural store buffer data sampling (MSBDS)): YES
  * Vulnerable to CVE-2018-12130 (ZombieLoad, microarchitectural fill buffer data sampling (MFBDS)): YES
  * Vulnerable to CVE-2018-12127 (RIDL, microarchitectural load port data sampling (MLPDS)): YES
  * Vulnerable to CVE-2019-11091 (RIDL, microarchitectural data sampling uncacheable memory (MDSUM)): YES

CVE-2017-5753 aka 'Spectre Variant 1, bounds check bypass'
* Mitigated according to the /sys interface: YES (Mitigation: usercopy/swapgs barriers and __user pointer sanitization)
* Kernel has array_index_mask_nospec: YES (1 occurrence(s) found of x86 64 bits array_index_mask_nospec())
* Kernel has the Red Hat/Ubuntu patch: NO
* Kernel has mask_nospec64 (arm64): NO
> STATUS: NOT VULNERABLE (Mitigation: usercopy/swapgs barriers and __user pointer sanitization)

CVE-2017-5715 aka 'Spectre Variant 2, branch target injection'
* Mitigated according to the /sys interface: YES (Mitigation: Full generic retpoline, IBPB: conditional, IBRS_FW, STIBP: conditional, RSB filling)
* Mitigation 1
  * Kernel is compiled with IBRS support: YES
    * IBRS enabled and active: YES (for firmware code only)
  * Kernel is compiled with IBPB support: YES
    * IBPB enabled and active: YES
* Mitigation 2
  * Kernel has branch predictor hardening (arm): NO
  * Kernel compiled with retpoline option: YES
    * Kernel compiled with a retpoline-aware compiler: YES (kernel reports full retpoline compilation)
> STATUS: NOT VULNERABLE (Full retpoline + IBPB are mitigating the vulnerability)

CVE-2017-5754 aka 'Variant 3, Meltdown, rogue data cache load'
* Mitigated according to the /sys interface: YES (Mitigation: PTI)
* Kernel supports Page Table Isolation (PTI): YES
  * PTI enabled and active: YES
  * Reduced performance impact of PTI: YES (CPU supports INVPCID, performance impact of PTI will be greatly reduced)
* Running as a Xen PV DomU: NO
> STATUS: NOT VULNERABLE (Mitigation: PTI)

CVE-2018-3640 aka 'Variant 3a, rogue system register read'
* CPU microcode mitigates the vulnerability: NO
> STATUS: VULNERABLE (an up-to-date CPU microcode is needed to mitigate this vulnerability)

CVE-2018-3639 aka 'Variant 4, speculative store bypass'
* Mitigated according to the /sys interface: NO (Vulnerable)
* Kernel supports disabling speculative store bypass (SSB): YES (found in /proc/self/status)
* SSB mitigation is enabled and active: NO
> STATUS: VULNERABLE (Your CPU doesn't support SSBD)

CVE-2018-3615 aka 'Foreshadow (SGX), L1 terminal fault'
* CPU microcode mitigates the vulnerability: N/A
> STATUS: NOT VULNERABLE (your CPU vendor reported your CPU model as not vulnerable)

CVE-2018-3620 aka 'Foreshadow-NG (OS), L1 terminal fault'
* Mitigated according to the /sys interface: YES (Mitigation: PTE Inversion; VMX: conditional cache flushes, SMT vulnerable)
* Kernel supports PTE inversion: YES (found in kernel image)
* PTE inversion enabled and active: YES
> STATUS: NOT VULNERABLE (Mitigation: PTE Inversion; VMX: conditional cache flushes, SMT vulnerable)

CVE-2018-3646 aka 'Foreshadow-NG (VMM), L1 terminal fault'
* Information from the /sys interface: Mitigation: PTE Inversion; VMX: conditional cache flushes, SMT vulnerable
* This system is a host running a hypervisor: NO
* Mitigation 1 (KVM)
  * EPT is disabled: NO
* Mitigation 2
  * L1D flush is supported by kernel: YES (found flush_l1d in kernel image)
  * L1D flush enabled: YES (conditional flushes)
  * Hardware-backed L1D flush supported: NO (flush will be done in software, this is slower)
  * Hyper-Threading (SMT) is enabled: YES
> STATUS: NOT VULNERABLE (this system is not running a hypervisor)

CVE-2018-12126 aka 'Fallout, microarchitectural store buffer data sampling (MSBDS)'
* Mitigated according to the /sys interface: NO (Vulnerable: Clear CPU buffers attempted, no microcode; SMT vulnerable)
* Kernel supports using MD_CLEAR mitigation: YES (found md_clear implementation evidence in kernel image)
* Kernel mitigation is enabled and active: NO
* SMT is either mitigated or disabled: NO
> STATUS: VULNERABLE (Your kernel supports mitigation, but your CPU microcode also needs to be updated to mitigate the vulnerability)

CVE-2018-12130 aka 'ZombieLoad, microarchitectural fill buffer data sampling (MFBDS)'
* Mitigated according to the /sys interface: NO (Vulnerable: Clear CPU buffers attempted, no microcode; SMT vulnerable)
* Kernel supports using MD_CLEAR mitigation: YES (found md_clear implementation evidence in kernel image)
* Kernel mitigation is enabled and active: NO
* SMT is either mitigated or disabled: NO
> STATUS: VULNERABLE (Your kernel supports mitigation, but your CPU microcode also needs to be updated to mitigate the vulnerability)

CVE-2018-12127 aka 'RIDL, microarchitectural load port data sampling (MLPDS)'
* Mitigated according to the /sys interface: NO (Vulnerable: Clear CPU buffers attempted, no microcode; SMT vulnerable)
* Kernel supports using MD_CLEAR mitigation: YES (found md_clear implementation evidence in kernel image)
* Kernel mitigation is enabled and active: NO
* SMT is either mitigated or disabled: NO
> STATUS: VULNERABLE (Your kernel supports mitigation, but your CPU microcode also needs to be updated to mitigate the vulnerability)

CVE-2019-11091 aka 'RIDL, microarchitectural data sampling uncacheable memory (MDSUM)'
* Mitigated according to the /sys interface: NO (Vulnerable: Clear CPU buffers attempted, no microcode; SMT vulnerable)
* Kernel supports using MD_CLEAR mitigation: YES (found md_clear implementation evidence in kernel image)
* Kernel mitigation is enabled and active: NO
* SMT is either mitigated or disabled: NO
> STATUS: VULNERABLE (Your kernel supports mitigation, but your CPU microcode also needs to be updated to mitigate the vulnerability)

> SUMMARY: CVE-2017-5753:OK CVE-2017-5715:OK CVE-2017-5754:OK CVE-2018-3640:KO CVE-2018-3639:KO CVE-2018-3615:OK CVE-2018-3620:OK CVE-2018-3646:OK CVE-2018-12126:KO CVE-2018-12130:KO CVE-2018-12127:KO CVE-2019-11091:KO

Need more detailed information about mitigation options? Use --explain
A false sense of security is worse than no security at all, see --disclaimer

tingo@z30b:~$ uname -a
Linux z30b 4.19.0-6-amd64 #1 SMP Debian 4.19.67-2+deb10u1 (2019-09-20) x86_64 GNU/Linux

tingo@z30b:~$ sudo apt upgrade
Reading package lists... Done
Building dependency tree      
Reading state information... Done
Calculating upgrade... Done
The following packages will be upgraded:
  e2fslibs e2fsprogs e2fsprogs-l10n exim4-base exim4-config exim4-daemon-light libcom-err2 libcomerr2 libexpat1 libext2fs2 libss2 libssl1.1
  linux-image-4.19.0-6-amd64 linux-libc-dev openssl tzdata wpasupplicant
17 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 56.8 MB of archives.
After this operation, 15.4 kB disk space will be freed.
[..]
Processing triggers for initramfs-tools (0.133+deb10u1) ...
update-initramfs: Generating /boot/initrd.img-4.19.0-6-amd64

tingo@z30b:~$ sudo apt install curl
Reading package lists... Done
Building dependency tree      
Reading state information... Done
The following NEW packages will be installed:
  curl
0 upgraded, 1 newly installed, 0 to remove and 2 not upgraded.
Need to get 264 kB of archives.
After this operation, 410 kB of additional disk space will be used.
[..]
Selecting previously unselected package curl.
(Reading database ... 166181 files and directories currently installed.)
Preparing to unpack .../curl_7.64.0-4_amd64.deb ...
Unpacking curl (7.64.0-4) ...
Setting up curl (7.64.0-4) ...
Processing triggers for man-db (2.8.5-2) ...

tingo@z30b:~$ sudo apt install freecad
Reading package lists... Done
Building dependency tree      
Reading state information... Done
The following packages were automatically installed and are no longer required:
  irqbalance linux-image-4.9.0-9-amd64 runit-helper
Use 'sudo apt autoremove' to remove them.
The following additional packages will be installed:
  autoconf automake autotools-dev blt calculix-ccx fonts-lyx freecad-common freecad-python2 freecad-runtime gdal-data gfortran gfortran-8
  ibverbs-providers libaec0 libarmadillo9 libarpack2 libboost-program-options1.67.0 libboost-python1.67.0 libboost-regex1.67.0 libcaf-openmpi-3
  libcharls2 libclang1-7 libcoarrays-dev libcoarrays-openmpi-dev libcoin80c libdap25 libdapclient6v5 libdapserver7v5 libepsilon1
  libevent-core-2.1-6 libevent-pthreads-2.1-6 libfabric1 libfreecad-python2-0.18 libfreexl1 libfyba0 libgdal20 libgeos-3.7.1 libgeos-c1v5
  libgeotiff2 libgfortran-8-dev libhdf4-0-alt libhdf5-103 libhdf5-openmpi-103 libhwloc-dev libhwloc-plugins libhwloc5 libibverbs-dev libibverbs1
  libjs-jquery-ui libkmlbase1 libkmlconvenience1 libkmldom1 libkmlengine1 libkmlregionator1 libkmlxsd1 libltdl-dev libmedc11 libnetcdf-c++4
  libnetcdf13 libnl-3-dev libnl-route-3-dev libnuma-dev libocct-data-exchange-7.3 libocct-foundation-7.3 libocct-modeling-algorithms-7.3
  libocct-modeling-data-7.3 libocct-ocaf-7.3 libocct-visualization-7.3 libodbc1 libogdi3.2 libopengl0 libopenmpi-dev libopenmpi3 libpmix2 libproj13
  libpsm-infinipath1 libpsm2-2 libpyside2-5.11 libqhull7 libqt5concurrent5 libqt5opengl5 libqt5xml5 libqt5xmlpatterns5 librdmacm1 libshiboken2-5.11
  libsigsegv2 libsoqt520 libspatialite7 libspnav0 libspooles2.2 libsuperlu5 libsz2 libtbb2 libtool liburiparser1 libvtk7.1 libxerces-c3.2
  libzipios++0v5 m4 ocl-icd-libopencl1 odbcinst odbcinst1debian2 openmpi-bin openmpi-common proj-bin proj-data python-backports.functools-lru-cache
  python-cycler python-kiwisolver python-matplotlib python-matplotlib2-data python-numpy python-olefile python-pil python-pivy python-pkg-resources
  python-pyparsing python-pyside2.qtcore python-pyside2.qtgui python-pyside2.qtopengl python-pyside2.qtsvg python-pyside2.qtwidgets
  python-pyside2uic python-subprocess32 python-tk python-tz shiboken2 tk8.6-blt2.5 ttf-bitstream-vera
Suggested packages:
  autoconf-archive gnu-standards autoconf-doc gettext blt-demo freecad-doc povray python-collada gfortran-multilib gfortran-doc gfortran-8-multilib
  gfortran-8-doc libgfortran5-dbg libopenal0a libsimage-dev geotiff-bin gdal-bin libgeotiff-epsg libhdf4-doc libhdf4-alt-dev hdf4-tools
  libhwloc-contrib-plugins libjs-jquery-ui-docs libtool-doc libmed-doc libmed-tools libmyodbc odbc-postgresql tdsodbc unixodbc-bin ogdi-bin
  openmpi-doc spacenavd gcj-jdk mpi-default-bin vtk7-doc vtk7-examples m4-doc opencl-icd python-cycler-doc dvipng ffmpeg inkscape ipython
  python-cairocffi python-configobj python-excelerator python-gobject-2 python-matplotlib2-doc python-nose python-qt4 python-scipy python-sip
  python-tornado python-traits python-wxgtk3.0 texlive-extra-utils texlive-latex-extra ttf-staypuft python-dev python-pytest python-numpy-dbg
  python-numpy-doc python-pil-doc python-pil-dbg python-setuptools python-pyparsing-doc python-pyside2-doc python-tk-dbg
The following NEW packages will be installed:
  autoconf automake autotools-dev blt calculix-ccx fonts-lyx freecad freecad-common freecad-python2 freecad-runtime gdal-data gfortran gfortran-8
  ibverbs-providers libaec0 libarmadillo9 libarpack2 libboost-program-options1.67.0 libboost-python1.67.0 libboost-regex1.67.0 libcaf-openmpi-3
  libcharls2 libclang1-7 libcoarrays-dev libcoarrays-openmpi-dev libcoin80c libdap25 libdapclient6v5 libdapserver7v5 libepsilon1
  libevent-core-2.1-6 libevent-pthreads-2.1-6 libfabric1 libfreecad-python2-0.18 libfreexl1 libfyba0 libgdal20 libgeos-3.7.1 libgeos-c1v5
  libgeotiff2 libgfortran-8-dev libhdf4-0-alt libhdf5-103 libhdf5-openmpi-103 libhwloc-dev libhwloc-plugins libhwloc5 libibverbs-dev libibverbs1
  libjs-jquery-ui libkmlbase1 libkmlconvenience1 libkmldom1 libkmlengine1 libkmlregionator1 libkmlxsd1 libltdl-dev libmedc11 libnetcdf-c++4
  libnetcdf13 libnl-3-dev libnl-route-3-dev libnuma-dev libocct-data-exchange-7.3 libocct-foundation-7.3 libocct-modeling-algorithms-7.3
  libocct-modeling-data-7.3 libocct-ocaf-7.3 libocct-visualization-7.3 libodbc1 libogdi3.2 libopengl0 libopenmpi-dev libopenmpi3 libpmix2 libproj13
  libpsm-infinipath1 libpsm2-2 libpyside2-5.11 libqhull7 libqt5concurrent5 libqt5opengl5 libqt5xml5 libqt5xmlpatterns5 librdmacm1 libshiboken2-5.11
  libsigsegv2 libsoqt520 libspatialite7 libspnav0 libspooles2.2 libsuperlu5 libsz2 libtbb2 libtool liburiparser1 libvtk7.1 libxerces-c3.2
  libzipios++0v5 m4 ocl-icd-libopencl1 odbcinst odbcinst1debian2 openmpi-bin openmpi-common proj-bin proj-data python-backports.functools-lru-cache
  python-cycler python-kiwisolver python-matplotlib python-matplotlib2-data python-numpy python-olefile python-pil python-pivy python-pkg-resources
  python-pyparsing python-pyside2.qtcore python-pyside2.qtgui python-pyside2.qtopengl python-pyside2.qtsvg python-pyside2.qtwidgets
  python-pyside2uic python-subprocess32 python-tk python-tz shiboken2 tk8.6-blt2.5 ttf-bitstream-vera
0 upgraded, 130 newly installed, 0 to remove and 0 not upgraded.
Need to get 162 MB of archives.
After this operation, 682 MB of additional disk space will be used.
[..]
update-alternatives: using /usr/lib/freecad/bin/freecad-python2 to provide /usr/bin/freecad (freecad) in auto mode
Setting up freecad (0.18~pre1+dfsg1-5) ...
[..]
Processing triggers for fontconfig (2.13.1-2) ...

tingo@z30b:~$ sudo apt install firmware-misc-nonfree
Reading package lists... Done
Building dependency tree      
Reading state information... Done
The following packages were automatically installed and are no longer required:
  irqbalance linux-image-4.9.0-9-amd64 runit-helper
Use 'sudo apt autoremove' to remove them.
The following NEW packages will be installed:
  firmware-misc-nonfree
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 3,338 kB of archives.
After this operation, 12.0 MB of additional disk space will be used.
[..]
Preparing to unpack .../firmware-misc-nonfree_20190114-2_all.deb ...
Unpacking firmware-misc-nonfree (20190114-2) ...
Setting up firmware-misc-nonfree (20190114-2) ...
update-initramfs: deferring update (trigger activated)
Processing triggers for initramfs-tools (0.133+deb10u1) ...
update-initramfs: Generating /boot/initrd.img-4.19.0-6-amd64

tingo@z30b:~$ sudo usermod -a -G adm tingo
tingo@z30b:~$ groups tingo
tingo : tingo adm dialout cdrom floppy sudo audio dip video plugdev netdev bluetooth lpadmin scanner bsdusers

Sep 15 19:01:08 z30b kernel: [    1.945322] i915 0000:00:02.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem
Sep 15 19:01:08 z30b kernel: [    1.962296] ------------[ cut here ]------------
Sep 15 19:01:08 z30b kernel: [    1.962303] WARNING: CPU: 1 PID: 133 at kernel/workqueue.c:2911 __flush_work.cold.53+0x1f/0x29
Sep 15 19:01:08 z30b kernel: [    1.962304] Modules linked in: i915(+) crc32c_intel i2c_algo_bit ahci rtsx_pci_sdmmc libahci mmc_core libata xhci_pci drm_kms_helper xhci_hcd aesni_intel aes_x86_64 crypto_simd cryptd usbcore glue_helper scsi_mod drm rtsx_pci psmouse e1000e(+) lpc_ich usb_common thermal video wmi button
Sep 15 19:01:08 z30b kernel: [    1.962319] CPU: 1 PID: 133 Comm: kworker/1:2 Not tainted 4.19.0-6-amd64 #1 Debian 4.19.67-2
Sep 15 19:01:08 z30b kernel: [    1.962320] Hardware name: TOSHIBA SATELLITE Z30-B/SATELLITE Z30-B, BIOS Version 6.50   03/06/2018
Sep 15 19:01:08 z30b kernel: [    1.962358] Workqueue: events i915_hotplug_work_func [i915]
Sep 15 19:01:08 z30b kernel: [    1.962362] RIP: 0010:__flush_work.cold.53+0x1f/0x29
Sep 15 19:01:08 z30b kernel: [    1.962363] Code: e9 27 04 00 0f 0b e9 7a d3 ff ff 48 c7 c7 68 07 04 86 e8 d6 27 04 00 0f 0b e9 71 d6 ff ff 48 c7 c7 68 07 04 86 e8 c3 27 04 00 <0f> 0b 45 31 ed e9 5b d6 ff ff 49 8d b4 24 b0 00 00 00 48 c7 c7 18
Sep 15 19:01:08 z30b kernel: [    1.962364] RSP: 0018:ffffbd78c1e47b88 EFLAGS: 00010246
Sep 15 19:01:08 z30b kernel: [    1.962365] RAX: 0000000000000024 RBX: ffff98bc05ad8650 RCX: ffffffff8624dea8
Sep 15 19:01:08 z30b kernel: [    1.962366] RDX: 0000000000000000 RSI: 0000000000000092 RDI: 0000000000000247
Sep 15 19:01:08 z30b kernel: [    1.962366] RBP: ffff98bc05ad8650 R08: 000000000000024c R09: 0000000000000004
Sep 15 19:01:08 z30b kernel: [    1.962367] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001
Sep 15 19:01:08 z30b kernel: [    1.962368] R13: 0000000000000001 R14: ffffffff852983f0 R15: 0000000000000002
Sep 15 19:01:08 z30b kernel: [    1.962369] FS:  0000000000000000(0000) GS:ffff98bc11040000(0000) knlGS:0000000000000000
Sep 15 19:01:08 z30b kernel: [    1.962369] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Sep 15 19:01:08 z30b kernel: [    1.962370] CR2: 00007ffd2a9b8f48 CR3: 000000021700a004 CR4: 00000000003606e0
Sep 15 19:01:08 z30b kernel: [    1.962371] Call Trace:
Sep 15 19:01:08 z30b kernel: [    1.962375]  ? get_work_pool+0x40/0x40
Sep 15 19:01:08 z30b kernel: [    1.962377]  __cancel_work_timer+0x10a/0x190
Sep 15 19:01:08 z30b kernel: [    1.962383]  ? drm_dp_dpcd_access+0xe7/0x110 [drm_kms_helper]
Sep 15 19:01:08 z30b kernel: [    1.962388]  drm_dp_cec_unset_edid+0x36/0xe0 [drm_kms_helper]
Sep 15 19:01:08 z30b kernel: [    1.962420]  intel_dp_unset_edid+0x1d/0x40 [i915]
Sep 15 19:01:08 z30b kernel: [    1.962449]  intel_dp_set_edid+0x18/0x80 [i915]
Sep 15 19:01:08 z30b kernel: [    1.962475]  intel_dp_detect+0x20a/0x570 [i915]
Sep 15 19:01:08 z30b kernel: [    1.962481]  drm_helper_probe_detect_ctx+0x44/0xe0 [drm_kms_helper]
Sep 15 19:01:08 z30b kernel: [    1.962510]  intel_encoder_hotplug+0x30/0x90 [i915]
Sep 15 19:01:08 z30b kernel: [    1.962537]  intel_ddi_hotplug+0x2e/0x2f0 [i915]
Sep 15 19:01:08 z30b kernel: [    1.962541]  ? __switch_to_asm+0x35/0x70
Sep 15 19:01:08 z30b kernel: [    1.962542]  ? __switch_to_asm+0x41/0x70
Sep 15 19:01:08 z30b kernel: [    1.962544]  ? __switch_to_asm+0x35/0x70
Sep 15 19:01:08 z30b kernel: [    1.962545]  ? __switch_to_asm+0x41/0x70
Sep 15 19:01:08 z30b kernel: [    1.962547]  ? __switch_to_asm+0x35/0x70
Sep 15 19:01:08 z30b kernel: [    1.962548]  ? __switch_to_asm+0x41/0x70
Sep 15 19:01:08 z30b kernel: [    1.962561]  ? __drm_connector_put_safe+0x16/0x50 [drm]
Sep 15 19:01:08 z30b kernel: [    1.962588]  i915_hotplug_work_func+0x152/0x1e0 [i915]
Sep 15 19:01:08 z30b kernel: [    1.962591]  process_one_work+0x1a7/0x3a0
Sep 15 19:01:08 z30b kernel: [    1.962593]  worker_thread+0x30/0x390
Sep 15 19:01:08 z30b kernel: [    1.962595]  ? create_worker+0x1a0/0x1a0
Sep 15 19:01:08 z30b kernel: [    1.962596]  kthread+0x112/0x130
Sep 15 19:01:08 z30b kernel: [    1.962598]  ? kthread_bind+0x30/0x30
Sep 15 19:01:08 z30b kernel: [    1.962600]  ret_from_fork+0x35/0x40
Sep 15 19:01:08 z30b kernel: [    1.962602] ---[ end trace 9d9c2eeb552af8b2 ]---
Sep 15 19:01:08 z30b kernel: [    1.962603] ------------[ cut here ]------------
Sep 15 19:01:08 z30b kernel: [    1.962607] WARNING: CPU: 1 PID: 133 at kernel/workqueue.c:2911 __flush_work.cold.53+0x1f/0x29
Sep 15 19:01:08 z30b kernel: [    1.962608] Modules linked in: i915(+) crc32c_intel i2c_algo_bit ahci rtsx_pci_sdmmc libahci mmc_core libata xhci_pci drm_kms_helper xhci_hcd aesni_intel aes_x86_64 crypto_simd cryptd usbcore glue_helper scsi_mod drm rtsx_pci psmouse e1000e(+) lpc_ich usb_common thermal video wmi button
Sep 15 19:01:08 z30b kernel: [    1.962621] CPU: 1 PID: 133 Comm: kworker/1:2 Tainted: G        W         4.19.0-6-amd64 #1 Debian 4.19.67-2
Sep 15 19:01:08 z30b kernel: [    1.962621] Hardware name: TOSHIBA SATELLITE Z30-B/SATELLITE Z30-B, BIOS Version 6.50   03/06/2018
Sep 15 19:01:08 z30b kernel: [    1.962646] Workqueue: events i915_hotplug_work_func [i915]
Sep 15 19:01:08 z30b kernel: [    1.962648] RIP: 0010:__flush_work.cold.53+0x1f/0x29
Sep 15 19:01:08 z30b kernel: [    1.962649] Code: e9 27 04 00 0f 0b e9 7a d3 ff ff 48 c7 c7 68 07 04 86 e8 d6 27 04 00 0f 0b e9 71 d6 ff ff 48 c7 c7 68 07 04 86 e8 c3 27 04 00 <0f> 0b 45 31 ed e9 5b d6 ff ff 49 8d b4 24 b0 00 00 00 48 c7 c7 18
Sep 15 19:01:08 z30b kernel: [    1.962650] RSP: 0018:ffffbd78c1e47bb0 EFLAGS: 00010246
Sep 15 19:01:08 z30b kernel: [    1.962651] RAX: 0000000000000024 RBX: ffff98bc05ad8650 RCX: ffffffff8624dea8
Sep 15 19:01:08 z30b kernel: [    1.962652] RDX: 0000000000000000 RSI: 0000000000000082 RDI: 0000000000000247
Sep 15 19:01:08 z30b kernel: [    1.962652] RBP: ffff98bc05ad8650 R08: 0000000000000277 R09: 0000000000000004
Sep 15 19:01:08 z30b kernel: [    1.962653] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001
Sep 15 19:01:08 z30b kernel: [    1.962653] R13: 0000000000000001 R14: ffffffff852983f0 R15: 0000000000000002
Sep 15 19:01:08 z30b kernel: [    1.962654] FS:  0000000000000000(0000) GS:ffff98bc11040000(0000) knlGS:0000000000000000
Sep 15 19:01:08 z30b kernel: [    1.962655] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Sep 15 19:01:08 z30b kernel: [    1.962656] CR2: 00007ffd2a9b8f48 CR3: 000000021700a004 CR4: 00000000003606e0
Sep 15 19:01:08 z30b kernel: [    1.962656] Call Trace:
Sep 15 19:01:08 z30b kernel: [    1.962658]  ? get_work_pool+0x40/0x40
Sep 15 19:01:08 z30b kernel: [    1.962660]  __cancel_work_timer+0x10a/0x190
Sep 15 19:01:08 z30b kernel: [    1.962662]  ? _cond_resched+0x15/0x30
Sep 15 19:01:08 z30b kernel: [    1.962664]  ? __kmalloc_track_caller+0x180/0x210
Sep 15 19:01:08 z30b kernel: [    1.962670]  drm_dp_cec_set_edid+0x3a/0x170 [drm_kms_helper]
Sep 15 19:01:08 z30b kernel: [    1.962696]  intel_dp_detect+0x20a/0x570 [i915]
Sep 15 19:01:08 z30b kernel: [    1.962702]  drm_helper_probe_detect_ctx+0x44/0xe0 [drm_kms_helper]
Sep 15 19:01:08 z30b kernel: [    1.962726]  intel_encoder_hotplug+0x30/0x90 [i915]
Sep 15 19:01:08 z30b kernel: [    1.962751]  intel_ddi_hotplug+0x2e/0x2f0 [i915]
Sep 15 19:01:08 z30b kernel: [    1.962754]  ? __switch_to_asm+0x35/0x70
Sep 15 19:01:08 z30b kernel: [    1.962755]  ? __switch_to_asm+0x41/0x70
Sep 15 19:01:08 z30b kernel: [    1.962757]  ? __switch_to_asm+0x35/0x70
Sep 15 19:01:08 z30b kernel: [    1.962758]  ? __switch_to_asm+0x41/0x70
Sep 15 19:01:08 z30b kernel: [    1.962760]  ? __switch_to_asm+0x35/0x70
Sep 15 19:01:08 z30b kernel: [    1.962761]  ? __switch_to_asm+0x41/0x70
Sep 15 19:01:08 z30b kernel: [    1.962773]  ? __drm_connector_put_safe+0x16/0x50 [drm]
Sep 15 19:01:08 z30b kernel: [    1.962798]  i915_hotplug_work_func+0x152/0x1e0 [i915]
Sep 15 19:01:08 z30b kernel: [    1.962800]  process_one_work+0x1a7/0x3a0
Sep 15 19:01:08 z30b kernel: [    1.962802]  worker_thread+0x30/0x390
Sep 15 19:01:08 z30b kernel: [    1.962804]  ? create_worker+0x1a0/0x1a0
Sep 15 19:01:08 z30b kernel: [    1.962805]  kthread+0x112/0x130
Sep 15 19:01:08 z30b kernel: [    1.962806]  ? kthread_bind+0x30/0x30
Sep 15 19:01:08 z30b kernel: [    1.962808]  ret_from_fork+0x35/0x40
Sep 15 19:01:08 z30b kernel: [    1.962810] ---[ end trace 9d9c2eeb552af8b3 ]---

tingo@z30b:~$ cat /etc/debian_version
10.1
tingo@z30b:~$ lsb_release -a
No LSB modules are available.
Distributor ID:    Debian
Description:    Debian GNU/Linux 10 (buster)
Release:    10
Codename:    buster

tingo@z30b:~$ uname -a
Linux z30b 4.19.0-6-amd64 #1 SMP Debian 4.19.67-2 (2019-08-28) x86_64 GNU/Linux

tingo@z30b:~$ sudo apt upgrade
Reading package lists... Done
Building dependency tree      
Reading state information... Done
Calculating upgrade... Done
The following NEW packages will be installed:
  linux-image-4.19.0-6-amd64
The following packages will be upgraded:
  android-sdk-platform-tools android-sdk-platform-tools-common base-files bzip2 console-setup console-setup-linux cups cups-bsd cups-client
  cups-common cups-core-drivers cups-daemon cups-ipp-utils cups-ppdc cups-server-common dirmngr e2fslibs e2fsprogs e2fsprogs-l10n exim4-base
  exim4-config exim4-daemon-light firefox-esr firmware-iwlwifi fonts-opensymbol ghostscript gnupg gnupg-agent gnupg-l10n gnupg-utils gpg gpg-agent
  gpg-wks-client gpg-wks-server gpgconf gpgsm gpgv initramfs-tools initramfs-tools-core keyboard-configuration libblockdev-crypto2 libblockdev-fs2
  libblockdev-loop2 libblockdev-part-err2 libblockdev-part2 libblockdev-swap2 libblockdev-utils2 libblockdev2 libbz2-1.0 libcom-err2 libcomerr2
  libcryptsetup12 libcups2 libcupsimage2 libext2fs2 libglib2.0-0 libglib2.0-bin libglib2.0-data libgs9 libgs9-common libldap-2.4-2 libldap-common
  libmariadb3 libncurses5 libncurses6 libncursesw5 libncursesw6 libnss-systemd libnss3 libpam-systemd libpulse-mainloop-glib0 libpulse0 libpulsedsp
  libreoffice libreoffice-avmedia-backend-gstreamer libreoffice-base libreoffice-base-core libreoffice-base-drivers libreoffice-calc
  libreoffice-common libreoffice-core libreoffice-draw libreoffice-gtk2 libreoffice-help-common libreoffice-help-en-us libreoffice-impress
  libreoffice-java-common libreoffice-librelogo libreoffice-math libreoffice-nlpsolver libreoffice-report-builder libreoffice-report-builder-bin
  libreoffice-script-provider-bsh libreoffice-script-provider-js libreoffice-script-provider-python libreoffice-sdbc-firebird
  libreoffice-sdbc-hsqldb libreoffice-sdbc-postgresql libreoffice-style-colibre libreoffice-style-tango libreoffice-wiki-publisher
  libreoffice-writer libss2 libsystemd0 libtinfo5 libtinfo6 libudev1 libxslt1.1 linux-image-amd64 linux-libc-dev mariadb-common ncurses-base
  ncurses-bin ncurses-term pulseaudio pulseaudio-utils python3-reportbug python3-uno reportbug systemd systemd-sysv udev uno-libs3 unzip ure
  usb.ids xsltproc
127 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 244 MB of archives.
After this operation, 269 MB of additional disk space will be used.
[..]
Processing triggers for initramfs-tools (0.133+deb10u1) ...
update-initramfs: Generating /boot/initrd.img-4.19.0-6-amd64
W: Possible missing firmware /lib/firmware/i915/bxt_dmc_ver1_07.bin for module i915
W: Possible missing firmware /lib/firmware/i915/skl_dmc_ver1_27.bin for module i915
W: Possible missing firmware /lib/firmware/i915/kbl_dmc_ver1_04.bin for module i915
W: Possible missing firmware /lib/firmware/i915/cnl_dmc_ver1_07.bin for module i915
W: Possible missing firmware /lib/firmware/i915/glk_dmc_ver1_04.bin for module i915
W: Possible missing firmware /lib/firmware/i915/kbl_guc_ver9_39.bin for module i915
W: Possible missing firmware /lib/firmware/i915/bxt_guc_ver9_29.bin for module i915
W: Possible missing firmware /lib/firmware/i915/skl_guc_ver9_33.bin for module i915
W: Possible missing firmware /lib/firmware/i915/kbl_huc_ver02_00_1810.bin for module i915
W: Possible missing firmware /lib/firmware/i915/bxt_huc_ver01_07_1398.bin for module i915
W: Possible missing firmware /lib/firmware/i915/skl_huc_ver01_07_1398.bin for module i915

tingo@z30b:~$ sudo apt upgrade
Reading package lists... Done
Building dependency tree      
Reading state information... Done
Calculating upgrade... Done
The following NEW packages will be installed:
  gstreamer1.0-libav libavfilter7 libmysofa0 libnorm1 libpgm-5.2-0 libpostproc55 librubberband2 libvidstab1.1 libzmq5
The following packages will be upgraded:
  gir1.2-javascriptcoregtk-4.0 gir1.2-webkit2-4.0 libjavascriptcoregtk-4.0-18 libsmbclient libwbclient0 libwebkit2gtk-4.0-37 samba-libs
7 upgraded, 9 newly installed, 0 to remove and 0 not upgraded.
Need to get 24.8 MB of archives.
After this operation, 6,283 kB of additional disk space will be used.
[..]
Setting up gstreamer1.0-libav:amd64 (1.15.0.1+git20180723+db823502-2) ...
Processing triggers for man-db (2.8.5-2) ...
Processing triggers for libc-bin (2.28-10) ...

tingo@z30b:~$ sudo apt upgrade
Reading package lists... Done
Building dependency tree      
Reading state information... Done
Calculating upgrade... Done
The following packages will be upgraded:
  libnghttp2-14
1 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 85.0 kB of archives.
After this operation, 0 B of additional disk space will be used.
[..]
Setting up libnghttp2-14:amd64 (1.36.0-2+deb10u1) ...
Processing triggers for libc-bin (2.28-10) ...

tingo@z30b:~$ efibootmgr
BootCurrent: 0009
Timeout: 1 seconds
BootOrder: 0009,0000,0006,0005,000A,0007
Boot0000* rEFInd Boot Manager
Boot0001* LAN1
Boot0002* LAN1
Boot0003* Windows Boot Manager
Boot0004* Windows Boot Manager
Boot0005* HDD/SSD
Boot0006* Fedora
Boot0007* LAN2
Boot0008* Qubes
Boot0009* debian
Boot000A* LAN1

tingo@z30b:~$ sudo efibootmgr -o 0,9,6,5,A,7
BootCurrent: 0009
Timeout: 1 seconds
BootOrder: 0000,0009,0006,0005,000A,0007
Boot0000* rEFInd Boot Manager
Boot0001* LAN1
Boot0002* LAN1
Boot0003* Windows Boot Manager
Boot0004* Windows Boot Manager
Boot0005* HDD/SSD
Boot0006* Fedora
Boot0007* LAN2
Boot0008* Qubes
Boot0009* debian
Boot000A* LAN1

tingo@z30b:~$ cat /etc/debian_version
10.0
tingo@z30b:~$ lsb_release -a
No LSB modules are available.
Distributor ID:    Debian
Description:    Debian GNU/Linux 10 (buster)
Release:    10
Codename:    buster

tingo@z30b:~$ uname -a
Linux z30b 4.19.0-5-amd64 #1 SMP Debian 4.19.37-5+deb10u2 (2019-08-08) x86_64 GNU/Linux

tingo@z30b:~$ sudo apt upgrade
Reading package lists... Done
Building dependency tree      
Reading state information... Done
Calculating upgrade... Done
The following packages were automatically installed and are no longer required:
  android-libext4-utils android-libselinux android-libsepol docbook-xml evince-gtk fonts-freefont-ttf gcj-6-jre-lib gconf-service gconf2
  gconf2-common gir1.2-gconf-2.0 gir1.2-gnomekeyring-1.0 gir1.2-wnck-3.0 gnome-mime-data gnome-orca iputils-arping libao-common libao4 libass5
  libatk-adaptor libaudio2 libavresample3 libbasicusageenvironment1 libbind9-140 libblas-common libbonobo2-0 libbonobo2-common libbonoboui2-0
  libbonoboui2-common libbrlapi0.6 libcddb2 libcdio-cdda1 libcdio-paranoia1 libcdio13 libdc1394-22 libdca0 libdns162 libdotconf0 libdvbpsi10
  libebml4v5 libf2fs0 libfaad2 libfile-copy-recursive-perl libgcj-bc libgcj-common libgcj17 libgconf-2-4 libgcr-3-common libgfortran3 libgles2
  libgles2-mesa libgmime-2.6-0 libgnome-2-0 libgnome2-common libgnomecanvas2-0 libgnomecanvas2-common libgnomeui-0 libgnomeui-common libgnomevfs2-0
  libgnomevfs2-common libgnomevfs2-extra libgroupsock8 libgstreamer-plugins-bad1.0-0 libgtksourceview2.0-0 libgtksourceview2.0-common
  libgutenprint2 libical2 libical3 libisc160 libisccc140 libisccfg140 libjim0.76 libkate1 liblirc-client0 liblivemedia57 liblouis12 liblouisutdml7
  liblua5.2-0 liblvm2app2.2 liblvm2cmd2.02 liblwres141 libmad0 libmatroska6v5 libmicrodns0 libmpcdec6 libnfs8 libnm-glib4 libnm-util2 libnotmuch4
  libntfs-3g871 libopenmpt-modplug1 liborbit-2-0 libpcre16-3 libpostproc54 libprotobuf-lite10 libproxy-tools libqrencode3 libqt5opengl5 librarian0
  libresid-builder0c2a libsac-java-gcj libsane-extras libsane-extras-common libsdl-image1.2 libsidplay2 libsndio6.1 libspeechd2
  libsuitesparseconfig4 libupnp6 libusageenvironment3 libva-wayland1 libvlc-bin libvlc5 libvlccore9 libwayland-egl1-mesa libxcb-xv0 libxfont1 orage
  orage-data python-idna python3-brlapi python3-louis python3-pyatspi python3-speechd python3-xdg rarian-compat rename rsync sgml-base sgml-data
  sound-icons speech-dispatcher speech-dispatcher-audio-plugins speech-dispatcher-espeak-ng tcpd vlc vlc-bin vlc-data vlc-l10n vlc-plugin-base
  vlc-plugin-notify vlc-plugin-qt vlc-plugin-samba vlc-plugin-skins2 vlc-plugin-video-output vlc-plugin-video-splitter vlc-plugin-visualization
  xbrlapi xfce4-mount-plugin xml-core
Use 'sudo apt autoremove' to remove them.
The following NEW packages will be installed:
  android-libboringssl android-libcrypto-utils android-libetc1 android-libsepol android-sdk-platform-tools ant-contrib apparmor atril atril-common
  binutils-common binutils-x86-64-linux-gnu cpp-8 dirmngr dmtracedump e2fsprogs-l10n etc1tool exim4-base exim4-config exim4-daemon-light f2fs-tools
  fdisk fonts-mathjax fonts-quicksand fonts-roboto-slab gcc-7-base gcc-8 gcc-8-base geoclue-2.0 gir1.2-polkit-1.0 gir1.2-secret-1
  gnome-keyring-pkcs11 gnupg-l10n gnupg-utils gpg gpg-agent gpg-wks-client gpg-wks-server gpgconf gpgsm graphviz gstreamer1.0-espeak
  gstreamer1.0-gl guile-2.2-libs hprof-conv iio-sensor-proxy intel-media-va-driver libactivation-java libaio1 libaom0 libaopalliance-java
  libappstream4 libargon2-1 libargs4j-java libasan5 libasm-java libatinject-jsr330-api-java libatrildocument3 libatrilview3 libavcodec58
  libavresample4 libavutil56 libayatana-appindicator3-1 libayatana-ido3-0.4-0 libayatana-indicator3-7 libbind9-161 libbinutils libblockdev-crypto2
  libblockdev-fs2 libblockdev-loop2 libblockdev-part-err2 libblockdev-part2 libblockdev-swap2 libblockdev-utils2 libblockdev2 libbluray2
  libboost-date-time1.67.0 libbrotli1 libcaja-extension1 libcdi-api-java libcdio-cdda2 libcdio-paranoia2 libcdio18 libcdt5 libcglib-java libcgraph6
  libcodec2-0.8.1 libcodemodel-java libcom-err2 libcommons-cli-java libcommons-collections4-java libcommons-compress-java libcommons-io-java
  libcommons-lang3-java libcommons-math3-java libcryptsetup12 libcurvesapi-java libdata-dump-perl libdbusmenu-glib4 libdbusmenu-gtk3-4
  libdns-export1104 libdns1104 libdrm-common libdtd-parser-java libdw1 libegl-mesa0 libegl1 libel-api-java libevent-2.1-6 libexo-2-0 libext2fs2
  libf2fs-format4 libf2fs5 libfastinfoset-java libfstrm0 libgail-3-0 libgcc-8-dev libgdbm-compat4 libgdbm6 libgdk-pixbuf2.0-bin
  libgeronimo-annotation-1.3-spec-java libgeronimo-interceptor-3.0-spec-java libgfortran5 libgl1 libgles2 libglew2.1 libglvnd0 libglx-mesa0 libglx0
  libgnutls-dane0 libgpg-error-l10n libgraphene-1.0-0 libgsasl7 libgstreamer-gl1.0-0 libgts-0.7-5 libgts-bin libguava-java libguice-java
  libgutenprint-common libgutenprint9 libgvc6 libgvpr2 libhawtjni-runtime-java libhttpclient-java libhttpcore-java libhunspell-1.7-0 libical3
  libicu4j-java libicu63 libigdgmm5 libilmbase23 libintellij-annotations-java libio-stringy-perl libisc-export1100 libisc1100 libisccc161
  libisccfg163 libisl19 libistack-commons-java libjansi-java libjansi-native-java libjaxb-api-java libjaxb-java libjetbrains-annotations-java
  libjim0.77 libjs-mathjax libjson-c3 libjsoup-java libjsp-api-java libjsr305-java libkyotocabinet16v5 liblab-gamut1 libllvm7 liblmdb0 liblouis17
  liblouisutdml8 liblvm2cmd2.03 liblwres161 libmailutils5 libmariadb3 libmaven-file-management-java libmaven-parent-java libmaven-resolver-java
  libmaven-shared-io-java libmaven-shared-utils-java libmaven3-core-java libmodplug1 libmpfr6 libncurses6 libncursesw6 libnfs12 libnftables0
  libnftnl11 libnl-route-3-200 libnss-systemd libntfs-3g883 libntlm0 libopenexr23 libpathplan4 libpcre2-16-0 libperl5.28 libplexus-archiver-java
  libplexus-cipher-java libplexus-classworlds-java libplexus-component-annotations-java libplexus-interpolation-java libplexus-io-java
  libplexus-sec-dispatcher-java libplexus-utils2-java libplymouth4 libpoppler82 libprocps7 libprotobuf-c1 libpython2-stdlib libqpdf21 libqrencode4
  libqt5positioning5 libqt5sensors5 libqt5webchannel5 libraw19 librngom-java libservlet-api-java libsisu-guice-java libsisu-inject-java
  libsisu-ioc-java libsisu-plexus-java libslf4j-java libsnappy-java libsnappy-jni libsodium23 libstax-ex-java libstemmer0d libstreambuffer-java
  libsuitesparseconfig5 libswresample3 libthunarx-3-0 libtinfo6 libtry-tiny-perl libtxw2-java libu2f-udev libubsan1 libuchardet0 libunbound8
  libunistring2 libva-drm2 libva-x11-2 libva2 libvolume-key1 libvpx5 libwagon-http-java libwagon-provider-api-java libwayland-egl1 libwebpmux3
  libwebsocket-api-java libwoff1 libx264-155 libx265-165 libxdot4 libxsom-java libxz-java libzstd1 linux-image-4.19.0-5-amd64 lz4 mailutils
  mailutils-common mariadb-common mysql-common nftables orage-data perl-modules-5.28 pigz plymouth plymouth-label python-asn1crypto python-bcrypt
  python-nacl python2 python2-minimal python3-certifi python3-debconf python3-idna runit-helper sound-icons sound-theme-freedesktop sqlite3
  thin-provisioning-tools tix usb.ids zenity zenity-common
The following packages have been kept back:
  ansible build-essential chromium cups cups-bsd cups-client cups-core-drivers cups-daemon cups-filters cups-filters-core-drivers default-jre
  default-jre-headless evince evince-common exfalso g++ gimp gimp-data gir1.2-evince-3.0 gnome-orca gnome-themes-standard gnustep-base-common
  gnustep-base-runtime grub-common grub-efi-amd64 grub-efi-amd64-bin grub2-common hplip hplip-data imagemagick-6.q16 kicad libcups2 libcupsimage2
  libevdocument3-4 libevview3-3 libgimp2.0 libgl1-mesa-dri libhpmud0 libopenmpt-modplug1 libopenmpt0 libpython3-stdlib libreoffice
  libreoffice-avmedia-backend-gstreamer libreoffice-base libreoffice-base-core libreoffice-base-drivers libreoffice-calc libreoffice-common
  libreoffice-core libreoffice-draw libreoffice-gtk2 libreoffice-help-en-us libreoffice-impress libreoffice-java-common libreoffice-math
  libreoffice-ogltrans libreoffice-pdfimport libreoffice-report-builder libreoffice-report-builder-bin libreoffice-script-provider-bsh
  libreoffice-script-provider-js libreoffice-script-provider-python libreoffice-sdbc-hsqldb libreoffice-sdbc-postgresql libreoffice-style-tango
  libreoffice-writer libsane-hpaio libsnmp30 libstdc++6 libvlc-bin libvlc5 lightdm-gtk-greeter lm-sensors printer-driver-hpcups
  printer-driver-hpijs printer-driver-postscript-hp python-wxgtk3.0 python3 python3-apt python3-brlapi python3-cairo python3-cups python3-dbus
  python3-gi python3-minimal python3-pil python3-pycurl python3-renderpm python3-reportlab python3-reportlab-accel python3-smbc python3-uno
  quodlibet thunar thunar-data unar uno-libs3 ure vlc vlc-bin vlc-data vlc-l10n vlc-plugin-base vlc-plugin-qt vlc-plugin-skins2
  vlc-plugin-video-output xfce4-sensors-plugin xserver-xorg-core xserver-xorg-video-amdgpu xserver-xorg-video-ati xserver-xorg-video-fbdev
  xserver-xorg-video-intel xserver-xorg-video-nouveau xserver-xorg-video-qxl xserver-xorg-video-radeon xserver-xorg-video-vesa
  xserver-xorg-video-vmware
The following packages will be upgraded:
  acl acpi adb adduser adwaita-icon-theme alsa-utils anacron android-libadb android-libbacktrace android-libbase android-libcutils
  android-libext4-utils android-libf2fs-utils android-liblog android-libselinux android-libsparse android-libunwind android-libutils
  android-libziparchive android-sdk-platform-tools-common ant ant-optional apt apt-listchanges apt-utils aspell aspell-en at-spi2-core
  avahi-autoipd avahi-daemon base-files base-passwd bash bash-completion bc bind9-host binutils bluetooth bluez bsdmainutils bsdutils busybox bzip2
  ca-certificates ca-certificates-java coinor-libcbc3 coinor-libcgl1 coinor-libclp1 coinor-libcoinmp1v5 coinor-libcoinutils3v5 coinor-libosi1v5
  colord colord-data console-setup console-setup-linux coreutils cpio cpp cron cups-browsed cups-common cups-ppdc cups-server-common dash dbus
  dbus-user-session dbus-x11 dc dconf-gsettings-backend dconf-service debconf debconf-i18n debian-archive-keyring debian-faq debianutils
  desktop-base desktop-file-utils dh-python dictionaries-common diffutils discover disktype distro-info-data dmeventd dmidecode dmsetup
  dns-root-data dnsmasq-base dosfstools dpkg dpkg-dev e2fslibs e2fsprogs efibootmgr emacsen-common enchant espeak-ng-data exfat-fuse exfat-utils
  exo-utils fakeroot fastboot file findutils firefox-esr firmware-iwlwifi fontconfig fontconfig-config fonts-crosextra-caladea fonts-font-awesome
  fonts-freefont-ttf fonts-lato fonts-liberation fonts-linuxlibertine fonts-noto-mono fonts-opensymbol fonts-sil-gentium fonts-sil-gentium-basic
  foomatic-db-compressed-ppds foomatic-db-engine fuse gcc gconf-service gconf2 gconf2-common gcr gdisk geoip-database gettext-base ghostscript
  gir1.2-atk-1.0 gir1.2-atspi-2.0 gir1.2-freedesktop gir1.2-gconf-2.0 gir1.2-gdkpixbuf-2.0 gir1.2-glib-2.0 gir1.2-gst-plugins-base-1.0
  gir1.2-gstreamer-1.0 gir1.2-gtk-3.0 gir1.2-gtksource-3.0 gir1.2-javascriptcoregtk-4.0 gir1.2-keybinder-3.0 gir1.2-notify-0.7
  gir1.2-packagekitglib-1.0 gir1.2-pango-1.0 gir1.2-rsvg-2.0 gir1.2-soup-2.4 gir1.2-sugarext-1.0 gir1.2-webkit2-4.0 gir1.2-wnck-3.0 git git-man
  glib-networking glib-networking-common glib-networking-services gnome-accessibility-themes gnome-desktop3-data gnome-icon-theme gnome-keyring
  gnome-mime-data gnupg gnupg-agent gnustep-common gparted gpgv grep groff-base gsettings-desktop-schemas gsfonts gstreamer1.0-alsa
  gstreamer1.0-plugins-base gstreamer1.0-plugins-good gstreamer1.0-plugins-ugly gstreamer1.0-pulseaudio gstreamer1.0-x gtk-update-icon-cache
  gtk2-engines-pixbuf gtk2-engines-xfce gvfs gvfs-backends gvfs-common gvfs-daemons gvfs-libs gzip hddtemp hdparm hicolor-icon-theme hostname
  hunspell-en-us hyphen-en-us i965-va-driver iamerican ibritish ieee-data ienglish-common ifupdown imagemagick imagemagick-6-common init
  init-system-helpers initramfs-tools initramfs-tools-core installation-report iproute2 iptables iputils-arping iputils-ping irqbalance
  isc-dhcp-client isc-dhcp-common iso-codes ispell iw java-common kbd keyboard-configuration kicad-demos kicad-footprints kicad-libraries
  kicad-symbols kicad-templates klibc-utils kmod krb5-locales laptop-detect less libaa1 libaacs0 libabw-0.1-1 libacl1 libalgorithm-diff-perl
  libalgorithm-diff-xs-perl libamd2 libao-common libao4 libapache-poi-java libapache-pom-java libapparmor1 libapt-inst2.0 libapt-pkg5.0
  libarchive13 libart-2.0-2 libasound2 libasound2-data libasound2-plugins libaspell15 libassuan0 libatasmart4 libatk-adaptor libatk-bridge2.0-0
  libatk-wrapper-java libatk-wrapper-java-jni libatk1.0-0 libatk1.0-data libatkmm-1.6-1v5 libatomic1 libatspi2.0-0 libattr1 libaudio2
  libaudit-common libaudit1 libavahi-client3 libavahi-common-data libavahi-common3 libavahi-core7 libavahi-glib1 libavahi-gobject0 libavc1394-0
  libbabl-0.1-0 libbasicusageenvironment1 libbcmail-java libbcpkix-java libbcprov-java libbdplus0 libblas3 libblkid1 libbluetooth3 libbrlapi0.6
  libbsd0 libbsh-java libburn4 libbz2-1.0 libc-bin libc-dev-bin libc-l10n libc6 libc6-dev libcaca0 libcairo-gobject2 libcairo-perl libcairo2
  libcairomm-1.0-1v5 libcamd2 libcanberra-gtk3-0 libcanberra-gtk3-module libcanberra0 libcap-ng0 libcap2 libcap2-bin libcc1-0 libccolamd2 libcddb2
  libcdparanoia0 libcdr-0.1-1 libcholmod3 libchromaprint1 libcilkrts5 libclass-isa-perl libcmis-0.5-5v5 libcolamd2 libcolord2 libcolorhug2
  libcomerr2 libcommons-codec-java libcommons-collections3-java libcommons-logging-java libcommons-parent-java libcroco3 libcrystalhd3
  libcupsfilters1 libcurl3-gnutls libdaemon0 libdatrie1 libdb5.3 libdbus-1-3 libdbus-glib-1-2 libdca0 libdconf1 libdebconfclient0
  libdevmapper-event1.02.1 libdevmapper1.02.1 libdiscover2 libdjvulibre-text libdjvulibre21 libdom4j-java libdotconf0 libdouble-conversion1
  libdpkg-perl libdrm-amdgpu1 libdrm-intel1 libdrm-nouveau2 libdrm-radeon1 libdrm2 libdv4 libdvbpsi10 libdvdnav4 libdvdread4 libe-book-0.1-1
  libebml4v5 libedit2 libefiboot1 libefivar1 libegl1-mesa libelf1 libenchant1c2a libeot0 libepoxy0 liberror-perl libespeak-ng1 libestr0
  libetonyek-0.1-1 libevdev2 libexif12 libexo-1-0 libexo-common libexo-helpers libexpat1 libexttextcat-2.0-0 libexttextcat-data libfaad2
  libfakeroot libfastjson4 libfdisk1 libffi6 libfftw3-double3 libfftw3-single3 libfile-basedir-perl libfile-copy-recursive-perl
  libfile-fcntllock-perl libfile-mimeinfo-perl libflac8 libflute-java libfontconfig1 libfontembed1 libfreehand-0.1-1 libfreeimage3 libfreetype6
  libfribidi0 libfuse2 libgail-common libgail18 libgarcon-1-0 libgarcon-common libgbm1 libgc1c2 libgcc1 libgck-1-0 libgconf-2-4 libgcr-base-3-1
  libgcr-ui-3-1 libgcrypt20 libgd3 libgdata-common libgdata22 libgdk-pixbuf2.0-0 libgdk-pixbuf2.0-common libgeoip1 libgif7 libgirepository-1.0-1
  libgl1-mesa-glx libglade2-0 libglapi-mesa libgles2-mesa libglib-perl libglib2.0-0 libglib2.0-bin libglib2.0-data libglibmm-2.4-1v5 libglu1-mesa
  libgme0 libgmime-2.6-0 libgmp10 libgnomecanvas2-0 libgnomecanvas2-common libgnutls30 libgoa-1.0-0b libgoa-1.0-common libgomp1 libgpg-error0
  libgpgme11 libgphoto2-6 libgphoto2-l10n libgphoto2-port12 libgpm2 libgpod-common libgpod4 libgraphite2-3 libgroupsock8 libgs9 libgs9-common
  libgsm1 libgssapi-krb5-2 libgstreamer-plugins-bad1.0-0 libgstreamer-plugins-base1.0-0 libgstreamer1.0-0 libgtk-3-0 libgtk-3-bin libgtk-3-common
  libgtk2-perl libgtk2.0-0 libgtk2.0-bin libgtk2.0-common libgtkmm-2.4-1v5 libgtkmm-3.0-1v5 libgtksourceview-3.0-1 libgtksourceview-3.0-common
  libgudev-1.0-0 libgusb2 libgxps2 libharfbuzz-icu0 libharfbuzz0b libhogweed4 libhsqldb1.8.0-java libhtml-parser-perl libhtml-tree-perl
  libhttp-cookies-perl libhttp-daemon-perl libhttp-message-perl libhttp-negotiate-perl libhyphen0 libid3tag0 libidn11 libidn2-0 libiec61883-0
  libijs-0.35 libimobiledevice6 libinput-bin libinput10 libio-socket-ssl-perl libip4tc0 libip6tc0 libipc-system-simple-perl libiptc0 libisofs6
  libisorelax-java libitext-java libitm1 libiw30 libjack-jackd2-0 libjansson4 libjavascriptcoregtk-4.0-18 libjaxen-java libjbig2dec0 libjdom1-java
  libjpeg-turbo-progs libjpeg62-turbo libjs-jquery libjs-modernizr libjs-sphinxdoc libjs-underscore libjson-glib-1.0-0 libjson-glib-1.0-common
  libjte1 libk5crypto3 libkate1 libkeybinder-3.0-0 libkeyutils1 libklibc libkmod2 libkpathsea6 libkrb5-3 libkrb5support0 liblapack3 liblayout-java
  liblcms2-2 liblcms2-utils libldap-2.4-2 libldap-common libldb1 liblightdm-gobject-1-0 liblirc-client0 liblocale-gettext-perl liblockfile-bin
  liblog4j1.2-java liblognorm5 liblouis-data liblouisutdml-bin liblouisutdml-data liblqr-1-0 liblsan0 libltdl7 liblwp-protocol-https-perl liblz4-1
  liblz4-tool liblzma5 liblzo2-2 libmad0 libmagic-mgc libmagic1 libmail-java libmatroska6v5 libmbim-glib4 libmbim-proxy libmhash2 libmicrodns0
  libmission-control-plugins0 libmm-glib0 libmount1 libmp3lame0 libmpc3 libmpcdec6 libmpdec2 libmpeg2-4 libmpg123-0 libmpx2 libmspub-0.1-1
  libmsv-java libmtp-common libmtp-runtime libmtp9 libmwaw-0.3-3 libnautilus-extension1a libncurses5 libncursesw5 libneon27-gnutls libnet-dbus-perl
  libnet-http-perl libnet-ssleay-perl libnetfilter-conntrack3 libnettle6 libnewt0.52 libnfnetlink0 libnghttp2-14 libngspice0 libnl-3-200
  libnl-genl-3-200 libnm0 libnma0 libnotify-bin libnotify4 libnpth0 libnspr4 libnss-mdns libnss3 libnuma1 liboauth0 libobjc4 libodfgen-0.1-1
  libogg0 libopenjp2-7 libopus0 liborc-0.4-0 libp11-kit0 libpackagekit-glib2-18 libpagemaker-0.0-0 libpam-cap libpam-gnome-keyring libpam-modules
  libpam-modules-bin libpam-runtime libpam-systemd libpam0g libpango-1.0-0 libpango-perl libpangocairo-1.0-0 libpangoft2-1.0-0 libpangomm-1.4-1v5
  libpangoxft-1.0-0 libpaper-utils libpaper1 libparted-fs-resize0 libparted2 libpcap0.8 libpcaudio0 libpciaccess0 libpcre16-3 libpcre2-8-0 libpcre3
  libpcsclite1 libpentaho-reporting-flow-engine-java libpipeline1 libpixman-1-0 libplist3 libpng16-16 libpolkit-agent-1-0 libpolkit-backend-1-0
  libpolkit-gobject-1-0 libpoppler-glib8 libpopt0 libpq5 libproxy-tools libproxy1v5 libpsl5 libpulse-mainloop-glib0 libpulse0 libpulsedsp
  libpython-stdlib libpython2.7 libpython2.7-minimal libpython2.7-stdlib libqmi-glib5 libqmi-proxy libqt5core5a libqt5dbus5 libqt5gui5
  libqt5network5 libqt5opengl5 libqt5printsupport5 libqt5qml5 libqt5quick5 libqt5script5 libqt5serialport5 libqt5sql5 libqt5sql5-sqlite libqt5svg5
  libqt5webkit5 libqt5widgets5 libqt5x11extras5 libquadmath0 librdf0 libreadline5 libreadline7 libreoffice-librelogo libreoffice-nlpsolver
  libreoffice-wiki-publisher librest-0.7-0 librsvg2-2 librsvg2-common librtmp1 libsac-java libsamplerate0 libsane libsane-common libsasl2-2
  libsasl2-modules libsasl2-modules-db libsaxonhe-java libsdl-image1.2 libsdl1.2debian libseccomp2 libsecret-1-0 libsecret-common libselinux1
  libsemanage-common libsemanage1 libsepol1 libserializer-java libservlet3.1-java libsgutils2-2 libshine3 libshout3 libsidplay1v5 libsigc++-2.0-0v5
  libslang2 libsm6 libsmartcols1 libsmbclient libsnappy1v5 libsndfile1 libsnmp-base libsonic0 libsoup-gnome2.4-1 libsoup2.4-1 libsoxr0 libspeechd2
  libsqlite3-0 libsqlite3-dev libss2 libssh-gcrypt-4 libssh2-1 libssl1.1 libstartup-notification0 libsugarext-data libsugarext0 libsystemd0
  libtag1v5 libtag1v5-vanilla libtagc0 libtalloc2 libtasn1-6 libtcl8.6 libtdb1 libteamdctl0 libtelepathy-glib0 libtevent0 libtext-charwidth-perl
  libtext-iconv-perl libthai-data libthai0 libtheora0 libtiff5 libtinfo5 libtk8.6 libtokyocabinet9 libtsan0 libtumbler-1-0 libturbojpeg0
  libtwolame0 libubsan0 libudev1 libudisks2-0 libumfpack5 libunique-1.0-0 libupower-glib3 liburi-perl libusageenvironment3 libusb-0.1-4
  libusb-1.0-0 libusb-1.0-0-dev libusb-1.0-doc libusbmuxd4 libuuid1 libv4l-0 libv4lconvert0 libvdpau-va-gl1 libvdpau1 libvisio-0.1-1
  libvisual-0.4-0 libvlccore9 libvorbis0a libvorbisenc2 libvorbisfile3 libvte-2.91-0 libvte-2.91-common libwacom-bin libwacom-common libwacom2
  libwavpack1 libwayland-client0 libwayland-cursor0 libwayland-egl1-mesa libwayland-server0 libwbclient0 libwebkit2gtk-4.0-37 libwebp6
  libwebpdemux2 libwmf0.2-7 libwnck-3-0 libwnck-3-common libwnck-common libwnck22 libwpd-0.10-10 libwpg-0.3-3 libwps-0.4-4 libwrap0 libwww-perl
  libwww-robotrules-perl libwxbase3.0-0v5 libwxgtk3.0-0v5 libx11-6 libx11-data libx11-xcb1 libxapian30 libxatracker2 libxau6 libxcb-dri2-0
  libxcb-dri3-0 libxcb-glx0 libxcb-icccm4 libxcb-present0 libxcb-randr0 libxcb-render-util0 libxcb-render0 libxcb-shape0 libxcb-shm0 libxcb-sync1
  libxcb-xfixes0 libxcb-xinerama0 libxcb-xkb1 libxcb-xv0 libxcb1 libxcursor1 libxdamage1 libxerces2-java libxfce4panel-2.0-4 libxfce4ui-1-0
  libxfce4ui-2-0 libxfce4ui-common libxfce4ui-utils libxfont2 libxft2 libxinerama1 libxkbcommon-x11-0 libxkbcommon0 libxkbfile1 libxklavier16
  libxml-commons-external-java libxml-commons-resolver1.1-java libxml-parser-perl libxml-twig-perl libxml-xpathengine-perl libxml2 libxmlbeans-java
  libxmu6 libxmuu1 libxpp2-java libxpp3-java libxres1 libxshmfence1 libxslt1.1 libxss1 libxt6 libxtables12 libxvidcore4 libyajl2 libyaml-0-2
  libzvbi-common libzvbi0 light-locker lightdm linux-base linux-image-amd64 linux-libc-dev locales login logrotate lsb-base lsb-release lshw lsof
  lvm2 make man-db manpages manpages-dev media-player-info mesa-utils mesa-va-drivers mesa-vdpau-drivers meson mime-support
  mobile-broadband-provider-info modemmanager mount mousepad mtools multiarch-support mutt mythes-en-us nano ncurses-base ncurses-bin ncurses-term
  netbase netcat-traditional network-manager network-manager-gnome ninja-build notification-daemon ntfs-3g openprinting-ppds openssh-client
  openssh-server openssh-sftp-server openssl orage os-prober p11-kit p11-kit-modules p7zip p7zip-full packagekit packagekit-tools parted passwd
  patch pavucontrol perl perl-base pinentry-curses pinentry-gnome3 pkg-config policykit-1 policykit-1-gnome poppler-data poppler-utils
  powermgmt-base powertop ppp printer-driver-all printer-driver-brlaser printer-driver-c2050 printer-driver-c2esp printer-driver-cjet
  printer-driver-dymo printer-driver-escpr printer-driver-foo2zjs printer-driver-foo2zjs-common printer-driver-fujixerox printer-driver-gutenprint
  printer-driver-m2300w printer-driver-min12xxw printer-driver-pnm2ppa printer-driver-ptouch printer-driver-pxljr printer-driver-sag-gdi
  printer-driver-splix procps psmisc pulseaudio pulseaudio-utils python python-apt-common python-cairo python-cffi-backend python-chardet
  python-crypto python-cryptography python-dateutil python-dbus python-decorator python-enum34 python-feedparser python-gi python-gi-cairo
  python-gobject-2 python-gtk2 python-httplib2 python-idna python-jinja2 python-kerberos python-libxml2 python-markupsafe python-minimal
  python-musicbrainzngs python-mutagen python-netaddr python-numpy python-paramiko python-pkg-resources python-pyasn1 python-selinux
  python-setuptools python-six python-sugar3 python-talloc python-utidylib python-wxversion python-xmltodict python-yaml python2.7
  python2.7-minimal python3-chardet python3-cupshelpers python3-debian python3-debianbts python3-httplib2 python3-louis python3-pexpect
  python3-pkg-resources python3-ptyprocess python3-pyatspi python3-pysimplesoap python3-reportbug python3-requests python3-six python3-speechd
  python3-urllib3 python3-xdg qpdf qt5-gtk-platformtheme qttranslations5-l10n readline-common rename reportbug ristretto rsync rsyslog rtkit
  samba-libs sane-utils screen sed sensible-utils sgml-data shared-mime-info speech-dispatcher speech-dispatcher-audio-plugins
  speech-dispatcher-espeak-ng sphinx-rtd-theme-common sshfs sudo sugar-browse-activity synaptic system-config-printer system-config-printer-common
  system-config-printer-udev systemd systemd-sysv sysvinit-utils tango-icon-theme tar task-desktop task-english task-laptop task-print-server
  task-ssh-server task-xfce-desktop tasksel tasksel-data tcl tcl8.6 tcpd telepathy-mission-control-5 telnet thunar-archive-plugin
  thunar-media-tags-plugin thunar-volman tk tk8.6 tumbler tumbler-common tzdata ucf udev udisks2 unrar-free unzip update-inetd upower
  usb-modeswitch usb-modeswitch-data usbmuxd usbutils util-linux util-linux-locales va-driver-all vdpau-driver-all vim-common vim-tiny
  vlc-plugin-notify vlc-plugin-samba vlc-plugin-video-splitter vlc-plugin-visualization wamerican wget whiptail wireless-tools wpasupplicant
  x11-apps x11-session-utils x11-utils x11-xkb-utils x11-xserver-utils xarchiver xauth xbrlapi xdg-user-dirs xdg-utils xfburn xfce4
  xfce4-battery-plugin xfce4-clipman xfce4-clipman-plugin xfce4-cpufreq-plugin xfce4-cpugraph-plugin xfce4-datetime-plugin xfce4-dict
  xfce4-diskperf-plugin xfce4-fsguard-plugin xfce4-genmon-plugin xfce4-goodies xfce4-mailwatch-plugin xfce4-mount-plugin xfce4-netload-plugin
  xfce4-notes xfce4-notes-plugin xfce4-notifyd xfce4-panel xfce4-places-plugin xfce4-power-manager xfce4-power-manager-data
  xfce4-power-manager-plugins xfce4-pulseaudio-plugin xfce4-screenshooter xfce4-session xfce4-settings xfce4-smartbookmark-plugin
  xfce4-systemload-plugin xfce4-taskmanager xfce4-terminal xfce4-timer-plugin xfce4-verve-plugin xfce4-wavelan-plugin xfce4-weather-plugin
  xfce4-whiskermenu-plugin xfce4-xkb-plugin xfdesktop4 xfdesktop4-data xfonts-base xfonts-utils xfwm4 xinit xkb-data xml-core xorg-docs-core xsane
  xsane-common xscreensaver xscreensaver-data xserver-common xserver-xorg-input-libinput xserver-xorg-input-wacom xserver-xorg-legacy xsltproc
  xterm xxd xz-utils zlib1g zlib1g-dev
1150 upgraded, 289 newly installed, 0 to remove and 117 not upgraded.
Need to get 718 MB of archives.
After this operation, 920 MB of additional disk space will be used.
[..]
Processing triggers for initramfs-tools (0.133) ...
update-initramfs: Generating /boot/initrd.img-4.19.0-5-amd64
W: Possible missing firmware /lib/firmware/i915/bxt_dmc_ver1_07.bin for module i915
W: Possible missing firmware /lib/firmware/i915/skl_dmc_ver1_27.bin for module i915
W: Possible missing firmware /lib/firmware/i915/kbl_dmc_ver1_04.bin for module i915
W: Possible missing firmware /lib/firmware/i915/cnl_dmc_ver1_07.bin for module i915
W: Possible missing firmware /lib/firmware/i915/glk_dmc_ver1_04.bin for module i915
W: Possible missing firmware /lib/firmware/i915/kbl_guc_ver9_39.bin for module i915
W: Possible missing firmware /lib/firmware/i915/bxt_guc_ver9_29.bin for module i915
W: Possible missing firmware /lib/firmware/i915/skl_guc_ver9_33.bin for module i915
W: Possible missing firmware /lib/firmware/i915/kbl_huc_ver02_00_1810.bin for module i915
W: Possible missing firmware /lib/firmware/i915/bxt_huc_ver01_07_1398.bin for module i915
W: Possible missing firmware /lib/firmware/i915/skl_huc_ver01_07_1398.bin for module i915
Processing triggers for sgml-base (1.29) ...
Processing triggers for libc-bin (2.28-10) ...
Processing triggers for libgdk-pixbuf2.0-0:amd64 (2.38.1+dfsg-1) ...
Processing triggers for systemd (241-5) ...