Oval Definition:	oval:org.opensuse.security:def:45959
Revision Date: 2020-12-01 Version: 1 Title: Security update for ucode-intel (Important) Description: This update for ucode-intel fixes the following issues: This update contains the Intel QSR 2019.1 Microcode release (bsc#1111331) Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS) - CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling (MFBDS) - CVE-2018-12130: Microarchitectural Load Port Data Samling (MLPDS) - CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM) These updates contain the CPU Microcode adjustments for the software mitigations. For more information on this set of vulnerabilities, check out https://www.suse.com/support/kb/doc/?id=7023736 Release notes: ---- updated platforms ------------------------------------ SNB-E/EN/EP C1/M0 6-2d-6/6d 0000061d->0000061f Xeon E3/E5, Core X SNB-E/EN/EP C2/M1 6-2d-7/6d 00000714->00000718 Xeon E3/E5, Core X Family: unix Class: patch Status: Reference(s): 1044638 1051510 1054413 1065729 1068664 1071995 1073879 1082023 1085030 1106383 1110279 1111331 1111622 1111666 1113956 1114279 1116998 1117463 1117464 1117465 1118277 1118599 1122668 1127557 1131493 1133495 1139459 1140631 1144333 1144504 1148868 1149458 1150595 1151377 1151506 1151839 1154043 1154948 1155574 1156482 1158785 1158787 1158788 1158789 1158790 1158791 1158792 1158793 1158795 1158983 1159208 1159623 1159814 1161016 1162063 1162108 1162610 1166985 1168081 1169194 1170592 1171904 1172458 1172472 1172537 1172538 1172759 1172775 1172781 1172782 1172783 1172884 1176733 761500 859835 922448 929736 935252 945455 947357 961596 967128 CVE-2012-0876 CVE-2014-1624 CVE-2015-2296 CVE-2016-0718 CVE-2016-4472 CVE-2016-9063 CVE-2017-1000158 CVE-2017-9233 CVE-2017-9670 CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2018-18074 CVE-2018-19490 CVE-2018-19491 CVE-2018-19492 CVE-2018-19788 CVE-2018-19869 CVE-2018-4191 CVE-2018-4197 CVE-2018-4207 CVE-2018-4208 CVE-2018-4209 CVE-2018-4210 CVE-2018-4212 CVE-2018-4213 CVE-2018-4261 CVE-2018-4262 CVE-2018-4263 CVE-2018-4264 CVE-2018-4265 CVE-2018-4266 CVE-2018-4267 CVE-2018-4270 CVE-2018-4272 CVE-2018-4273 CVE-2018-4278 CVE-2018-4284 CVE-2018-4299 CVE-2018-4306 CVE-2018-4309 CVE-2018-4312 CVE-2018-4314 CVE-2018-4315 CVE-2018-4316 CVE-2018-4317 CVE-2018-4318 CVE-2018-4319 CVE-2018-4323 CVE-2018-4328 CVE-2018-4345 CVE-2018-4358 CVE-2018-4359 CVE-2018-4361 CVE-2018-4372 CVE-2018-4373 CVE-2018-4375 CVE-2018-4376 CVE-2018-4378 CVE-2018-4382 CVE-2018-4386 CVE-2018-4392 CVE-2018-4416 CVE-2019-11091 CVE-2019-12625 CVE-2019-12900 CVE-2019-1348 CVE-2019-1349 CVE-2019-1350 CVE-2019-1351 CVE-2019-1352 CVE-2019-1353 CVE-2019-1354 CVE-2019-1387 CVE-2019-19604 CVE-2019-20810 CVE-2019-5953 CVE-2020-10766 CVE-2020-10767 CVE-2020-10768 CVE-2020-13974 CVE-2020-1712 CVE-2020-26117 CVE-2020-8597 SUSE-SU-2019:0019-1 SUSE-SU-2019:0059-1 SUSE-SU-2019:1954-1 SUSE-SU-2019:3311-1 SUSE-SU-2020:0353-1 SUSE-SU-2020:0490-1 SUSE-SU-2020:0497-1 SUSE-SU-2020:1660-1 SUSE-SU-2020:1699-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 42.3 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for additional PackageHub packages 15 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Legacy Software 15 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SUSE Linux Enterprise Module for Python2 packages 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP3-BCL SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP4-ESPOS SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND chrony-3.2-lp150.5 is installed Definition Synopsis openSUSE Leap 42.3 is installed AND Package Information gpgme-1.9.0-1 is installed OR libgpgme-devel-1.9.0-1 is installed OR libgpgme11-1.9.0-1 is installed OR libgpgmepp6-1.9.0-1 is installed OR libqgpgme7-1.9.0-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-31.5.3esr-0.8 is installed OR MozillaFirefox-translations-31.5.3esr-0.8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information flash-player-11.2.202.569-0.35 is installed OR flash-player-gnome-11.2.202.569-0.35 is installed OR flash-player-kde4-11.2.202.569-0.35 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information alsa-1.0.27.2-11 is installed OR libasound2-1.0.27.2-11 is installed OR libasound2-32bit-1.0.27.2-11 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information accountsservice-0.6.35-3 is installed OR accountsservice-lang-0.6.35-3 is installed OR libaccountsservice0-0.6.35-3 is installed OR typelib-1_0-AccountsService-1_0-0.6.35-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND busybox-1.21.1-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND cifs-utils-6.5-8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND argyllcms-1.6.3-3 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed AND taglib-1.11.1-4.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 is installed AND gzip-1.9-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND Package Information gstreamer-plugins-good-1.12.5-1 is installed OR gstreamer-plugins-good-lang-1.12.5-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 is installed AND Package Information gdm-3.26.2.1-11 is installed OR gdm-devel-3.26.2.1-11 is installed OR gdm-lang-3.26.2.1-11 is installed OR gdmflexiserver-3.26.2.1-11 is installed OR libgdm1-3.26.2.1-11 is installed OR typelib-1_0-Gdm-1_0-3.26.2.1-11 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed AND Package Information PackageKit-1.1.10-10 is installed OR PackageKit-backend-zypp-1.1.10-10 is installed OR PackageKit-devel-1.1.10-10 is installed OR PackageKit-lang-1.1.10-10 is installed OR libpackagekit-glib2-18-1.1.10-10 is installed OR libpackagekit-glib2-devel-1.1.10-10 is installed OR typelib-1_0-PackageKitGlib-1_0-1.1.10-10 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 is installed AND Package Information ImageMagick-7.0.7.34-3.72 is installed OR perl-PerlMagick-7.0.7.34-3.72 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed AND Package Information FastCGI-2.4.0-2 is installed OR FastCGI-devel-2.4.0-2 is installed OR libfcgi0-2.4.0-2 is installed OR perl-FastCGI-2.4.0-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 is installed AND Package Information java-1_8_0-ibm-1.8.0_sr5.20-3.6 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6 is installed OR java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-195-default-9-25 is installed OR kernel-livepatch-SLE15-SP1_Update_0-9-25 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed AND Package Information go1.12-1.12.9-1.15 is installed OR go1.12-doc-1.12.9-1.15 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information binutils-2.32-7.5 is installed OR binutils-gold-2.32-7.5 is installed OR cross-aarch64-binutils-2.32-7.5 is installed OR cross-arm-binutils-2.32-7.5 is installed OR cross-avr-binutils-2.32-7.5 is installed OR cross-epiphany-binutils-2.32-7.5 is installed OR cross-hppa-binutils-2.32-7.5 is installed OR cross-hppa64-binutils-2.32-7.5 is installed OR cross-i386-binutils-2.32-7.5 is installed OR cross-ia64-binutils-2.32-7.5 is installed OR cross-m68k-binutils-2.32-7.5 is installed OR cross-mips-binutils-2.32-7.5 is installed OR cross-ppc-binutils-2.32-7.5 is installed OR cross-ppc64-binutils-2.32-7.5 is installed OR cross-ppc64le-binutils-2.32-7.5 is installed OR cross-riscv64-binutils-2.32-7.5 is installed OR cross-rx-binutils-2.32-7.5 is installed OR cross-s390-binutils-2.32-7.5 is installed OR cross-s390x-binutils-2.32-7.5 is installed OR cross-sparc-binutils-2.32-7.5 is installed OR cross-sparc64-binutils-2.32-7.5 is installed OR cross-spu-binutils-2.32-7.5 is installed OR cross-x86_64-binutils-2.32-7.5 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 15 is installed AND Package Information kernel-azure-4.12.14-5.19 is installed OR kernel-azure-base-4.12.14-5.19 is installed OR kernel-azure-devel-4.12.14-5.19 is installed OR kernel-devel-azure-4.12.14-5.19 is installed OR kernel-source-azure-4.12.14-5.19 is installed OR kernel-syms-azure-4.12.14-5.19 is installed Definition Synopsis SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed AND Package Information python-curses-2.7.14-7.11 is installed OR python-gdbm-2.7.14-7.11 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information libecpg6-10.10-4.16 is installed OR postgresql10-10.10-4.16 is installed OR postgresql10-contrib-10.10-4.16 is installed OR postgresql10-devel-10.10-4.16 is installed OR postgresql10-docs-10.10-4.16 is installed OR postgresql10-plperl-10.10-4.16 is installed OR postgresql10-plpython-10.10-4.16 is installed OR postgresql10-pltcl-10.10-4.16 is installed OR postgresql10-server-10.10-4.16 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information libshibsp-lite7-2.6.1-1 is installed OR libshibsp7-2.6.1-1 is installed OR shibboleth-sp-2.6.1-1 is installed OR shibboleth-sp-devel-2.6.1-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information pam-1.1.8-14 is installed OR pam-32bit-1.1.8-14 is installed OR pam-doc-1.1.8-14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND ucode-intel-20191112-13.53 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information java-1_7_1-ibm-1.7.1_sr4.25-38.23 is installed OR java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23 is installed OR java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23 is installed OR java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23 is installed OR java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information libsolv-0.6.36-2.27.19 is installed OR libsolv-tools-0.6.36-2.27.19 is installed OR libzypp-16.20.2-27.60 is installed OR perl-solv-0.6.36-2.27.19 is installed OR python-solv-0.6.36-2.27.19 is installed OR zypper-1.13.54-18.40 is installed OR zypper-log-1.13.54-18.40 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information libXcursor1-1.1.14-3 is installed OR libXcursor1-32bit-1.1.14-3 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-BCL is installed AND ucode-intel-20190618-13.47 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-BCL is installed AND ucode-intel-20190618-13.47 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information evince-3.20.2-6.27 is installed OR evince-browser-plugin-3.20.2-6.27 is installed OR evince-lang-3.20.2-6.27 is installed OR evince-plugin-djvudocument-3.20.2-6.27 is installed OR evince-plugin-dvidocument-3.20.2-6.27 is installed OR evince-plugin-pdfdocument-3.20.2-6.27 is installed OR evince-plugin-psdocument-3.20.2-6.27 is installed OR evince-plugin-tiffdocument-3.20.2-6.27 is installed OR evince-plugin-xpsdocument-3.20.2-6.27 is installed OR libevdocument3-4-3.20.2-6.27 is installed OR libevview3-3-3.20.2-6.27 is installed OR nautilus-evince-3.20.2-6.27 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND libpolkit0-0.113-5.15 is installed OR polkit-0.113-5.15 is installed OR typelib-1_0-Polkit-1_0-0.113-5.15 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA is installed AND libpolkit0-0.113-5.15 is installed OR polkit-0.113-5.15 is installed OR typelib-1_0-Polkit-1_0-0.113-5.15 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information ovmf-2017+git1492060560.b6d11d7c46-4.12 is installed OR ovmf-tools-2017+git1492060560.b6d11d7c46-4.12 is installed OR qemu-ovmf-x86_64-2017+git1492060560.b6d11d7c46-4.12 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4 is installed AND libpolkit0-0.113-5.15 is installed OR polkit-0.113-5.15 is installed OR typelib-1_0-Polkit-1_0-0.113-5.15 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed AND libpolkit0-0.113-5.15 is installed OR polkit-0.113-5.15 is installed OR typelib-1_0-Polkit-1_0-0.113-5.15 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information apache-commons-beanutils-1.9.2-1 is installed OR apache-commons-beanutils-javadoc-1.9.2-1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4-ESPOS is installed AND libXvnc1-1.6.0-22.17 is installed OR tigervnc-1.6.0-22.17 is installed OR xorg-x11-Xvnc-1.6.0-22.17 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4-ESPOS is installed AND libXvnc1-1.6.0-22.17 is installed OR tigervnc-1.6.0-22.17 is installed OR xorg-x11-Xvnc-1.6.0-22.17 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP5 is installed AND kernel-azure-4.12.14-16.19 is installed OR kernel-azure-base-4.12.14-16.19 is installed OR kernel-azure-devel-4.12.14-16.19 is installed OR kernel-devel-azure-4.12.14-16.19 is installed OR kernel-source-azure-4.12.14-16.19 is installed OR kernel-syms-azure-4.12.14-16.19 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND kernel-azure-4.12.14-16.19 is installed OR kernel-azure-base-4.12.14-16.19 is installed OR kernel-azure-devel-4.12.14-16.19 is installed OR kernel-devel-azure-4.12.14-16.19 is installed OR kernel-source-azure-4.12.14-16.19 is installed OR kernel-syms-azure-4.12.14-16.19 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information java-1_8_0-ibm-1.8.0_sr6.5-3.33 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr6.5-3.33 is installed OR java-1_8_0-ibm-devel-1.8.0_sr6.5-3.33 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr6.5-3.33 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information python-base-2.7.9-24 is installed OR python-devel-2.7.9-24 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information kernel-default-4.4.59-92.24 is installed OR kernel-default-extra-4.4.59-92.24 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information libuuid-devel-2.29.2-3.12 is installed OR util-linux-2.29.2-3.12 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information gimp-2.8.18-9.8 is installed OR gimp-lang-2.8.18-9.8 is installed OR gimp-plugins-python-2.8.18-9.8 is installed OR libgimp-2_0-0-2.8.18-9.8 is installed OR libgimpui-2_0-0-2.8.18-9.8 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP5 is installed AND Package Information ibus-1.5.13-15.11 is installed OR ibus-gtk3-32bit-1.5.13-15.11 is installed OR libibus-1_0-5-32bit-1.5.13-15.11 is installed OR python-ibus-1.5.13-15.11 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information dia-0.97.3-2 is installed OR dia-lang-0.97.3-2 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information PackageKit-gstreamer-plugin-1.1.10-10 is installed OR PackageKit-gtk3-module-1.1.10-10 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information java-1_7_1-ibm-1.7.1_sr4.50-38.41 is installed OR java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41 is installed OR java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41 is installed OR java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information ruby2.1-rubygem-sprockets-2_12-2.12.5-1.4 is installed OR rubygem-sprockets-2_12-2.12.5-1.4 is installed
BACK