Oval Definition:oval:org.opensuse.security:def:50266
Revision Date:2020-12-01Version:1
Title:Security update for ucode-intel (Important)
Description:



This update for ucode-intel fixes the following issues:

The microcode bundles was updated to the 20180703 release

For the listed CPU chipsets this fixes CVE-2018-3640 (Spectre v3a) and helps mitigating CVE-2018-3639 (Spectre v4) (bsc#1100147 bsc#1087082 bsc#1087083).

More information on: https://downloadcenter.intel.com/download/27945/Linux-Processor-Microcode-Data-File

Following chipsets are fixed in this round:

Model Stepping F-MO-S/PI Old->New

---- updated platforms ------------------------------------

SNB-EP C1 6-2d-6/6d 0000061c->0000061d Xeon E5 SNB-EP C2 6-2d-7/6d 00000713->00000714 Xeon E5 IVT C0 6-3e-4/ed 0000042c->0000042d Xeon E5 v2; Core i7-4960X/4930K/4820K IVT D1 6-3e-7/ed 00000713->00000714 Xeon E5 v2 HSX-E/EP/4S C0 6-3f-2/6f 0000003c->0000003d Xeon E5 v3 HSX-EX E0 6-3f-4/80 00000011->00000012 Xeon E7 v3 SKX-SP/D/W/X H0 6-55-4/b7 02000043->0200004d Xeon Bronze 31xx, Silver 41xx, Gold 51xx/61xx Platinum 81xx, D/W-21xx; Core i9-7xxxX BDX-DE A1 6-56-5/10 0e000009->0e00000a Xeon D-15x3N BDX-ML B/M/R0 6-4f-1/ef 0b00002c->0b00002e Xeon E5/E7 v4; Core i7-69xx/68xx
Family:unixClass:patch
Status:Reference(s):1087082
1087083
1099358
1100147
1103203
1108020
1108631
1108632
1117951
1118913
1129124
1130040
1135881
1136029
1136440
1136480
1137715
1137940
1138313
1138358
1138494
1138822
1139453
1140868
1142038
1142988
1143856
1144155
1144363
1144889
1146608
1148125
1148177
1148311
1151488
1154092
1159856
1159858
1159860
1160250
1160251
1160467
1160468
1172402
1172491
1172698
1172704
1173786
1174628
1175568
1177351
1177352
CVE-2018-0737
CVE-2018-10933
CVE-2018-17097
CVE-2018-17098
CVE-2018-3639
CVE-2018-3640
CVE-2019-0816
CVE-2019-10136
CVE-2019-11709
CVE-2019-11711
CVE-2019-11712
CVE-2019-11713
CVE-2019-11715
CVE-2019-11717
CVE-2019-11719
CVE-2019-11729
CVE-2019-11730
CVE-2019-14896
CVE-2019-14897
CVE-2019-14973
CVE-2019-15691
CVE-2019-15692
CVE-2019-15693
CVE-2019-15694
CVE-2019-15695
CVE-2019-9811
CVE-2020-12398
CVE-2020-12405
CVE-2020-12406
CVE-2020-12410
CVE-2020-13790
CVE-2020-14344
CVE-2020-7069
CVE-2020-7070
CVE-2020-8023
CVE-2020-8027
SUSE-SU-2018:1926-1
SUSE-SU-2018:3162-1
SUSE-SU-2019:0112-1
SUSE-SU-2019:0197-1
SUSE-SU-2019:1869-1
SUSE-SU-2019:2317-1
SUSE-SU-2019:3097-1
SUSE-SU-2020:0112-1
SUSE-SU-2020:1856-1
SUSE-SU-2020:2569-1
SUSE-SU-2020:2744-1
SUSE-SU-2020:2997-1
Platform(s):SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1
SUSE Linux Enterprise Module for additional PackageHub packages 15 SP2
SUSE Linux Enterprise Module for Basesystem 15
SUSE Linux Enterprise Module for Legacy Software 15 SP2
SUSE Linux Enterprise Module for Live Patching 15 SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2
SUSE Linux Enterprise Module for Public Cloud 15
SUSE Linux Enterprise Module for Server Applications 15
SUSE Linux Enterprise Module for Server Applications 15 SP1
SUSE Linux Enterprise Module for Server Applications 15 SP2
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 15-LTSS
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Workstation Extension 15
SUSE Linux Enterprise Workstation Extension 15 SP1
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP2 is installed
  • AND Package Information
  • libfreebl3-3.15.2-0.3 is installed
  • OR libfreebl3-32bit-3.15.2-0.3 is installed
  • OR mozilla-nspr-4.10.1-0.3 is installed
  • OR mozilla-nspr-32bit-4.10.1-0.3 is installed
  • OR mozilla-nss-3.15.2-0.3 is installed
  • OR mozilla-nss-32bit-3.15.2-0.3 is installed
  • OR mozilla-nss-tools-3.15.2-0.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP3 is installed
  • AND dhcpcd-3.2.3-45.5 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND Package Information
  • gdk-pixbuf-lang-2.30.6-1 is installed
  • OR gdk-pixbuf-query-loaders-2.30.6-1 is installed
  • OR gdk-pixbuf-query-loaders-32bit-2.30.6-1 is installed
  • OR libgdk_pixbuf-2_0-0-2.30.6-1 is installed
  • OR libgdk_pixbuf-2_0-0-32bit-2.30.6-1 is installed
  • OR typelib-1_0-GdkPixbuf-2_0-2.30.6-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND Package Information
  • dia-0.97.2-13 is installed
  • OR dia-lang-0.97.2-13 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND libXfont1-1.5.1-10 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • bzip2-1.0.6-29 is installed
  • OR libbz2-1-1.0.6-29 is installed
  • OR libbz2-1-32bit-1.0.6-29 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND Package Information
  • libQt5WebKit5-5.6.2-1 is installed
  • OR libQt5WebKit5-imports-5.6.2-1 is installed
  • OR libQt5WebKitWidgets5-5.6.2-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 is installed
  • AND Package Information
  • php7-7.2.5-4.67 is installed
  • OR php7-embed-7.2.5-4.67 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for additional PackageHub packages 15 SP2 is installed
  • AND libjpeg-turbo-1.5.3-5.15 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 is installed
  • AND ucode-intel-20180703-3.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Legacy Software 15 SP2 is installed
  • AND Package Information
  • openldap2-2.4.46-9.31 is installed
  • OR openldap2-back-meta-2.4.46-9.31 is installed
  • OR openldap2-back-perl-2.4.46-9.31 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed
  • AND Package Information
  • kernel-livepatch-4_12_14-197_26-default-2-2 is installed
  • OR kernel-livepatch-SLE15-SP1_Update_7-2-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed
  • AND soundtouch-1.8.0-3.11 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed
  • AND Package Information
  • MozillaFirefox-60.8.0-3.51 is installed
  • OR MozillaFirefox-branding-upstream-60.8.0-3.51 is installed
  • OR MozillaFirefox-buildsymbols-60.8.0-3.51 is installed
  • OR MozillaFirefox-devel-60.8.0-3.51 is installed
  • OR libfreebl3-hmac-32bit-3.44.1-3.16 is installed
  • OR libsoftokn3-hmac-32bit-3.44.1-3.16 is installed
  • OR mozilla-nss-3.44.1-3.16 is installed
  • OR mozilla-nss-sysinit-32bit-3.44.1-3.16 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed
  • AND Package Information
  • MozillaThunderbird-68.9.0-3.85 is installed
  • OR MozillaThunderbird-translations-common-68.9.0-3.85 is installed
  • OR MozillaThunderbird-translations-other-68.9.0-3.85 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Public Cloud 15 is installed
  • AND Package Information
  • kernel-azure-4.12.14-5.38 is installed
  • OR kernel-azure-base-4.12.14-5.38 is installed
  • OR kernel-azure-devel-4.12.14-5.38 is installed
  • OR kernel-devel-azure-4.12.14-5.38 is installed
  • OR kernel-source-azure-4.12.14-5.38 is installed
  • OR kernel-syms-azure-4.12.14-5.38 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 is installed
  • AND Package Information
  • 389-ds-1.4.0.26~git0.8a2d3de6f-4.14 is installed
  • OR 389-ds-devel-1.4.0.26~git0.8a2d3de6f-4.14 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
  • AND Package Information
  • libmariadb-devel-3.1.2-3.9 is installed
  • OR libmariadb_plugins-3.1.2-3.9 is installed
  • OR libmysqld-devel-10.2.25-3.17 is installed
  • OR libmysqld19-10.2.25-3.17 is installed
  • OR mariadb-10.2.25-3.17 is installed
  • OR mariadb-client-10.2.25-3.17 is installed
  • OR mariadb-connector-c-3.1.2-3.9 is installed
  • OR mariadb-errormessages-10.2.25-3.17 is installed
  • OR mariadb-tools-10.2.25-3.17 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 SP2 is installed
  • AND Package Information
  • ovmf-201911-7.5 is installed
  • OR ovmf-tools-201911-7.5 is installed
  • OR qemu-ovmf-x86_64-201911-7.5 is installed
  • OR qemu-uefi-aarch64-201911-7.5 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND Package Information
  • apache-commons-beanutils-1.9.2-1 is installed
  • OR apache-commons-beanutils-javadoc-1.9.2-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1-LTSS is installed
  • AND Package Information
  • kgraft-patch-3_12_74-60_64_54-default-9-2 is installed
  • OR kgraft-patch-3_12_74-60_64_54-xen-9-2 is installed
  • OR kgraft-patch-SLE12-SP1_Update_19-9-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • gv-3.7.4-1 is installed
  • OR wdiff-1.2.1-3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-BCL is installed
  • AND Package Information
  • openslp-2.0.0-18.17 is installed
  • OR openslp-32bit-2.0.0-18.17 is installed
  • OR openslp-server-2.0.0-18.17 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
  • AND Package Information
  • kgraft-patch-4_4_121-92_85-default-5-2 is installed
  • OR kgraft-patch-SLE12-SP2_Update_23-5-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-LTSS is installed
  • AND Package Information
  • xen-4.7.5_04-43.33 is installed
  • OR xen-doc-html-4.7.5_04-43.33 is installed
  • OR xen-libs-4.7.5_04-43.33 is installed
  • OR xen-libs-32bit-4.7.5_04-43.33 is installed
  • OR xen-tools-4.7.5_04-43.33 is installed
  • OR xen-tools-domU-4.7.5_04-43.33 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • gstreamer-plugins-good-1.8.3-15 is installed
  • OR gstreamer-plugins-good-lang-1.8.3-15 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND Package Information
  • kgraft-patch-4_4_178-94_91-default-3-2 is installed
  • OR kgraft-patch-SLE12-SP3_Update_25-3-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND Package Information
  • ghostscript-9.25-23.13 is installed
  • OR ghostscript-x11-9.25-23.13 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 15-LTSS is installed
  • AND Package Information
  • python2-salt-3000-5.78 is installed
  • OR python3-salt-3000-5.78 is installed
  • OR salt-3000-5.78 is installed
  • OR salt-api-3000-5.78 is installed
  • OR salt-bash-completion-3000-5.78 is installed
  • OR salt-cloud-3000-5.78 is installed
  • OR salt-doc-3000-5.78 is installed
  • OR salt-fish-completion-3000-5.78 is installed
  • OR salt-master-3000-5.78 is installed
  • OR salt-minion-3000-5.78 is installed
  • OR salt-proxy-3000-5.78 is installed
  • OR salt-ssh-3000-5.78 is installed
  • OR salt-standalone-formulas-configuration-3000-5.78 is installed
  • OR salt-syndic-3000-5.78 is installed
  • OR salt-zsh-completion-3000-5.78 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 15 is installed
  • AND Package Information
  • rmt-server-2.5.7-3.31 is installed
  • OR rmt-server-config-2.5.7-3.31 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 is installed
  • AND Package Information
  • libraw-0.18.9-3.5 is installed
  • OR libraw-devel-0.18.9-3.5 is installed
  • OR libraw16-0.18.9-3.5 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
  • AND Package Information
  • Mesa-dri-nouveau-18.3.2-34.9 is installed
  • OR Mesa-drivers-18.3.2-34.9 is installed
  • OR libXvMC_nouveau-18.3.2-34.9 is installed
  • OR libvdpau_nouveau-18.3.2-34.9 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 6 is installed
  • AND python-keystonemiddleware-2.3.1-1 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND Package Information
  • openstack-nova-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-api-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-cells-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-cert-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-compute-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-conductor-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-console-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-consoleauth-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-doc-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-novncproxy-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-placement-api-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-scheduler-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-serialproxy-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-vncproxy-14.0.10~dev13-4.11 is installed
  • OR python-nova-14.0.10~dev13-4.11 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 8 is installed
  • AND Package Information
  • evince-3.20.2-6.27 is installed
  • OR evince-browser-plugin-3.20.2-6.27 is installed
  • OR evince-lang-3.20.2-6.27 is installed
  • OR evince-plugin-djvudocument-3.20.2-6.27 is installed
  • OR evince-plugin-dvidocument-3.20.2-6.27 is installed
  • OR evince-plugin-pdfdocument-3.20.2-6.27 is installed
  • OR evince-plugin-psdocument-3.20.2-6.27 is installed
  • OR evince-plugin-tiffdocument-3.20.2-6.27 is installed
  • OR evince-plugin-xpsdocument-3.20.2-6.27 is installed
  • OR libevdocument3-4-3.20.2-6.27 is installed
  • OR libevview3-3-3.20.2-6.27 is installed
  • OR nautilus-evince-3.20.2-6.27 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND Package Information
  • dnsmasq-2.78-18.6 is installed
  • OR dnsmasq-utils-2.78-18.6 is installed
  • BACK