Oval Definition:	oval:org.opensuse.security:def:50634
Revision Date: 2020-12-01 Version: 1 Title: Security update for ucode-intel (Important) Description: This update for ucode-intel fixes the following issues: This update contains the Intel QSR 2019.1 Microcode release (bsc#1111331) Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS) - CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling (MFBDS) - CVE-2018-12130: Microarchitectural Load Port Data Samling (MLPDS) - CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM) These updates contain the CPU Microcode adjustments for the software mitigations. For more information on this set of vulnerabilities, check out https://www.suse.com/support/kb/doc/?id=7023736 Release notes: ---- updated platforms ------------------------------------ SNB-E/EN/EP C1/M0 6-2d-6/6d 0000061d->0000061f Xeon E3/E5, Core X SNB-E/EN/EP C2/M1 6-2d-7/6d 00000714->00000718 Xeon E3/E5, Core X ---- new platforms ---------------------------------------- VLV C0 6-37-8/02 00000838 Atom Z series VLV C0 6-37-8/0C 00000838 Celeron N2xxx, Pentium N35xx VLV D0 6-37-9/0F 0000090c Atom E38xx CHV C0 6-4c-3/01 00000368 Atom X series CHV D0 6-4c-4/01 00000411 Atom X series Readded what missing in last update: BDX-ML B0/M0/R0 6-4f-1/ef 0b00002e->00000036 Xeon E5/E7 v4; Core i7-69xx/68xx Family: unix Class: patch Status: Reference(s): 1010979 1010980 1020451 1020456 1020458 1020460 1045450 1057152 1088278 1089524 1093733 1094301 1101776 1101777 1101786 1101788 1101791 1101794 1101800 1101802 1101804 1101810 1106514 1111331 1111647 1114498 1115637 1117328 1117740 1120805 1120807 1121231 1121232 1121233 1121234 1121235 1123919 1124729 1124734 1126284 1127367 1127369 1127370 1128378 1130040 1131941 1131945 1134078 1135881 1136021 1136029 1136480 1136572 1137715 1137940 1138313 1138358 1138494 1138529 1138822 1139453 1141980 1142038 1143856 1144155 1144889 1148125 1148177 1148311 1150690 1150733 1152856 1154212 1154999 1156288 1158505 1159856 1159858 1159860 1160250 1160251 1161052 1162117 1165241 1165710 1166844 1166916 1168669 1171252 1171254 1172442 1172443 1173032 1173389 957624 CVE-2016-9398 CVE-2016-9399 CVE-2017-14132 CVE-2017-5499 CVE-2017-5503 CVE-2017-5504 CVE-2017-5505 CVE-2017-9782 CVE-2018-11354 CVE-2018-11355 CVE-2018-11356 CVE-2018-11357 CVE-2018-11358 CVE-2018-11359 CVE-2018-11360 CVE-2018-11361 CVE-2018-11362 CVE-2018-12086 CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2018-14339 CVE-2018-14340 CVE-2018-14341 CVE-2018-14342 CVE-2018-14343 CVE-2018-14344 CVE-2018-14367 CVE-2018-14368 CVE-2018-14369 CVE-2018-14370 CVE-2018-16056 CVE-2018-16057 CVE-2018-16058 CVE-2018-18225 CVE-2018-18226 CVE-2018-18227 CVE-2018-18873 CVE-2018-19139 CVE-2018-19543 CVE-2018-19622 CVE-2018-19623 CVE-2018-19624 CVE-2018-19625 CVE-2018-19626 CVE-2018-19627 CVE-2018-19628 CVE-2018-20570 CVE-2018-20622 CVE-2018-9252 CVE-2019-10136 CVE-2019-10894 CVE-2019-10895 CVE-2019-10896 CVE-2019-10897 CVE-2019-10898 CVE-2019-10899 CVE-2019-10900 CVE-2019-10901 CVE-2019-10902 CVE-2019-10903 CVE-2019-11043 CVE-2019-11091 CVE-2019-13619 CVE-2019-15691 CVE-2019-15692 CVE-2019-15693 CVE-2019-15694 CVE-2019-15695 CVE-2019-16319 CVE-2019-19553 CVE-2019-2894 CVE-2019-2933 CVE-2019-2945 CVE-2019-2949 CVE-2019-2958 CVE-2019-2962 CVE-2019-2964 CVE-2019-2973 CVE-2019-2975 CVE-2019-2978 CVE-2019-2981 CVE-2019-2983 CVE-2019-2987 CVE-2019-2988 CVE-2019-2989 CVE-2019-2992 CVE-2019-2999 CVE-2019-3689 CVE-2019-5716 CVE-2019-5717 CVE-2019-5718 CVE-2019-5719 CVE-2019-5721 CVE-2019-6470 CVE-2019-6974 CVE-2019-7221 CVE-2019-8912 CVE-2019-9208 CVE-2019-9209 CVE-2019-9213 CVE-2019-9214 CVE-2020-10531 CVE-2020-11080 CVE-2020-11996 CVE-2020-12402 CVE-2020-12653 CVE-2020-12654 CVE-2020-7044 CVE-2020-7598 CVE-2020-8174 CVE-2020-9428 CVE-2020-9429 CVE-2020-9430 CVE-2020-9431 SUSE-SU-2019:0745-1 SUSE-SU-2019:1910-1 SUSE-SU-2019:2317-1 SUSE-SU-2019:2657-1 SUSE-SU-2019:2782-1 SUSE-SU-2019:2819-1 SUSE-SU-2019:3087-1 SUSE-SU-2019:3238-1 SUSE-SU-2020:0113-1 SUSE-SU-2020:0693-1 SUSE-SU-2020:0819-2 SUSE-SU-2020:1568-1 SUSE-SU-2020:1983-1 Platform(s): SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Legacy Software 15 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Web Scripting 15 SP1 SUSE Linux Enterprise Module for Web Scripting 15 SP2 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 15 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND wireshark-1.12.7-0.5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information MozillaFirefox-38.6.1esr-34 is installed OR MozillaFirefox-translations-38.6.1esr-34 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information elfutils-0.158-3 is installed OR libasm1-0.158-3 is installed OR libdw1-0.158-3 is installed OR libdw1-32bit-0.158-3 is installed OR libebl1-0.158-3 is installed OR libebl1-32bit-0.158-3 is installed OR libelf1-0.158-3 is installed OR libelf1-32bit-0.158-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND ft2demos-2.5.5-7.5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND busybox-1.21.1-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information gdk-pixbuf-lang-2.34.0-18 is installed OR gdk-pixbuf-query-loaders-2.34.0-18 is installed OR gdk-pixbuf-query-loaders-32bit-2.34.0-18 is installed OR libgdk_pixbuf-2_0-0-2.34.0-18 is installed OR libgdk_pixbuf-2_0-0-32bit-2.34.0-18 is installed OR typelib-1_0-GdkPixbuf-2_0-2.34.0-18 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information expat-2.1.0-21.3 is installed OR libexpat1-2.1.0-21.3 is installed OR libexpat1-32bit-2.1.0-21.3 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 is installed AND icu-60.2-3.9 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND ucode-intel-20190618-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 is installed AND Package Information java-1_8_0-openjdk-1.8.0.232-3.27 is installed OR java-1_8_0-openjdk-demo-1.8.0.232-3.27 is installed OR java-1_8_0-openjdk-devel-1.8.0.232-3.27 is installed OR java-1_8_0-openjdk-headless-1.8.0.232-3.27 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-25_13-default-6-2 is installed OR kernel-livepatch-SLE15_Update_3-6-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_7-default-9-2 is installed OR kernel-livepatch-SLE15-SP1_Update_2-9-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information python2-rhnlib-4.0.11-3.10 is installed OR rhnlib-4.0.11-3.10 is installed OR spacecmd-4.0.14-3.26 is installed OR spacewalk-backend-4.0.25-3.23 is installed OR spacewalk-backend-app-4.0.25-3.23 is installed OR spacewalk-backend-applet-4.0.25-3.23 is installed OR spacewalk-backend-cdn-4.0.25-3.23 is installed OR spacewalk-backend-config-files-4.0.25-3.23 is installed OR spacewalk-backend-config-files-common-4.0.25-3.23 is installed OR spacewalk-backend-config-files-tool-4.0.25-3.23 is installed OR spacewalk-backend-iss-4.0.25-3.23 is installed OR spacewalk-backend-iss-export-4.0.25-3.23 is installed OR spacewalk-backend-libs-4.0.25-3.23 is installed OR spacewalk-backend-package-push-server-4.0.25-3.23 is installed OR spacewalk-backend-server-4.0.25-3.23 is installed OR spacewalk-backend-sql-4.0.25-3.23 is installed OR spacewalk-backend-sql-oracle-4.0.25-3.23 is installed OR spacewalk-backend-sql-postgresql-4.0.25-3.23 is installed OR spacewalk-backend-tools-4.0.25-3.23 is installed OR spacewalk-backend-xml-export-libs-4.0.25-3.23 is installed OR spacewalk-backend-xmlrpc-4.0.25-3.23 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information dhcp-4.3.5-6.3 is installed OR dhcp-relay-4.3.5-6.3 is installed OR dhcp-server-4.3.5-6.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP1 is installed AND Package Information apache2-mod_php7-7.2.5-4.46 is installed OR php7-7.2.5-4.46 is installed OR php7-bcmath-7.2.5-4.46 is installed OR php7-bz2-7.2.5-4.46 is installed OR php7-calendar-7.2.5-4.46 is installed OR php7-ctype-7.2.5-4.46 is installed OR php7-curl-7.2.5-4.46 is installed OR php7-dba-7.2.5-4.46 is installed OR php7-devel-7.2.5-4.46 is installed OR php7-dom-7.2.5-4.46 is installed OR php7-enchant-7.2.5-4.46 is installed OR php7-exif-7.2.5-4.46 is installed OR php7-fastcgi-7.2.5-4.46 is installed OR php7-fileinfo-7.2.5-4.46 is installed OR php7-fpm-7.2.5-4.46 is installed OR php7-ftp-7.2.5-4.46 is installed OR php7-gd-7.2.5-4.46 is installed OR php7-gettext-7.2.5-4.46 is installed OR php7-gmp-7.2.5-4.46 is installed OR php7-iconv-7.2.5-4.46 is installed OR php7-intl-7.2.5-4.46 is installed OR php7-json-7.2.5-4.46 is installed OR php7-ldap-7.2.5-4.46 is installed OR php7-mbstring-7.2.5-4.46 is installed OR php7-mysql-7.2.5-4.46 is installed OR php7-odbc-7.2.5-4.46 is installed OR php7-opcache-7.2.5-4.46 is installed OR php7-openssl-7.2.5-4.46 is installed OR php7-pcntl-7.2.5-4.46 is installed OR php7-pdo-7.2.5-4.46 is installed OR php7-pear-7.2.5-4.46 is installed OR php7-pear-Archive_Tar-7.2.5-4.46 is installed OR php7-pgsql-7.2.5-4.46 is installed OR php7-phar-7.2.5-4.46 is installed OR php7-posix-7.2.5-4.46 is installed OR php7-shmop-7.2.5-4.46 is installed OR php7-snmp-7.2.5-4.46 is installed OR php7-soap-7.2.5-4.46 is installed OR php7-sockets-7.2.5-4.46 is installed OR php7-sqlite-7.2.5-4.46 is installed OR php7-sysvmsg-7.2.5-4.46 is installed OR php7-sysvsem-7.2.5-4.46 is installed OR php7-sysvshm-7.2.5-4.46 is installed OR php7-tokenizer-7.2.5-4.46 is installed OR php7-wddx-7.2.5-4.46 is installed OR php7-xmlreader-7.2.5-4.46 is installed OR php7-xmlrpc-7.2.5-4.46 is installed OR php7-xmlwriter-7.2.5-4.46 is installed OR php7-xsl-7.2.5-4.46 is installed OR php7-zip-7.2.5-4.46 is installed OR php7-zlib-7.2.5-4.46 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP2 is installed AND Package Information nodejs10-10.21.0-1.21 is installed OR nodejs10-devel-10.21.0-1.21 is installed OR nodejs10-docs-10.21.0-1.21 is installed OR npm10-10.21.0-1.21 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information cron-4.2-58 is installed OR cronie-1.4.11-58 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information libspice-server1-0.12.5-10 is installed OR spice-0.12.5-10 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND ft2demos-2.6.3-7.8 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information libsnmp30-5.7.3-6.3 is installed OR libsnmp30-32bit-5.7.3-6.3 is installed OR net-snmp-5.7.3-6.3 is installed OR perl-SNMP-5.7.3-6.3 is installed OR snmp-mibs-5.7.3-6.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information apache2-2.4.23-29.24 is installed OR apache2-doc-2.4.23-29.24 is installed OR apache2-example-pages-2.4.23-29.24 is installed OR apache2-prefork-2.4.23-29.24 is installed OR apache2-utils-2.4.23-29.24 is installed OR apache2-worker-2.4.23-29.24 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_103-92_56-default-6-2 is installed OR kgraft-patch-SLE12-SP2_Update_17-6-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information audiofile-0.3.6-10 is installed OR libaudiofile1-0.3.6-10 is installed OR libaudiofile1-32bit-0.3.6-10 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information libjpeg-turbo-1.5.3-31.19 is installed OR libjpeg62-62.2.0-31.19 is installed OR libjpeg62-32bit-62.2.0-31.19 is installed OR libjpeg62-turbo-1.5.3-31.19 is installed OR libjpeg8-8.1.2-31.19 is installed OR libjpeg8-32bit-8.1.2-31.19 is installed OR libturbojpeg0-8.1.2-31.19 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND gdb-8.3.1-2.14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information tomcat-8.0.53-29.16 is installed OR tomcat-admin-webapps-8.0.53-29.16 is installed OR tomcat-docs-webapp-8.0.53-29.16 is installed OR tomcat-el-3_0-api-8.0.53-29.16 is installed OR tomcat-javadoc-8.0.53-29.16 is installed OR tomcat-jsp-2_3-api-8.0.53-29.16 is installed OR tomcat-lib-8.0.53-29.16 is installed OR tomcat-servlet-3_1-api-8.0.53-29.16 is installed OR tomcat-webapps-8.0.53-29.16 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information file-5.22-10.6 is installed OR file-magic-5.22-10.6 is installed OR libmagic1-5.22-10.6 is installed OR libmagic1-32bit-5.22-10.6 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND permissions-20180125-3.21 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information dovecot23-2.3.10-4.22 is installed OR dovecot23-backend-mysql-2.3.10-4.22 is installed OR dovecot23-backend-pgsql-2.3.10-4.22 is installed OR dovecot23-backend-sqlite-2.3.10-4.22 is installed OR dovecot23-devel-2.3.10-4.22 is installed OR dovecot23-fts-2.3.10-4.22 is installed OR dovecot23-fts-lucene-2.3.10-4.22 is installed OR dovecot23-fts-solr-2.3.10-4.22 is installed OR dovecot23-fts-squat-2.3.10-4.22 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information MozillaThunderbird-60.7.0-3.33 is installed OR MozillaThunderbird-translations-common-60.7.0-3.33 is installed OR MozillaThunderbird-translations-other-60.7.0-3.33 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information ctdb-4.2.4-28.21 is installed OR libdcerpc-binding0-4.2.4-28.21 is installed OR libdcerpc-binding0-32bit-4.2.4-28.21 is installed OR libdcerpc0-4.2.4-28.21 is installed OR libdcerpc0-32bit-4.2.4-28.21 is installed OR libgensec0-4.2.4-28.21 is installed OR libgensec0-32bit-4.2.4-28.21 is installed OR libndr-krb5pac0-4.2.4-28.21 is installed OR libndr-krb5pac0-32bit-4.2.4-28.21 is installed OR libndr-nbt0-4.2.4-28.21 is installed OR libndr-nbt0-32bit-4.2.4-28.21 is installed OR libndr-standard0-4.2.4-28.21 is installed OR libndr-standard0-32bit-4.2.4-28.21 is installed OR libndr0-4.2.4-28.21 is installed OR libndr0-32bit-4.2.4-28.21 is installed OR libnetapi0-4.2.4-28.21 is installed OR libnetapi0-32bit-4.2.4-28.21 is installed OR libregistry0-4.2.4-28.21 is installed OR libsamba-credentials0-4.2.4-28.21 is installed OR libsamba-credentials0-32bit-4.2.4-28.21 is installed OR libsamba-hostconfig0-4.2.4-28.21 is installed OR libsamba-hostconfig0-32bit-4.2.4-28.21 is installed OR libsamba-passdb0-4.2.4-28.21 is installed OR libsamba-passdb0-32bit-4.2.4-28.21 is installed OR libsamba-util0-4.2.4-28.21 is installed OR libsamba-util0-32bit-4.2.4-28.21 is installed OR libsamdb0-4.2.4-28.21 is installed OR libsamdb0-32bit-4.2.4-28.21 is installed OR libsmbclient-raw0-4.2.4-28.21 is installed OR libsmbclient-raw0-32bit-4.2.4-28.21 is installed OR libsmbclient0-4.2.4-28.21 is installed OR libsmbclient0-32bit-4.2.4-28.21 is installed OR libsmbconf0-4.2.4-28.21 is installed OR libsmbconf0-32bit-4.2.4-28.21 is installed OR libsmbldap0-4.2.4-28.21 is installed OR libsmbldap0-32bit-4.2.4-28.21 is installed OR libtevent-util0-4.2.4-28.21 is installed OR libtevent-util0-32bit-4.2.4-28.21 is installed OR libwbclient0-4.2.4-28.21 is installed OR libwbclient0-32bit-4.2.4-28.21 is installed OR samba-4.2.4-28.21 is installed OR samba-32bit-4.2.4-28.21 is installed OR samba-client-4.2.4-28.21 is installed OR samba-client-32bit-4.2.4-28.21 is installed OR samba-doc-4.2.4-28.21 is installed OR samba-libs-4.2.4-28.21 is installed OR samba-libs-32bit-4.2.4-28.21 is installed OR samba-winbind-4.2.4-28.21 is installed OR samba-winbind-32bit-4.2.4-28.21 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information java-1_8_0-ibm-1.8.0_sr5.15-30.33 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33 is installed OR java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information libmysqlclient18-10.0.40.2-29.35 is installed OR libmysqlclient18-32bit-10.0.40.2-29.35 is installed OR mariadb-10.0.40.2-29.35 is installed OR mariadb-client-10.0.40.2-29.35 is installed OR mariadb-errormessages-10.0.40.2-29.35 is installed OR mariadb-tools-10.0.40.2-29.35 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information libjavascriptcoregtk-4_0-18-2.24.4-2.47 is installed OR libwebkit2gtk-4_0-37-2.24.4-2.47 is installed OR libwebkit2gtk3-lang-2.24.4-2.47 is installed OR typelib-1_0-JavaScriptCore-4_0-2.24.4-2.47 is installed OR typelib-1_0-WebKit2-4_0-2.24.4-2.47 is installed OR webkit2gtk-4_0-injected-bundles-2.24.4-2.47 is installed OR webkit2gtk3-2.24.4-2.47 is installed
BACK