| Revision Date: | 2020-12-01 | Version: | 1 |
| Title: | Security update for ucode-intel (Moderate) |
| Description: |
This update for ucode-intel fixes the following issues:
- Updated Intel CPU Microcode to 20201110 official release.
- CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446)
- CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594)
- CVE-2020-8696: Vector Register Sampling Active INTEL-SA-00381 (bsc#1173592)
- Release notes:
- Security updates for [INTEL-SA-00381](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html).
- Security updates for [INTEL-SA-00389](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html).
- Update for functional issues. Refer to [Second Generation Intel? Xeon? Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
- Update for functional issues. Refer to [Intel? Xeon? Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
- Update for functional issues. Refer to [Intel? Xeon? Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.
- Update for functional issues. Refer to [10th Gen Intel? Core™ Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.
- Update for functional issues. Refer to [8th and 9th Gen Intel? Core™ Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.
- Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel? Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.
- Update for functional issues. Refer to [6th Gen Intel? Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
- Update for functional issues. Refer to [Intel? Xeon? E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.
- Update for functional issues. Refer to [Intel? Xeon? E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.
### New Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products
|:---------------|:---------|:------------|:---------|:---------|:---------
| CPX-SP | A1 | 06-55-0b/bf | | 0700001e | Xeon Scalable Gen3
| LKF | B2/B3 | 06-8a-01/10 | | 00000028 | Core w/Hybrid Technology
| TGL | B1 | 06-8c-01/80 | | 00000068 | Core Gen11 Mobile
| CML-H | R1 | 06-a5-02/20 | | 000000e0 | Core Gen10 Mobile
| CML-S62 | G1 | 06-a5-03/22 | | 000000e0 | Core Gen10
| CML-S102 | Q0 | 06-a5-05/22 | | 000000e0 | Core Gen10
| CML-U62 V2 | K0 | 06-a6-01/80 | | 000000e0 | Core Gen10 Mobile
### Updated Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products
|:---------------|:---------|:------------|:---------|:---------|:---------
| HSX-E/EP | Cx/M1 | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3
| SKL-U/Y | D0 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
| SKL-U23e | K1 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
| SKX-SP | B1 | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable
| SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable
| SKX-D | M1 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx
| CLX-SP | B0 | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2
| CLX-SP | B1 | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2
| APL | D0 | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
| APL | E0 | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx
| SKL-H/S | R0/N0 | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5
| GKL-R | R0 | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
| ICL-U/Y | D1 | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile
| AML-Y22 | H0 | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile
| KBL-U/Y | H0 | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile
| CFL-U43e | D0 | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile
| WHL-U | W0 | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile
| AML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
| CML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
| WHL-U | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile
| KBL-G/H/S/E3 | B0 | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6
| CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E
| CFL-S | B0 | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8
| CFL-H/S | P0 | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9
| CFL-H | R0 | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile
| CML-U62 | A0 | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1065729
1101644
1101645
1101651
1101656
1106812
1132091
1140747
1145575
1145738
1145739
1145740
1145741
1145742
1152472
1152489
1153274
1154353
1154488
1155518
1155798
1160682
1162501
1163985
1165933
1167773
1168959
1169771
1170446
1171857
1171988
1172021
1172177
1172201
1172356
1172491
1173074
1173592
1173594
1173849
1173941
1174072
1174116
1174126
1174127
1174128
1174129
1174157
1174185
1174205
1174247
1174263
1174264
1174331
1174332
1174333
1174356
1174362
1174396
1174398
1174407
1174409
1174411
1174438
1174462
1174513
1174527
1174543
1174627
1174645
1175259
1176086
1176181
1176671
1177914
CVE-2018-2938
CVE-2018-2940
CVE-2018-2952
CVE-2018-2973
CVE-2019-10081
CVE-2019-10082
CVE-2019-10092
CVE-2019-10097
CVE-2019-10098
CVE-2019-11023
CVE-2019-11478
CVE-2019-17639
CVE-2019-19956
CVE-2019-20372
CVE-2019-20446
CVE-2019-9517
CVE-2020-0305
CVE-2020-10135
CVE-2020-10781
CVE-2020-13790
CVE-2020-14331
CVE-2020-14556
CVE-2020-14577
CVE-2020-14578
CVE-2020-14579
CVE-2020-14581
CVE-2020-14583
CVE-2020-14593
CVE-2020-14621
CVE-2020-15999
CVE-2020-1720
CVE-2020-24659
CVE-2020-8164
CVE-2020-8695
CVE-2020-8696
CVE-2020-8698
SUSE-SU-2018:3045-1
SUSE-SU-2019:2237-1
SUSE-SU-2020:0348-1
SUSE-SU-2020:0589-1
SUSE-SU-2020:0629-1
SUSE-SU-2020:1532-2
SUSE-SU-2020:2102-1
SUSE-SU-2020:2453-1
SUSE-SU-2020:2988-1
SUSE-SU-2020:2995-1
SUSE-SU-2020:3372-1
|
| Platform(s): | SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Module for additional PackageHub packages 15
SUSE Linux Enterprise Module for Basesystem 15 SP1
SUSE Linux Enterprise Module for Basesystem 15 SP2
SUSE Linux Enterprise Module for Legacy Software 15
SUSE Linux Enterprise Module for Live Patching 15 SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2
SUSE Linux Enterprise Module for Public Cloud 15 SP2
SUSE Linux Enterprise Module for Server Applications 15 SP1
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 15-LTSS
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Workstation Extension 15 SP1
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud Crowbar 8
| Product(s): | |
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information
MozillaFirefox-31.5.3esr-0.8 is installed
OR MozillaFirefox-translations-31.5.3esr-0.8 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 is installed
AND Package Information
dbus-1-1.8.8-1 is installed
OR dbus-1-x11-1.8.8-1 is installed
OR libdbus-1-3-1.8.8-1 is installed
OR libdbus-1-3-32bit-1.8.8-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP1 is installed
AND Package Information
dbus-1-glib-0.100.2-3 is installed
OR dbus-1-glib-32bit-0.100.2-3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP2 is installed
AND autofs-5.0.9-21 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP3 is installed
AND cifs-utils-6.5-8 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP4 is installed
AND Package Information
gdk-pixbuf-loader-rsvg-2.40.20-5.6 is installed
OR librsvg-2-2-2.40.20-5.6 is installed
OR librsvg-2-2-32bit-2.40.20-5.6 is installed
OR rsvg-view-2.40.20-5.6 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed
AND Package Information
postgresql10-10.12-4.19 is installed
OR postgresql10-test-10.12-4.19 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed
AND ucode-intel-20201110-3.39 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed
AND Package Information
libxml2-2.9.7-3.22 is installed
OR libxml2-2-2.9.7-3.22 is installed
OR libxml2-2-32bit-2.9.7-3.22 is installed
OR libxml2-devel-2.9.7-3.22 is installed
OR libxml2-tools-2.9.7-3.22 is installed
OR python-libxml2-python-2.9.7-3.22 is installed
OR python3-libxml2-python-2.9.7-3.22 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Legacy Software 15 is installed
AND Package Information
java-1_8_0-openjdk-1.8.0.181-3.10 is installed
OR java-1_8_0-openjdk-demo-1.8.0.181-3.10 is installed
OR java-1_8_0-openjdk-devel-1.8.0.181-3.10 is installed
OR java-1_8_0-openjdk-headless-1.8.0.181-3.10 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed
AND Package Information
kernel-livepatch-4_12_14-197_7-default-2-2 is installed
OR kernel-livepatch-SLE15-SP1_Update_2-2-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed
AND Package Information
libjpeg-turbo-1.5.3-5.15 is installed
OR libjpeg62-32bit-62.2.0-5.15 is installed
OR libjpeg62-devel-32bit-62.2.0-5.15 is installed
OR libjpeg62-turbo-1.5.3-5.15 is installed
OR libjpeg8-devel-32bit-8.1.2-5.15 is installed
OR libturbojpeg0-32bit-8.1.2-5.15 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed
AND Package Information
graphviz-addons-2.40.1-6.3 is installed
OR graphviz-doc-2.40.1-6.3 is installed
OR graphviz-gnome-2.40.1-6.3 is installed
OR graphviz-guile-2.40.1-6.3 is installed
OR graphviz-gvedit-2.40.1-6.3 is installed
OR graphviz-java-2.40.1-6.3 is installed
OR graphviz-lua-2.40.1-6.3 is installed
OR graphviz-php-2.40.1-6.3 is installed
OR graphviz-ruby-2.40.1-6.3 is installed
OR graphviz-smyrna-2.40.1-6.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Public Cloud 15 SP2 is installed
AND Package Information
kernel-azure-5.3.18-18.12 is installed
OR kernel-azure-devel-5.3.18-18.12 is installed
OR kernel-devel-azure-5.3.18-18.12 is installed
OR kernel-source-azure-5.3.18-18.12 is installed
OR kernel-syms-azure-5.3.18-18.12 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
AND Package Information
apache2-2.4.33-3.21 is installed
OR apache2-devel-2.4.33-3.21 is installed
OR apache2-doc-2.4.33-3.21 is installed
OR apache2-prefork-2.4.33-3.21 is installed
OR apache2-utils-2.4.33-3.21 is installed
OR apache2-worker-2.4.33-3.21 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1 is installed
AND Package Information
jakarta-commons-fileupload-1.1.1-120 is installed
OR jakarta-commons-fileupload-javadoc-1.1.1-120 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1-LTSS is installed
AND Package Information
kgraft-patch-3_12_69-60_64_29-default-5-3 is installed
OR kgraft-patch-3_12_69-60_64_29-xen-5-3 is installed
OR kgraft-patch-SLE12-SP1_Update_12-5-3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2 is installed
AND Package Information
ibus-chewing-1.4.14-4 is installed
OR ibus-pinyin-1.5.0-7 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-BCL is installed
AND Package Information
libzypp-16.17.20-27.52 is installed
OR zypper-1.13.45-18.33 is installed
OR zypper-log-1.13.45-18.33 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
AND Package Information
dovecot22-2.2.31-19.11 is installed
OR dovecot22-backend-mysql-2.2.31-19.11 is installed
OR dovecot22-backend-pgsql-2.2.31-19.11 is installed
OR dovecot22-backend-sqlite-2.2.31-19.11 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-LTSS is installed
AND Package Information
kgraft-patch-4_4_120-92_70-default-5-2 is installed
OR kgraft-patch-SLE12-SP2_Update_20-5-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3 is installed
AND Package Information
augeas-1.2.0-15 is installed
OR augeas-lenses-1.2.0-15 is installed
OR libaugeas0-1.2.0-15 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-LTSS is installed
AND Package Information
libsolv-0.6.36-2.27.19 is installed
OR libsolv-tools-0.6.36-2.27.19 is installed
OR libzypp-16.20.2-27.60 is installed
OR perl-solv-0.6.36-2.27.19 is installed
OR python-solv-0.6.36-2.27.19 is installed
OR zypper-1.13.54-18.40 is installed
OR zypper-log-1.13.54-18.40 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
AND Package Information
libtiff5-4.0.9-44.21 is installed
OR libtiff5-32bit-4.0.9-44.21 is installed
OR tiff-4.0.9-44.21 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP4 is installed
AND Package Information
openssh-7.2p2-74.25 is installed
OR openssh-fips-7.2p2-74.25 is installed
OR openssh-helpers-7.2p2-74.25 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 15-LTSS is installed
AND Package Information
xen-4.10.4_14-3.38 is installed
OR xen-devel-4.10.4_14-3.38 is installed
OR xen-libs-4.10.4_14-3.38 is installed
OR xen-tools-4.10.4_14-3.38 is installed
OR xen-tools-domU-4.10.4_14-3.38 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server for SAP Applications 15 is installed
AND Package Information
java-1_8_0-ibm-1.8.0_sr6.15-3.41 is installed
OR java-1_8_0-ibm-alsa-1.8.0_sr6.15-3.41 is installed
OR java-1_8_0-ibm-devel-1.8.0_sr6.15-3.41 is installed
OR java-1_8_0-ibm-plugin-1.8.0_sr6.15-3.41 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
AND Package Information
gimp-2.8.22-5.3 is installed
OR gimp-devel-2.8.22-5.3 is installed
OR gimp-lang-2.8.22-5.3 is installed
OR gimp-plugins-python-2.8.22-5.3 is installed
OR libgimp-2_0-0-2.8.22-5.3 is installed
OR libgimpui-2_0-0-2.8.22-5.3 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 6 is installed
AND ruby2.1-rubygem-bson-1_11-1.11.1-2 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 7 is installed
AND python-XStatic-jquery-ui-1.11.0.1-2.3 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud Crowbar 8 is installed
AND Package Information
MozillaFirefox-60.9.0-109.86 is installed
OR MozillaFirefox-translations-common-60.9.0-109.86 is installed
|