Oval Definition:	oval:org.opensuse.security:def:5390
Revision Date: 2020-12-02 Version: 1 Title: Security update for ucode-intel (Moderate) Description: This update for ucode-intel fixes the following issues: - Intel CPU Microcode updated to 20201027 prerelease - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446) - CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594) # New Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | TGL | B1 | 06-8c-01/80 | | 00000068 | Core Gen11 Mobile | CPX-SP | A1 | 06-55-0b/bf | | 0700001e | Xeon Scalable Gen3 | CML-H | R1 | 06-a5-02/20 | | 000000e0 | Core Gen10 Mobile | CML-S62 | G1 | 06-a5-03/22 | | 000000e0 | Core Gen10 | CML-S102 | Q0 | 06-a5-05/22 | | 000000e0 | Core Gen10 | CML-U62 V2 | K0 | 06-a6-01/80 | | 000000e0 | Core Gen10 Mobile # Updated Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | GKL-R | R0 | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | SKL-U/Y | D0 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | SKL-U23e | K1 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | APL | D0 | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx | APL | E0 | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx | SKL-H/S | R0/N0 | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5 | HSX-E/EP | Cx/M1 | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3 | SKX-SP | B1 | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable | SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable | SKX-D | M1 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx | CLX-SP | B0 | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2 | ICL-U/Y | D1 | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile | AML-Y22 | H0 | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-U/Y | H0 | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile | CFL-U43e | D0 | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile | WHL-U | W0 | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile | AML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | CML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | WHL-U | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-G/H/S/E3 | B0 | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6 | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E | CFL-S | B0 | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8 | CFL-H/S | P0 | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9 | CFL-H | R0 | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile | CML-U62 | A0 | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile Family: unix Class: patch Status: Reference(s): 1164692 1164825 1164860 1170446 1173594 CVE-2008-1227 CVE-2009-2666 CVE-2010-1163 CVE-2010-1167 CVE-2010-1646 CVE-2010-2947 CVE-2010-2947 CVE-2011-0010 CVE-2011-1761 CVE-2011-1947 CVE-2011-3389 CVE-2012-2337 CVE-2012-2669 CVE-2012-3482 CVE-2012-5532 CVE-2013-0211 CVE-2013-1775 CVE-2013-1776 CVE-2013-1984 CVE-2013-1991 CVE-2013-1995 CVE-2013-1998 CVE-2013-2000 CVE-2013-4233 CVE-2013-4234 CVE-2014-0107 CVE-2014-6272 CVE-2015-2304 CVE-2015-2924 CVE-2015-8918 CVE-2015-8919 CVE-2015-8920 CVE-2015-8921 CVE-2015-8922 CVE-2015-8923 CVE-2015-8924 CVE-2015-8925 CVE-2015-8926 CVE-2015-8928 CVE-2015-8929 CVE-2015-8930 CVE-2015-8931 CVE-2015-8932 CVE-2015-8933 CVE-2015-8934 CVE-2016-0764 CVE-2016-1541 CVE-2016-4300 CVE-2016-4301 CVE-2016-4302 CVE-2016-4809 CVE-2019-17569 CVE-2020-1935 CVE-2020-1938 CVE-2020-8695 CVE-2020-8698 SUSE-SU-2020:0598-1 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Live Patching 12 SP3 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE OpenStack Cloud 5 Product(s): Definition Synopsis SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND Package Information python-glanceclient-0.15.0-3.1 is installed OR python-keystoneclient-1.0.0-19.1 is installed OR python-keystoneclient-doc-1.0.0-19.1 is installed OR python-keystonemiddleware-1.2.0-4.1 is installed OR python-novaclient-2.20.0-6.1 is installed OR python-novaclient-doc-2.20.0-6.1 is installed OR python-swiftclient-2.3.1-3.1 is installed OR python-swiftclient-doc-2.3.1-3.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information libQtWebKit4-4.6.3-5.32.1 is installed OR libQtWebKit4-32bit-4.6.3-5.32.1 is installed OR libqt4-4.6.3-5.32.1 is installed OR libqt4-32bit-4.6.3-5.32.1 is installed OR libqt4-qt3support-4.6.3-5.32.1 is installed OR libqt4-qt3support-32bit-4.6.3-5.32.1 is installed OR libqt4-sql-4.6.3-5.32.1 is installed OR libqt4-sql-32bit-4.6.3-5.32.1 is installed OR libqt4-sql-mysql-4.6.3-5.32.1 is installed OR libqt4-sql-mysql-32bit-4.6.3-5.32.1 is installed OR libqt4-sql-postgresql-4.6.3-5.32.1 is installed OR libqt4-sql-postgresql-32bit-4.6.3-5.32.1 is installed OR libqt4-sql-sqlite-4.6.3-5.32.1 is installed OR libqt4-sql-sqlite-32bit-4.6.3-5.32.1 is installed OR libqt4-sql-unixODBC-4.6.3-5.32.1 is installed OR libqt4-sql-unixODBC-32bit-4.6.3-5.32.1 is installed OR libqt4-x11-4.6.3-5.32.1 is installed OR libqt4-x11-32bit-4.6.3-5.32.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information flash-player-11.2.202.491-0.11.1 is installed OR flash-player-gnome-11.2.202.491-0.11.1 is installed OR flash-player-kde4-11.2.202.491-0.11.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND hyper-v-6-11 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information NetworkManager-1.0.12-8 is installed OR NetworkManager-lang-1.0.12-8 is installed OR libnm-glib-vpn1-1.0.12-8 is installed OR libnm-glib4-1.0.12-8 is installed OR libnm-util2-1.0.12-8 is installed OR libnm0-1.0.12-8 is installed OR typelib-1_0-NM-1_0-1.0.12-8 is installed OR typelib-1_0-NMClient-1_0-1.0.12-8 is installed OR typelib-1_0-NetworkManager-1_0-1.0.12-8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information NetworkManager-1.0.12-12 is installed OR NetworkManager-lang-1.0.12-12 is installed OR libnm-glib-vpn1-1.0.12-12 is installed OR libnm-glib4-1.0.12-12 is installed OR libnm-util2-1.0.12-12 is installed OR libnm0-1.0.12-12 is installed OR typelib-1_0-NM-1_0-1.0.12-12 is installed OR typelib-1_0-NMClient-1_0-1.0.12-12 is installed OR typelib-1_0-NetworkManager-1_0-1.0.12-12 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND autofs-5.0.9-28.3 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 is installed AND Package Information kgraft-patch-3_12_51-52_31-default-5-2.2 is installed OR kgraft-patch-3_12_51-52_31-xen-5-2.2 is installed OR kgraft-patch-SLE12_Update_9-5-2.2 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND Package Information openvpn-2.3.8-16.17.1 is installed OR openvpn-auth-pam-plugin-2.3.8-16.17.1 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information apache-commons-daemon-1.0.15-6 is installed OR apache-commons-daemon-javadoc-1.0.15-6 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 is installed AND Package Information kgraft-patch-4_4_21-81-default-5-2 is installed OR kgraft-patch-SLE12-SP2_Update_1-5-2 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP3 is installed AND Package Information kgraft-patch-4_4_73-5-default-2-2.3.2 is installed OR kgraft-patch-SLE12-SP3_Update_0-2-2.3.2 is installed Definition Synopsis SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed AND Package Information puppet-3.8.5-15.3.3 is installed OR puppet-server-3.8.5-15.3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 12 is installed AND Package Information ruby2.1-rubygem-rack-1_4-1.4.5-8.10 is installed OR rubygem-rack-1_4-1.4.5-8.10 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information java-1_6_0-ibm-1.6.0_sr16.7-22.2 is installed OR java-1_6_0-ibm-fonts-1.6.0_sr16.7-22.2 is installed OR java-1_6_0-ibm-jdbc-1.6.0_sr16.7-22.2 is installed OR java-1_6_0-ibm-plugin-1.6.0_sr16.7-22.2 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 12 is installed AND Package Information kernel-ec2-3.12.44-52.18.1 is installed OR kernel-ec2-devel-3.12.44-52.18.1 is installed OR kernel-ec2-extra-3.12.44-52.18.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND Package Information apache2-mod_php7-7.0.7-15 is installed OR php7-7.0.7-15 is installed OR php7-bcmath-7.0.7-15 is installed OR php7-bz2-7.0.7-15 is installed OR php7-calendar-7.0.7-15 is installed OR php7-ctype-7.0.7-15 is installed OR php7-curl-7.0.7-15 is installed OR php7-dba-7.0.7-15 is installed OR php7-dom-7.0.7-15 is installed OR php7-enchant-7.0.7-15 is installed OR php7-exif-7.0.7-15 is installed OR php7-fastcgi-7.0.7-15 is installed OR php7-fileinfo-7.0.7-15 is installed OR php7-fpm-7.0.7-15 is installed OR php7-ftp-7.0.7-15 is installed OR php7-gd-7.0.7-15 is installed OR php7-gettext-7.0.7-15 is installed OR php7-gmp-7.0.7-15 is installed OR php7-iconv-7.0.7-15 is installed OR php7-imap-7.0.7-15 is installed OR php7-intl-7.0.7-15 is installed OR php7-json-7.0.7-15 is installed OR php7-ldap-7.0.7-15 is installed OR php7-mbstring-7.0.7-15 is installed OR php7-mcrypt-7.0.7-15 is installed OR php7-mysql-7.0.7-15 is installed OR php7-odbc-7.0.7-15 is installed OR php7-opcache-7.0.7-15 is installed OR php7-openssl-7.0.7-15 is installed OR php7-pcntl-7.0.7-15 is installed OR php7-pdo-7.0.7-15 is installed OR php7-pear-7.0.7-15 is installed OR php7-pear-Archive_Tar-7.0.7-15 is installed OR php7-pgsql-7.0.7-15 is installed OR php7-phar-7.0.7-15 is installed OR php7-posix-7.0.7-15 is installed OR php7-pspell-7.0.7-15 is installed OR php7-shmop-7.0.7-15 is installed OR php7-snmp-7.0.7-15 is installed OR php7-soap-7.0.7-15 is installed OR php7-sockets-7.0.7-15 is installed OR php7-sqlite-7.0.7-15 is installed OR php7-sysvmsg-7.0.7-15 is installed OR php7-sysvsem-7.0.7-15 is installed OR php7-sysvshm-7.0.7-15 is installed OR php7-tokenizer-7.0.7-15 is installed OR php7-wddx-7.0.7-15 is installed OR php7-xmlreader-7.0.7-15 is installed OR php7-xmlrpc-7.0.7-15 is installed OR php7-xmlwriter-7.0.7-15 is installed OR php7-xsl-7.0.7-15 is installed OR php7-zip-7.0.7-15 is installed OR php7-zlib-7.0.7-15 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND Package Information fetchmail-6.3.8.90-13.16.1 is installed OR fetchmailconf-6.3.8.90-13.16.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND acpid-1.0.6-91.16.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information avahi-0.6.23-11.30.4 is installed OR avahi-lang-0.6.23-11.30.4 is installed OR avahi-utils-0.6.23-11.30.4 is installed OR libavahi-client3-0.6.23-11.30.4 is installed OR libavahi-client3-32bit-0.6.23-11.30.4 is installed OR libavahi-client3-x86-0.6.23-11.30.4 is installed OR libavahi-common3-0.6.23-11.30.4 is installed OR libavahi-common3-32bit-0.6.23-11.30.4 is installed OR libavahi-common3-x86-0.6.23-11.30.4 is installed OR libavahi-core5-0.6.23-11.30.4 is installed OR libdns_sd-0.6.23-11.30.4 is installed OR libdns_sd-32bit-0.6.23-11.30.4 is installed OR libdns_sd-x86-0.6.23-11.30.4 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information ruby-1.8.7.p357-0.9.17.1 is installed OR ruby-doc-html-1.8.7.p357-0.9.17.1 is installed OR ruby-tk-1.8.7.p357-0.9.17.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information bzip2-1.0.6-27 is installed OR bzip2-doc-1.0.6-27 is installed OR libbz2-1-1.0.6-27 is installed OR libbz2-1-32bit-1.0.6-27 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND ant-1.9.4-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information xen-4.7.1_04-28.1 is installed OR xen-doc-html-4.7.1_04-28.1 is installed OR xen-libs-4.7.1_04-28.1 is installed OR xen-libs-32bit-4.7.1_04-28.1 is installed OR xen-tools-4.7.1_04-28.1 is installed OR xen-tools-domU-4.7.1_04-28.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information libhivex0-1.3.10-4 is installed OR perl-Win-Hivex-1.3.10-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND SuSEfirewall2-3.6.312.333-3.13 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information libxml2-2.9.1-26.15.1 is installed OR libxml2-2-2.9.1-26.15.1 is installed OR libxml2-2-32bit-2.9.1-26.15.1 is installed OR libxml2-doc-2.9.1-26.15.1 is installed OR libxml2-tools-2.9.1-26.15.1 is installed OR python-libxml2-2.9.1-26.15.1 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND ucode-intel-20201027-3.51 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND apache2-mod_nss-1.0.14-18 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND Package Information kernel-default-3.12.61-52.83 is installed OR kernel-default-base-3.12.61-52.83 is installed OR kernel-default-devel-3.12.61-52.83 is installed OR kernel-devel-3.12.61-52.83 is installed OR kernel-macros-3.12.61-52.83 is installed OR kernel-source-3.12.61-52.83 is installed OR kernel-syms-3.12.61-52.83 is installed OR kernel-xen-3.12.61-52.83 is installed OR kernel-xen-base-3.12.61-52.83 is installed OR kernel-xen-devel-3.12.61-52.83 is installed OR kgraft-patch-3_12_61-52_83-default-1-2 is installed OR kgraft-patch-3_12_61-52_83-xen-1-2 is installed OR kgraft-patch-SLE12_Update_24-1-2 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information kgraft-patch-3_12_69-60_64_29-default-5-3 is installed OR kgraft-patch-3_12_69-60_64_29-xen-5-3 is installed OR kgraft-patch-SLE12-SP1_Update_12-5-3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information ant-1.7.1-20.11.1 is installed OR ant-antlr-1.7.1-16.11.1 is installed OR ant-apache-bcel-1.7.1-16.11.1 is installed OR ant-apache-bsf-1.7.1-16.11.1 is installed OR ant-apache-log4j-1.7.1-16.11.1 is installed OR ant-apache-oro-1.7.1-16.11.1 is installed OR ant-apache-regexp-1.7.1-16.11.1 is installed OR ant-apache-resolver-1.7.1-16.11.1 is installed OR ant-commons-logging-1.7.1-16.11.1 is installed OR ant-javadoc-1.7.1-20.11.1 is installed OR ant-javamail-1.7.1-16.11.1 is installed OR ant-jdepend-1.7.1-16.11.1 is installed OR ant-jmf-1.7.1-16.11.1 is installed OR ant-junit-1.7.1-16.11.1 is installed OR ant-manual-1.7.1-20.11.1 is installed OR ant-nodeps-1.7.1-16.11.1 is installed OR ant-scripts-1.7.1-20.11.1 is installed OR ant-swing-1.7.1-16.11.1 is installed OR ant-trax-1.7.1-16.11.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND dbus-1-glib-devel-0.100.2-3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND Package Information gstreamer-plugins-bad-devel-1.8.3-17 is installed OR libgstinsertbin-1_0-0-1.8.3-17 is installed OR libgsturidownloader-1_0-0-1.8.3-17 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND Package Information DirectFB-devel-1.7.1-6 is installed OR lib++dfb-devel-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information flash-player-11.2.202.418-11.1 is installed OR flash-player-gnome-11.2.202.418-11.1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information python-base-2.7.9-24.2 is installed OR python-devel-2.7.9-24.2 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information sane-backends-1.0.24-3.1 is installed OR sane-backends-32bit-1.0.24-3.1 is installed OR sane-backends-autoconfig-1.0.24-3.1 is installed
BACK