Oval Definition:	oval:org.opensuse.security:def:5541
Revision Date: 2020-12-02 Version: 1 Title: Security update for ucode-intel (Moderate) Description: This update for ucode-intel fixes the following issues: - Updated Intel CPU Microcode to 20201110 official release. - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446) - CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594) - CVE-2020-8696: Vector Register Sampling Active INTEL-SA-00381 (bsc#1173592) - Release notes: - Security updates for [INTEL-SA-00381](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html). - Security updates for [INTEL-SA-00389](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html). - Update for functional issues. Refer to [Second Generation Intel? Xeon? Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details. - Update for functional issues. Refer to [Intel? Xeon? Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details. - Update for functional issues. Refer to [Intel? Xeon? Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details. - Update for functional issues. Refer to [10th Gen Intel? Core™ Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details. - Update for functional issues. Refer to [8th and 9th Gen Intel? Core™ Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details. - Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel? Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details. - Update for functional issues. Refer to [6th Gen Intel? Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details. - Update for functional issues. Refer to [Intel? Xeon? E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details. - Update for functional issues. Refer to [Intel? Xeon? E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details. ### New Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | CPX-SP | A1 | 06-55-0b/bf | | 0700001e | Xeon Scalable Gen3 | LKF | B2/B3 | 06-8a-01/10 | | 00000028 | Core w/Hybrid Technology | TGL | B1 | 06-8c-01/80 | | 00000068 | Core Gen11 Mobile | CML-H | R1 | 06-a5-02/20 | | 000000e0 | Core Gen10 Mobile | CML-S62 | G1 | 06-a5-03/22 | | 000000e0 | Core Gen10 | CML-S102 | Q0 | 06-a5-05/22 | | 000000e0 | Core Gen10 | CML-U62 V2 | K0 | 06-a6-01/80 | | 000000e0 | Core Gen10 Mobile ### Updated Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | HSX-E/EP | Cx/M1 | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3 | SKL-U/Y | D0 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | SKL-U23e | K1 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | SKX-SP | B1 | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable | SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable | SKX-D | M1 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx | CLX-SP | B0 | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2 | APL | D0 | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx | APL | E0 | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx | SKL-H/S | R0/N0 | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5 | GKL-R | R0 | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | ICL-U/Y | D1 | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile | AML-Y22 | H0 | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-U/Y | H0 | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile | CFL-U43e | D0 | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile | WHL-U | W0 | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile | AML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | CML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | WHL-U | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-G/H/S/E3 | B0 | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6 | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E | CFL-S | B0 | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8 | CFL-H/S | P0 | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9 | CFL-H | R0 | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile | CML-U62 | A0 | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile Family: unix Class: patch Status: Reference(s): 1152692 1155327 1166881 1168345 1170446 1173592 1173594 CVE-2010-1163 CVE-2010-1646 CVE-2011-0010 CVE-2011-3602 CVE-2011-3635 CVE-2011-4349 CVE-2012-2337 CVE-2013-0157 CVE-2013-1775 CVE-2013-1776 CVE-2014-0004 CVE-2014-0011 CVE-2014-1932 CVE-2014-3634 CVE-2014-3686 CVE-2014-4607 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141 CVE-2014-8240 CVE-2014-9114 CVE-2014-9636 CVE-2015-0210 CVE-2015-0255 CVE-2015-1863 CVE-2015-5218 CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 CVE-2016-5011 CVE-2020-11501 CVE-2020-8695 CVE-2020-8696 CVE-2020-8698 SUSE-SU-2020:0948-1 SUSE-SU-2020:3374-1 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 11 SP1 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for High Performance Computing 12 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Toolchain 12 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE OpenStack Cloud 5 Product(s): Definition Synopsis SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND python-Jinja2-2.7.3-4.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information flash-player-11.2.202.559-0.32.1 is installed OR flash-player-gnome-11.2.202.559-0.32.1 is installed OR flash-player-kde4-11.2.202.559-0.32.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND radvd-1.9.7-2 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information colord-1.3.3-10 is installed OR colord-gtk-lang-0.1.26-6 is installed OR colord-lang-1.3.3-10 is installed OR libcolord-gtk1-0.1.26-6 is installed OR libcolord2-1.3.3-10 is installed OR libcolord2-32bit-1.3.3-10 is installed OR libcolorhug2-1.3.3-10 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information cpio-2.11-35 is installed OR cpio-lang-2.11-35 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information ImageMagick-6.8.8.1-71.85 is installed OR libMagick++-6_Q16-3-6.8.8.1-71.85 is installed OR libMagickCore-6_Q16-1-6.8.8.1-71.85 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-71.85 is installed OR libMagickWand-6_Q16-1-6.8.8.1-71.85 is installed Definition Synopsis SUSE Linux Enterprise for SAP 11 SP1 is installed AND Package Information java-1_4_2-ibm-sap-1.4.2_sr13.13-0.3.1 is installed OR java-1_4_2-ibm-sap-devel-1.4.2_sr13.13-0.3.1 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 is installed AND Package Information kgraft-patch-3_12_44-52_18-default-6-2.2 is installed OR kgraft-patch-3_12_44-52_18-xen-6-2.2 is installed OR kgraft-patch-SLE12_Update_7-6-2.2 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND Package Information MozillaFirefox-52.2.0esr-108.3 is installed OR MozillaFirefox-branding-SLE-52-31.1 is installed OR MozillaFirefox-devel-52.2.0esr-108.3 is installed OR MozillaFirefox-translations-52.2.0esr-108.3 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND fence-agents-4.0.22+git.1455008135.15c5e92-8 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information cups-1.7.5-20.23 is installed OR cups-client-1.7.5-20.23 is installed OR cups-libs-1.7.5-20.23 is installed OR cups-libs-32bit-1.7.5-20.23 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 12 is installed AND docker-1.6.2-31 is installed Definition Synopsis SUSE Linux Enterprise Module for High Performance Computing 12 is installed AND Package Information libpmi0-17.02.10-6.16 is installed OR libslurm31-17.02.10-6.16 is installed OR perl-slurm-17.02.10-6.16 is installed OR slurm-17.02.10-6.16 is installed OR slurm-auth-none-17.02.10-6.16 is installed OR slurm-devel-17.02.10-6.16 is installed OR slurm-doc-17.02.10-6.16 is installed OR slurm-lua-17.02.10-6.16 is installed OR slurm-munge-17.02.10-6.16 is installed OR slurm-pam_slurm-17.02.10-6.16 is installed OR slurm-plugins-17.02.10-6.16 is installed OR slurm-sched-wiki-17.02.10-6.16 is installed OR slurm-slurmdb-direct-17.02.10-6.16 is installed OR slurm-slurmdbd-17.02.10-6.16 is installed OR slurm-sql-17.02.10-6.16 is installed OR slurm-torque-17.02.10-6.16 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information compat-openssl098-0.9.8j-66 is installed OR libopenssl0_9_8-0.9.8j-66 is installed OR libopenssl0_9_8-32bit-0.9.8j-66 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 12 is installed AND Package Information kernel-ec2-3.12.39-47.1 is installed OR kernel-ec2-devel-3.12.39-47.1 is installed OR kernel-ec2-extra-3.12.39-47.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Toolchain 12 is installed AND Package Information cpp5-5.3.1+r233831-9.1 is installed OR gcc5-5.3.1+r233831-9.1 is installed OR gcc5-32bit-5.3.1+r233831-9.1 is installed OR gcc5-ada-5.3.1+r233831-9.1 is installed OR gcc5-ada-32bit-5.3.1+r233831-9.1 is installed OR gcc5-c++-5.3.1+r233831-9.1 is installed OR gcc5-c++-32bit-5.3.1+r233831-9.1 is installed OR gcc5-fortran-5.3.1+r233831-9.1 is installed OR gcc5-fortran-32bit-5.3.1+r233831-9.1 is installed OR gcc5-info-5.3.1+r233831-9.1 is installed OR gcc5-locale-5.3.1+r233831-9.1 is installed OR libada5-5.3.1+r233831-9.1 is installed OR libada5-32bit-5.3.1+r233831-9.1 is installed OR libffi-devel-gcc5-5.3.1+r233831-9.1 is installed OR libffi-devel-gcc5-32bit-5.3.1+r233831-9.1 is installed OR libffi-gcc5-5.3.1+r233831-9.1 is installed OR libstdc++6-devel-gcc5-5.3.1+r233831-9.1 is installed OR libstdc++6-devel-gcc5-32bit-5.3.1+r233831-9.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND Package Information libpython3_4m1_0-3.4.1-2 is installed OR python3-base-3.4.1-2 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1-LTSS is installed AND Package Information xen-4.0.3_21548_18-0.21.1 is installed OR xen-doc-html-4.0.3_21548_18-0.21.1 is installed OR xen-doc-pdf-4.0.3_21548_18-0.21.1 is installed OR xen-kmp-default-4.0.3_21548_18_2.6.32.59_0.19-0.21.1 is installed OR xen-kmp-pae-4.0.3_21548_18_2.6.32.59_0.19-0.21.1 is installed OR xen-kmp-trace-4.0.3_21548_18_2.6.32.59_0.19-0.21.1 is installed OR xen-libs-4.0.3_21548_18-0.21.1 is installed OR xen-tools-4.0.3_21548_18-0.21.1 is installed OR xen-tools-domU-4.0.3_21548_18-0.21.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND MozillaFirefox-17.0.4esr-0.5.1 is installed OR MozillaFirefox-branding-SLED-7-0.6.9.5 is installed OR MozillaFirefox-translations-17.0.4esr-0.5.1 is installed OR libfreebl3-3.14.2-0.4.3.2 is installed OR libfreebl3-32bit-3.14.2-0.4.3.2 is installed OR libfreebl3-x86-3.14.2-0.4.3.2 is installed OR mozilla-nspr-4.9.5-0.3.2 is installed OR mozilla-nspr-32bit-4.9.5-0.3.2 is installed OR mozilla-nspr-x86-4.9.5-0.3.2 is installed OR mozilla-nss-3.14.2-0.4.3.2 is installed OR mozilla-nss-32bit-3.14.2-0.4.3.2 is installed OR mozilla-nss-tools-3.14.2-0.4.3.2 is installed OR mozilla-nss-x86-3.14.2-0.4.3.2 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND MozillaFirefox-17.0.4esr-0.5.1 is installed OR MozillaFirefox-branding-SLED-7-0.6.9.5 is installed OR MozillaFirefox-translations-17.0.4esr-0.5.1 is installed OR libfreebl3-3.14.2-0.4.3.2 is installed OR libfreebl3-32bit-3.14.2-0.4.3.2 is installed OR libfreebl3-x86-3.14.2-0.4.3.2 is installed OR mozilla-nspr-4.9.5-0.3.2 is installed OR mozilla-nspr-32bit-4.9.5-0.3.2 is installed OR mozilla-nspr-x86-4.9.5-0.3.2 is installed OR mozilla-nss-3.14.2-0.4.3.2 is installed OR mozilla-nss-32bit-3.14.2-0.4.3.2 is installed OR mozilla-nss-tools-3.14.2-0.4.3.2 is installed OR mozilla-nss-x86-3.14.2-0.4.3.2 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND Package Information PackageKit-0.3.14-2.23.126 is installed OR PackageKit-lang-0.3.14-2.23.126 is installed OR hal-0.5.12-23.58.22 is installed OR hal-32bit-0.5.12-23.58.22 is installed OR hal-doc-0.5.12-23.58.21 is installed OR hal-x86-0.5.12-23.58.22 is installed OR libpackagekit-glib10-0.3.14-2.23.126 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information cups-1.3.9-8.46.46.1 is installed OR cups-client-1.3.9-8.46.46.1 is installed OR cups-libs-1.3.9-8.46.46.1 is installed OR cups-libs-32bit-1.3.9-8.46.46.1 is installed OR cups-libs-x86-1.3.9-8.46.46.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information MozillaFirefox-31.7.0esr-0.8.1 is installed OR MozillaFirefox-translations-31.7.0esr-0.8.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND apache-commons-httpclient-3.1-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND apache2-mod_nss-1.0.8-13 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information MozillaFirefox-52.2.0esr-108.3 is installed OR MozillaFirefox-branding-SLE-52-31.1 is installed OR MozillaFirefox-devel-52.2.0esr-108.3 is installed OR MozillaFirefox-translations-52.2.0esr-108.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information coreutils-8.25-12 is installed OR coreutils-lang-8.25-12 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information squidGuard-1.4-29 is installed OR squidGuard-doc-1.4-29 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information alsa-1.0.27.2-15 is installed OR alsa-docs-1.0.27.2-15 is installed OR libasound2-1.0.27.2-15 is installed OR libasound2-32bit-1.0.27.2-15 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information apache-commons-beanutils-1.9.2-1 is installed OR apache-commons-beanutils-javadoc-1.9.2-1 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information git-2.12.3-27.9 is installed OR git-core-2.12.3-27.9 is installed OR git-doc-2.12.3-27.9 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND ucode-intel-20201110-3.55 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND Package Information Mesa-devel-7.11.2-0.9.1 is installed OR Mesa-devel-32bit-7.11.2-0.9.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information libgtop-2_0-7-32bit-2.28.0-1.13.1 is installed OR libgtop-2_0-7-x86-2.28.0-1.13.1 is installed OR libgtop-devel-2.28.0-1.13.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND ctdb-devel-2.5.3-4 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information FastCGI-2.4.0-167 is installed OR perl-FastCGI-2.4.0-167 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND osc-0.158.0-14 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND Package Information FastCGI-2.4.0-168 is installed OR FastCGI-devel-2.4.0-168 is installed OR perl-FastCGI-2.4.0-168 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND bash-lang-4.2-75 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information gnome-online-accounts-3.10.5-1 is installed OR gnome-online-accounts-lang-3.10.5-1 is installed OR typelib-1_0-Goa-1_0-3.10.5-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND bash-lang-4.3-78 is installed
BACK