Oval Definition:oval:org.opensuse.security:def:60865
Revision Date:2020-12-01Version:1
Title:Security update for ucode-intel (Important)
Description:

This update for ucode-intel fixes the following issues:

This update contains the Intel QSR 2019.1 Microcode release (bsc#1111331)

Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331)

- CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS) - CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling (MFBDS) - CVE-2018-12130: Microarchitectural Load Port Data Samling (MLPDS) - CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)

These updates contain the CPU Microcode adjustments for the software mitigations.

For more information on this set of vulnerabilities, check out https://www.suse.com/support/kb/doc/?id=7023736

Release notes:

---- updated platforms ------------------------------------ SNB-E/EN/EP C1/M0 6-2d-6/6d 0000061d->0000061f Xeon E3/E5, Core X SNB-E/EN/EP C2/M1 6-2d-7/6d 00000714->00000718 Xeon E3/E5, Core X
Family:unixClass:patch
Status:Reference(s):1023616
1043055
1048576
1053417
1090638
1103676
1111331
1119376
1127223
1127308
1128574
1129071
1132663
1132900
1133719
1138301
1138303
1138734
1145604
1150011
1151021
1153674
1155321
1156318
1159329
1161719
1163809
1165528
1169658
1172906
1172935
1173197
1174157
1174633
1174635
1174638
1175259
CVE-2009-5155
CVE-2017-17833
CVE-2017-18379
CVE-2017-9788
CVE-2018-1000223
CVE-2018-12126
CVE-2018-12127
CVE-2018-12130
CVE-2018-20060
CVE-2019-10161
CVE-2019-10167
CVE-2019-11091
CVE-2019-11236
CVE-2019-11324
CVE-2019-14287
CVE-2019-14822
CVE-2019-14822
CVE-2019-14835
CVE-2019-17639
CVE-2019-8625
CVE-2019-8710
CVE-2019-8720
CVE-2019-8743
CVE-2019-8764
CVE-2019-8766
CVE-2019-8769
CVE-2019-8771
CVE-2019-8782
CVE-2019-8783
CVE-2019-8808
CVE-2019-8811
CVE-2019-8812
CVE-2019-8813
CVE-2019-8814
CVE-2019-8815
CVE-2019-8816
CVE-2019-8819
CVE-2019-8820
CVE-2019-8823
CVE-2019-8835
CVE-2019-8844
CVE-2019-8846
CVE-2019-9169
CVE-2019-9740
CVE-2020-10018
CVE-2020-11793
CVE-2020-14093
CVE-2020-14154
CVE-2020-14345
CVE-2020-14346
CVE-2020-14347
CVE-2020-14577
CVE-2020-14578
CVE-2020-14579
CVE-2020-14583
CVE-2020-14593
CVE-2020-14621
CVE-2020-14954
CVE-2020-3862
CVE-2020-3864
CVE-2020-3865
CVE-2020-3867
CVE-2020-3868
SUSE-SU-2017:1961-1
SUSE-SU-2017:3441-1
SUSE-SU-2018:3070-1
SUSE-SU-2019:1954-1
SUSE-SU-2019:2389-1
SUSE-SU-2019:2666-1
SUSE-SU-2020:1135-1
SUSE-SU-2020:1794-1
SUSE-SU-2020:2331-1
SUSE-SU-2020:2482-1
Platform(s):openSUSE Leap 15.1
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE OpenStack Cloud 9
SUSE OpenStack Cloud Crowbar 8
SUSE OpenStack Cloud Crowbar 9
Product(s):
Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • graphviz-2.40.1-lp151.6.3 is installed
  • OR graphviz-addons-2.40.1-lp151.6.3 is installed
  • OR graphviz-devel-2.40.1-lp151.6.3 is installed
  • OR graphviz-doc-2.40.1-lp151.6.3 is installed
  • OR graphviz-gd-2.40.1-lp151.6.3 is installed
  • OR graphviz-gnome-2.40.1-lp151.6.3 is installed
  • OR graphviz-guile-2.40.1-lp151.6.3 is installed
  • OR graphviz-gvedit-2.40.1-lp151.6.3 is installed
  • OR graphviz-java-2.40.1-lp151.6.3 is installed
  • OR graphviz-lua-2.40.1-lp151.6.3 is installed
  • OR graphviz-perl-2.40.1-lp151.6.3 is installed
  • OR graphviz-php-2.40.1-lp151.6.3 is installed
  • OR graphviz-plugins-core-2.40.1-lp151.6.3 is installed
  • OR graphviz-python-2.40.1-lp151.6.3 is installed
  • OR graphviz-ruby-2.40.1-lp151.6.3 is installed
  • OR graphviz-smyrna-2.40.1-lp151.6.3 is installed
  • OR graphviz-tcl-2.40.1-lp151.6.3 is installed
  • OR libgraphviz6-2.40.1-lp151.6.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • apache2-2.4.23-29.3 is installed
  • OR apache2-doc-2.4.23-29.3 is installed
  • OR apache2-example-pages-2.4.23-29.3 is installed
  • OR apache2-prefork-2.4.23-29.3 is installed
  • OR apache2-utils-2.4.23-29.3 is installed
  • OR apache2-worker-2.4.23-29.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-BCL is installed
  • AND sudo-1.8.20p2-3.14 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
  • AND Package Information
  • ibus-1.5.13-15.11 is installed
  • OR ibus-gtk-1.5.13-15.11 is installed
  • OR ibus-gtk3-1.5.13-15.11 is installed
  • OR ibus-lang-1.5.13-15.11 is installed
  • OR libibus-1_0-5-1.5.13-15.11 is installed
  • OR typelib-1_0-IBus-1_0-1.5.13-15.11 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND Package Information
  • kgraft-patch-4_4_162-94_69-default-6-2 is installed
  • OR kgraft-patch-SLE12-SP3_Update_21-6-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND Package Information
  • openslp-2.0.0-18.15 is installed
  • OR openslp-32bit-2.0.0-18.15 is installed
  • OR openslp-server-2.0.0-18.15 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • bind-9.11.2-1 is installed
  • OR bind-chrootenv-9.11.2-1 is installed
  • OR bind-doc-9.11.2-1 is installed
  • OR bind-utils-9.11.2-1 is installed
  • OR libbind9-160-9.11.2-1 is installed
  • OR libdns169-9.11.2-1 is installed
  • OR libirs160-9.11.2-1 is installed
  • OR libisc166-9.11.2-1 is installed
  • OR libisc166-32bit-9.11.2-1 is installed
  • OR libisccc160-9.11.2-1 is installed
  • OR libisccfg160-9.11.2-1 is installed
  • OR liblwres160-9.11.2-1 is installed
  • OR python-bind-9.11.2-1 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 9 is installed
  • AND Package Information
  • ovmf-2017+git1510945757.b2662641d5-3.29 is installed
  • OR ovmf-tools-2017+git1510945757.b2662641d5-3.29 is installed
  • OR qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-3.29 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND ucode-intel-20190618-13.47 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 9 is installed
  • AND Package Information
  • MozillaFirefox-78.0.1-112.3 is installed
  • OR MozillaFirefox-branding-SLE-78-35.3 is installed
  • OR MozillaFirefox-devel-78.0.1-112.3 is installed
  • OR MozillaFirefox-translations-common-78.0.1-112.3 is installed
    • BACK