You are here
Home > Preporuke > Sigurnosni nedostaci programskog paketa ucode-intel

Sigurnosni nedostaci programskog paketa ucode-intel

by - 0

openSUSE Security Update: Security update for ucode-intel
______________________________________________________________________________

Announcement ID: openSUSE-SU-2019:2509-1
Rating: important
References: #1139073 #1141035 #1155988
Cross-References: CVE-2019-11135 CVE-2019-11139
Affected Products:
openSUSE Leap 15.1
______________________________________________________________________________

An update that solves two vulnerabilities and has one
errata is now available.

Description:

This update for ucode-intel fixes the following issues:

– Updated to 20191112 security release (bsc#1155988)
– Processor Identifier Version Products
– Model Stepping F-MO-S/PI Old->New
– —- new platforms —————————————-
– CML-U62 A0 6-a6-0/80 000000c6 Core Gen10 Mobile
– CNL-U D0 6-66-3/80 0000002a Core Gen8 Mobile
– SKX-SP B1 6-55-3/97 01000150 Xeon Scalable
– ICL U/Y D1 6-7e-5/80 00000046 Core Gen10 Mobile
– —- updated platforms ————————————
– SKL U/Y D0 6-4e-3/c0 000000cc->000000d4 Core Gen6 Mobile
– SKL H/S/E3 R0/N0 6-5e-3/36 000000cc->000000d4 Core Gen6
– AML-Y22 H0 6-8e-9/10 000000b4->000000c6 Core Gen8 Mobile
– KBL-U/Y H0 6-8e-9/c0 000000b4->000000c6 Core Gen7 Mobile
– CFL-U43e D0 6-8e-a/c0 000000b4->000000c6 Core Gen8 Mobile
– WHL-U W0 6-8e-b/d0 000000b8->000000c6 Core Gen8 Mobile
– AML-Y V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile
– CML-U42 V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile
– WHL-U V0 6-8e-c/94 000000b8->000000c6 Core Gen8 Mobile
– KBL-G/X H0 6-9e-9/2a 000000b4->000000c6 Core Gen7/Gen8
– KBL-H/S/E3 B0 6-9e-9/2a 000000b4->000000c6 Core Gen7; Xeon E3
v6
– CFL-H/S/E3 U0 6-9e-a/22 000000b4->000000c6 Core Gen8 Desktop,
Mobile, Xeon E
– CFL-S B0 6-9e-b/02 000000b4->000000c6 Core Gen8
– CFL-H R0 6-9e-d/22 000000b8->000000c6 Core Gen9 Mobile
– Includes security fixes for:
– CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
– CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues
(bsc#1141035)

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

– openSUSE Leap 15.1:

zypper in -t patch openSUSE-2019-2509=1

Package List:

– openSUSE Leap 15.1 (x86_64):

ucode-intel-20191112-lp151.2.9.1

References:

https://www.suse.com/security/cve/CVE-2019-11135.html
https://www.suse.com/security/cve/CVE-2019-11139.html
https://bugzilla.suse.com/1139073
https://bugzilla.suse.com/1141035
https://bugzilla.suse.com/1155988

—
To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

openSUSE Security Update: Security update for ucode-intel
______________________________________________________________________________

Announcement ID: openSUSE-SU-2019:2504-1
Rating: important
References: #1139073 #1141035 #1155988
Cross-References: CVE-2019-11135 CVE-2019-11139
Affected Products:
openSUSE Leap 15.0
______________________________________________________________________________

An update that solves two vulnerabilities and has one
errata is now available.

Description:

This update for ucode-intel fixes the following issues:

– Updated to 20191112 security release (bsc#1155988)
– Processor Identifier Version Products
– Model Stepping F-MO-S/PI Old->New
– —- new platforms —————————————-
– CML-U62 A0 6-a6-0/80 000000c6 Core Gen10 Mobile
– CNL-U D0 6-66-3/80 0000002a Core Gen8 Mobile
– SKX-SP B1 6-55-3/97 01000150 Xeon Scalable
– ICL U/Y D1 6-7e-5/80 00000046 Core Gen10 Mobile
– —- updated platforms ————————————
– SKL U/Y D0 6-4e-3/c0 000000cc->000000d4 Core Gen6 Mobile
– SKL H/S/E3 R0/N0 6-5e-3/36 000000cc->000000d4 Core Gen6
– AML-Y22 H0 6-8e-9/10 000000b4->000000c6 Core Gen8 Mobile
– KBL-U/Y H0 6-8e-9/c0 000000b4->000000c6 Core Gen7 Mobile
– CFL-U43e D0 6-8e-a/c0 000000b4->000000c6 Core Gen8 Mobile
– WHL-U W0 6-8e-b/d0 000000b8->000000c6 Core Gen8 Mobile
– AML-Y V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile
– CML-U42 V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile
– WHL-U V0 6-8e-c/94 000000b8->000000c6 Core Gen8 Mobile
– KBL-G/X H0 6-9e-9/2a 000000b4->000000c6 Core Gen7/Gen8
– KBL-H/S/E3 B0 6-9e-9/2a 000000b4->000000c6 Core Gen7; Xeon E3
v6
– CFL-H/S/E3 U0 6-9e-a/22 000000b4->000000c6 Core Gen8 Desktop,
Mobile, Xeon E
– CFL-S B0 6-9e-b/02 000000b4->000000c6 Core Gen8
– CFL-H R0 6-9e-d/22 000000b8->000000c6 Core Gen9 Mobile
– Includes security fixes for:
– CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
– CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues
(bsc#1141035)

This update was imported from the SUSE:SLE-15:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

– openSUSE Leap 15.0:

zypper in -t patch openSUSE-2019-2504=1

Package List:

– openSUSE Leap 15.0 (x86_64):

ucode-intel-20191112-lp150.2.30.1

References:

https://www.suse.com/security/cve/CVE-2019-11135.html
https://www.suse.com/security/cve/CVE-2019-11139.html
https://bugzilla.suse.com/1139073
https://bugzilla.suse.com/1141035
https://bugzilla.suse.com/1155988

—
To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

Top
More in Preporuke
Sigurnosni nedostatak jezgre operacijskog sustava

Otkriven je sigurnosni nedostatak jezgre operacijskog sustava Red Hat. Otkriveni nedostatak potencijalnim napadačima omogućuje stjecanje uvećanih ovlasti. Savjetuje se ažuriranje...

Close