Fedora 31: FEDORA-2019-93f9b654a5 Essential Security Patch Deployment

The microcode_ctl utility is a companion to the microcode driver written

by Tigran Aivazian .

The microcode update is volatile and needs to be uploaded on each system

boot i.e. it doesn't reflash your cpu permanently, reboot and it reverts

back to the old microcode.

The 5.3.11 stable kernel update contains a number of important security updates

across the tree, including mitigations for the most recent hardware issues

disclosed on Nov 12.

* Tue Nov 12 2019 Justin Forbes 2:2.1-33

- Update to microcode-20191112 for CVE fixes

[ 1 ] Bug #1753062 - CVE-2019-11135 hw: TSX Transaction Asynchronous Abort (TAA)

https://bugzilla.redhat.com/show_bug.cgi?id=1753062

[ 2 ] Bug #1646768 - CVE-2018-12207 hw: Machine Check Error on Page Size Change (IPU)

https://bugzilla.redhat.com/show_bug.cgi?id=1646768

[ 3 ] Bug #1724393 - CVE-2019-0154 hw: Intel GPU Denial Of Service while accessing MMIO in lower power state

https://bugzilla.redhat.com/show_bug.cgi?id=1724393

[ 4 ] Bug #1724398 - CVE-2019-0155 hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write

https://bugzilla.redhat.com/show_bug.cgi?id=1724398

[ 5 ] Bug #1758414 - CVE-2019-0117 hw: Intel SGX information leak

https://bugzilla.redhat.com/show_bug.cgi?id=1758414

su -c 'dnf upgrade --advisory FEDORA-2019-68d7f68507' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/