Back
    Linux Security
    Linux Security
    Linux Security

    Fedora 32: microcode_ctl 2020-1afbe7ba2d

    Date 28 Nov 2020
    Category Fedora Linux Distribution - Security Advisories
    441
    Posted By LinuxSecurity Advisories
    - Update to upstream 2.1-31. 20201118 - Removal of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68[1]; - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up to 0x34[2]. [1] The microcode has been removed after reports of system hangs: https://github.com/intel/Intel-Linux-Processor- Microcode-Data-Files/issues/44 [2] Addresses CVE-2020-8695 for this platform. 
    --------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-1afbe7ba2d
2020-11-29 01:13:42.305883
--------------------------------------------------------------------------------

Name        : microcode_ctl
Product     : Fedora 32
Version     : 2.1
Release     : 39.3.fc32
URL         : https://pagure.io/microcode_ctl
Summary     : Tool to transform and deploy CPU microcode update for x86
Description :
The microcode_ctl utility is a companion to the microcode driver written
by Tigran Aivazian .

The microcode update is volatile and needs to be uploaded on each system
boot i.e. it doesn't reflash your cpu permanently, reboot and it reverts
back to the old microcode.

--------------------------------------------------------------------------------
Update Information:

- Update to upstream 2.1-31. 20201118   - Removal of 06-8c-01/0x80 (TGL-UP3/UP4
B1) microcode at revision 0x68[1];   - Update of 06-7a-01/0x01 (GLK B0)
microcode from revision 0x32 up to 0x34[2].  [1] The microcode has been removed
after reports of system hangs: https://github.com/intel/Intel-Linux-Processor-
Microcode-Data-Files/issues/44  [2] Addresses CVE-2020-8695 for this platform.
----  - Update to upstream 2.1-30. 20201110   - Addition of 06-55-0b/0xbf (CPX-
SP A1) microcode at revision 0x700001e;   - Addition of 06-8a-01/0x10 (LKF
B2/B3) microcode at revision 0x28;   - Addition of 06-8c-01/0x80 (TGL-UP3/UP4
B1) microcode at revision 0x68;   - Addition of 06-a5-02/0x20 (CML-H R1)
microcode at revision 0xe0;   - Addition of 06-a5-03/0x22 (CML-S 6+2 G1)
microcode at revision 0xe0;   - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0)
microcode at revision 0xe0;   - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0)
microcode at revision     0xe0;   - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S
C0/C1/M1/R2) microcode     from revision 0x43 up to 0x44;   - Update of
06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode from revision     0xd6 up to
0xe2;   - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
up to 0x1000159;   - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0)
microcode from     revision 0x2006906 up to 0x2006a08;   - Update of
06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01     up to 0x4003003;
- Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
0x5002f01 up to 0x5003003;   - Update of 06-5c-09/0x03 (APL D0) microcode from
revision 0x38 up     to 0x40;   - Update of 06-5c-0a/0x03 (APL B1/F1) microcode
from revision 0x16 up     to 0x1e;   - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3
N0/R0/S0) microcode from     revision 0xd6 up to 0xe2;   - Update of
06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up     to 0x18;   - Update
of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78     up to 0xa0;   -
Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xd6     up to
0xde;   - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
0xd6 up to 0xde;   - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode
from     revision 0xd6 up to 0xe0;   - Update of 06-8e-0b/0xd0 (WHL-U W0)
microcode from revision 0xd6 up     to 0xde;   - Update of 06-8e-0c/0x94 (AML-Y
4+2 V0, CML-U 4+2 V0, WHL-U V0)     microcode from revision 0xd6 up to 0xde;   -
Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from     revision
0xd6 up to 0xde;   - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from
revision     0xd6 up to 0xde;   - Update of 06-9e-0b/0x02 (CFL-E/H/S B0)
microcode from revision 0xd6     up to 0xde;   - Update of 06-9e-0c/0x22
(CFL-H/S/Xeon E P0) microcode from revision     0xd6 up to 0xde;   - Update of
06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision     0xd6 up to 0xde;
- Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca     up to
0xe0. - Addresses CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
--------------------------------------------------------------------------------
ChangeLog:

* Fri Nov 20 2020 Eugene Syromiatnikov  2:2.1-39.3
- Update to upstream 2.1-31. 20201118
  - Removal of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34.
* Wed Nov 11 2020 Eugene Syromiatnikov  2:2.1-39.2
- Fix incorrect CVE numbers in the previous changelog entry
* Wed Nov 11 2020 Eugene Syromiatnikov  2:2.1-39.1
- Update to upstream 2.1-30. 20201110
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode from revision
    0xd6 up to 0xe2;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode from
    revision 0x2006906 up to 0x2006a08;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode from
    revision 0xd6 up to 0xe2;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xd6
    up to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xd6 up to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xd6 up to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xd6 up to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xd6
    up to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xd6 up to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xd6 up to 0xde;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.
- Addresses CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1860693 - microcode_ctl-2.1-39.fc32.x86_64 does not protect against CVE-2020-0543 on i5-6200U
        https://bugzilla.redhat.com/show_bug.cgi?id=1860693
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-1afbe7ba2d' at the command
line. For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it.
To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it.
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it.

    Get the Latest News & Insights

    Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox

    Related News

    DreamBus, FreakOut Botnets Pose New Threat to Linux Systems
    DreamBus, FreakOut Botnets Pose New Threat to Linux Systems
    Red Hat introduces free RHEL for small production workloads and development teams
    Red Hat introduces free RHEL for small production workloads and development teams
    GeoIP for nftables
    GeoIP for nftables
    Freakout Botnet Targets Unpatched Linux Systems Showcase Image 7 A 15814 Esm W120
    'FreakOut' Botnet Targets Unpatched Linux Systems

    Advisories

    Debian LTS: DLA-2531-1: python-bottle security update
    Date 24 Jan 2021 @ 14:49
    openSUSE: 2021:0150-1 moderate: gdk-pixbuf
    Date 24 Jan 2021 @ 11:16
    openSUSE: 2021:0152-1 moderate: python-autobahn
    Date 24 Jan 2021 @ 11:15
    Debian: DSA-4833-2: gst-plugins-bad1.0 regression update
    Date 24 Jan 2021 @ 06:09

    LinuxSecurity Poll

    'Tis the season of giving! How have you given back to the open-source community?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 3 answer(s).
    /main-polls/49-tis-the-season-of-giving-how-have-you-given-back-to-the-open-source-community?task=poll.vote&format=json
    49
    radio
    [{"id":"171","title":"I've contributed to the development of an open-source project.","votes":"11","type":"x","order":"1","pct":34.38,"resources":[]},{"id":"172","title":"I've reviewed open-source code for security bugs.","votes":"6","type":"x","order":"2","pct":18.75,"resources":[]},{"id":"173","title":"I've made a donation to an open-source project.","votes":"15","type":"x","order":"3","pct":46.88,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350

    Please vote first in order to view vote results.


    VIEW MORE POLLS

    bottom 200
    Phishing Is The #1 Cybersecurity Threat Businesses Face

    Please enable / Bitte aktiviere JavaScript!
    Veuillez activer / Por favor activa el Javascript![ ? ]

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy. 

    Our Cookie Policy