openSUSE 15.5: 2024:1139-1 moderate: ucode-intel Denial of Service

opensuse

April 8, 2024

This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20240312 release

This update for ucode-intel fixes the following issues:

* Updated to Intel CPU Microcode 20240312 release. (bsc#1221323)

* CVE-2023-39368: Protection mechanism failure of bus lock regulator for some

Intel Processors may allow an unauthenticated user to potentially enable

denial of service via network access

* CVE-2023-38575: Non-transparent sharing of return predictor targets between

contexts in some Intel Processors may allow an authorized user to

potentially enable information disclosure via local access.

* CVE-2023-28746: Information exposure through microarchitectural state after

transient execution from some register files for some Intel Atom Processors

may allow an authenticated user to potentially enable information disclosure

via local access.

* CVE-2023-22655 Protection mechanism failure in some 3rd and 4th Generation

Intel Xeon Processors when using Intel SGX or Intel TDX may allow a

privileged user to potentially enable...

Topics Covered

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap Micro 5.3

zypper in -t patch openSUSE-Leap-Micro-5.3-2024-1139=1

* openSUSE Leap Micro 5.4

zypper in -t patch openSUSE-Leap-Micro-5.4-2024-1139=1

* openSUSE Leap 15.5

zypper in -t patch openSUSE-SLE-15.5-2024-1139=1

* SUSE Linux Enterprise Micro for Rancher 5.3

zypper in -t patch SUSE-SLE-Micro-5.3-2024-1139=1

* SUSE Linux Enterprise Micro 5.3

zypper in -t patch SUSE-SLE-Micro-5.3-2024-1139=1

* SUSE Linux Enterprise Micro for Rancher 5.4

zypper in -t patch SUSE-SLE-Micro-5.4-2024-1139=1

* SUSE Linux Enterprise Micro 5.4

zypper in -t patch SUSE-SLE-Micro-5.4-2024-1139=1

* SUSE Linux Enterprise Micro 5.5

zypper in -t patch SUSE-SLE-Micro-5.5-2024-1139=1

* Basesystem Module 15-SP5

zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1139=1

* SUSE Linux Enterprise High Performance Computing...