Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

SUSE: 2022:3445-1 Critical: kernel Security Patch for Meltdown

suse
Calendar Grey July 11, 2018
Scroller Suse
Unveil the SUSE Security Update for ucode-amd, targeting severe vulnerabilities and deploying vital fixes.
An update that solves two vulnerabilities and has one errata is now available

Summary

This update for ucode-intel fixes the following issues: The microcode bundles was updated to the 20180703 release For the listed CPU chipsets this fixes CVE-2018-3640 (Spectre v3a) and helps mitigating CVE-2018-3639 (Spectre v4) (bsc#1100147 bsc#1087082 bsc#1087083). More information on: ata-File Following chipsets are fixed in this round: Model Stepping F-MO-S/PI Old->New ---- updated platforms ------------------------------------ SNB-EP C1 6-2d-6/6d 0000061c->0000061d Xeon E5 SNB-EP C2 6-2d-7/6d 00000713->00000714 Xeon E5 IVT C0 6-3e-4/ed 0000042c->0000042d Xeon E5 v2; Core i7-4960X/4930K/4820K IVT D1 6-3e-7/ed 00000713->00000714 Xeon E5 v2 HSX-E/EP/4S C0 6-3f-2/6f 0000003c->0000003d Xeon E5 v3 HSX-EX E0

Topics%20covered

Topics Covered

security advisory SUSE Linux patch instructions ucode-intel Spectre mitigation

References

#1087082 #1087083 #1100147

Cross- CVE-2018-3639 CVE-2018-3640

Affected Products:

SUSE Linux Enterprise Module for Basesystem 15

https://www.suse.com/security/cve/CVE-2018-3639.html

https://www.suse.com/security/cve/CVE-2018-3640.html

https://bugzilla.suse.com/1087082

https://bugzilla.suse.com/1087083

https://bugzilla.suse.com/1100147

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2018:1926-1
Rating: important

Topics%20covered

Topics Covered

security advisory SUSE Linux patch instructions ucode-intel Spectre mitigation

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.