Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 536
Alerts This Week
Warning Icon 1 536

Ubuntu 17.10 USN-3531-3 Moderate: Intel Microcode Information Exposure

ubuntu
Calendar Grey March 29, 2018
Scroller Ubuntu
=========================================================================Ubuntu Security Notice USN-
The system could be made to expose sensitive information.

Summary

The system could be made to expose sensitive information.

Software Description:

- intel-microcode: Processor microcode for Intel CPUs

Details:

Jann Horn discovered that microprocessors utilizing speculative execution

and branch prediction may allow unauthorized memory reads via sidechannel

attacks. This flaw is known as Spectre. A local attacker could use this to

expose sensitive information, including kernel memory. (CVE-2017-5715)

This update provides the corrected microcode updates required for the

corresponding Linux kernel updates.

Topics%20covered

Topics Covered

security advisory Ubuntu moderate threat information exposure intel microcode

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.10:
  intel-microcode                 3.20180312.0~ubuntu17.10.1

Ubuntu 16.04 LTS:
  intel-microcode                 3.20180312.0~ubuntu16.04.1

Ubuntu 14.04 LTS:
  intel-microcode                 3.20180312.0~ubuntu14.04.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-3531-3

  https://ubuntu.com/security/notices/USN-3531-1

  CVE-2017-5715

March 29, 2018

Topics%20covered

Topics Covered

security advisory Ubuntu moderate threat information exposure intel microcode

Package Information

  https://launchpad.net/ubuntu/+source/intel-microcode/3.20180312.0~ubuntu17.10.1
  https://launchpad.net/ubuntu/+source/intel-microcode/3.20180312.0~ubuntu16.04.1
  https://launchpad.net/ubuntu/+source/intel-microcode/3.20180312.0~ubuntu14.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.