Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 508
Alerts This Week
Warning Icon 1 508

Stay Secure with the Latest Linux Advisories

Debianlts Large Esm H800
Debian LTS

Debian rtpengine Critical Origin Validation Issue DLA-4691-1 CVE-2025-53399

Calendar White Jul 21, 2026
Critical
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 Beets Moderate Web Issue Fix SUSE-SU-2026-21383-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Chromium Important Use After Free Issues Fix 2026-21382-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H800
openSUSE

openSUSE Leap 16.0 opam Important Security Update 2026-21380-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 ID 21374 Vim Important Code Execution Issues

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Python-Aiohttp Important Resource Issues Vuln 2026-21372-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H800
openSUSE

openSUSE Tumbleweed iscsiuio Moderate CVE-2026-44943 Advisory 2026-11317-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed libsoup Moderate CVE-2026-12478 Advisory 2026-11316-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE libgit2 Moderate Security Update for 5 Issues 2026-11315-1

Calendar White Jul 21, 2026
moderate
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -3 articles for you...
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorymoderatesecurity update

Fedora 40: 2025-dd577cf35f moderate: CPU microcode updates

Update to upstream 2.1-48. 20250211 Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) at revision 0x38; Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) at revision 0x38; Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) at revision 0x38; Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) at revision 0x38;. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-dd577cf35f 2025-02-20 02:26:20.996711+00:00 -------------------------------------------------------------------------------- Name : microcode_ctl Product : Fedora 40 Version : 2.1 Release : 61.6.fc40 URL : https://pagure.io/microcode_ctl Summary : Tool to transform and deploy CPU microcode update for x86 Description : The microcode_ctl utility is a companion to the microcode driver written by Tigran Aivazian . The microcode update is volatile and needs to be uploaded on each system boot i.e. it doesn't reflash your cpu permanently, reboot and it reverts back to the old microcode. -------------------------------------------------------------------------------- Update Information: Update to upstream 2.1-48. 20250211 Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) at revision 0x38; Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) at revision 0x38; Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) at revision 0x38; Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) at revision 0x38; Addition of 06-af-03/0x01 (SRF-SP C0) microcode at revision 0x3000330; Addition of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) at revision 0x12c; Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) at revision 0x38; Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) at revision 0x38; Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) at revision 0x38; Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05)at revision 0x38; Removal of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in intel-ucode/06-8f-05) at revision 0x2b000603; Removal of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at revision 0x2c000390; Removal of 06-8f-05/0x87 (SPR-SP E2) microcode at revision 0x2b000603; Removal of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision 0x2c000390; Removal of 06-8f-06/0x87 (SPR-SP E3) microcode (in intel-ucode/06-8f-05) at revision 0x2b000603; Removal of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at revision 0x2c000390; Removal of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in intel-ucode/06-8f-05) at revision 0x2b000603; Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in intel-ucode/06-8f-05) at revision 0x2b000603; Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in intel-ucode/06-8f-05) at revision 0x2c000390; Removal of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in intel-ucode/06-8f-06) at revision 0x2b000603; Removal of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at revision 0x2c000390; Removal of 06-8f-05/0x87 (SPR-SP E2) microcode (in intel-ucode/06-8f-06) at revision 0x2b000603; Removal of 06-8f-05/0x10 (SPR-HBM B1) microcode (in intel-ucode/06-8f-06) at revision 0x2c000390; Removal of 06-8f-06/0x87 (SPR-SP E3) microcode at revision 0x2b000603; Removal of 06-8f-06/0x10 microcode at revision 0x2c000390; Removal of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in intel-ucode/06-8f-06) at revision 0x2b000603; Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in intel-ucode/06-8f-06) at revision 0x2b000603; Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in intel-ucode/06-8f-06) at revision 0x2c000390; Removal of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in intel- ucode/06-ba-08) at revision 0x4123; Removal of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in intel-ucode/06-ba-08) at revision 0x4123; Removal of 06-ba-08/0xe0 microcode at revision 0x4123; Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003e7 up to 0xd0003f5; Update of 06-6c-01/0x10 (ICL-DB0) microcode from revision 0x10002b0 up to 0x10002c0; Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620; Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620; Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620; Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision 0x2b000603 up to 0x2b000620; Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620; Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from revision 0x2c000390 up to 0x2c0003e0; Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620; Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in intel-ucode/06-8f-08) from revision 0x2c000390 up to 0x2c0003e0; Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620; Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from revision 0x2c000390 up to 0x2c0003e0; Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620; Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620; Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision 0x2c000390 up to 0x2c0003e0; Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision 0x2b000603 up to 0x2b000620; Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision 0x37 up to 0x38; Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in intel-ucode/06-97-02) from revision 0x37 up to 0x38; Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02) from revision 0x37 up to 0x38; Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02) from revision 0x37 up to 0x38; Update of 06-97-02/0x07 (ADL-HX/S 8+8C0) microcode (in intel-ucode/06-97-05) from revision 0x37 up to 0x38; Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x37 up to 0x38; Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05) from revision 0x37 up to 0x38; Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05) from revision 0x37 up to 0x38; Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision 0x435 up to 0x436; Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in intel-ucode/06-9a-03) from revision 0x435 up to 0x436; Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in intel- ucode/06-9a-04) from revision 0x435 up to 0x436; Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x435 up to 0x436; Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x7 up to 0x9; Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xf8 up to 0xfa; Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision 0x100 up to 0x102; Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x62 up to 0x63; Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12b up to 0x12c; Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision 0x4123 up to 0x4124; Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in intel-ucode/06-ba-02) from revision 0x4123 up to 0x4124; Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from revision 0x4123 up to 0x4124; Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in intel-ucode/06-ba-03) from revision 0x4123 up to 0x4124; Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4123 up to 0x4124; Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from revision 0x4123 up to 0x4124; Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1a up to 0x1c; Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in intel-ucode/06-bf-02) from revision 0x37 up to 0x38; Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in intel-ucode/06-bf-02) from revision0x37 up to 0x38; Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x37 up to 0x38; Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02) from revision 0x37 up to 0x38; Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in intel-ucode/06-bf-05) from revision 0x37 up to 0x38; Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in intel-ucode/06-bf-05) from revision 0x37 up to 0x38; Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05) from revision 0x37 up to 0x38; Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x37 up to 0x38; Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000283 up to 0x21000291; Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in intel-ucode/06-cf-01) from revision 0x21000283 up to 0x21000291; Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in intel-ucode/06-cf-02) from revision 0x21000283 up to 0x21000291; Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000283 up to 0x21000291. Addresses CVE-2023-34440, CVE-2023-43758, CVE-2024-24582, CVE-2024-28047, CVE-2024-28127, CVE-2024-29214, CVE-2024-31068, CVE-2024-31157, CVE-2024-37020, CVE-2024-39279, CVE-2024-39355, CVE-2024-36293. -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 12 2025 Eugene Syromiatnikov 2:2.1-61.6 - Update to upstream 2.1-48. 20250211 - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) at revision 0x38; - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) at revision 0x38; - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) at revision 0x38; - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) at revision 0x38; - Addition of 06-af-03/0x01 (SRF-SP C0) microcode at revision 0x3000330; - Addition of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) at revision 0x12c; - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) at revision 0x38; - Addition of 06-bf-07/0x07microcode (in intel-ucode/06-bf-02) at revision 0x38; - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) at revision 0x38; - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) at revision 0x38; - Removal of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in intel-ucode/06-8f-05) at revision 0x2b000603; - Removal of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at revision 0x2c000390; - Removal of 06-8f-05/0x87 (SPR-SP E2) microcode at revision 0x2b000603; - Removal of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision 0x2c000390; - Removal of 06-8f-06/0x87 (SPR-SP E3) microcode (in intel-ucode/06-8f-05) at revision 0x2b000603; - Removal of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at revision 0x2c000390; - Removal of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in intel-ucode/06-8f-05) at revision 0x2b000603; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in intel-ucode/06-8f-05) at revision 0x2b000603; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in intel-ucode/06-8f-05) at revision 0x2c000390; - Removal of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in intel-ucode/06-8f-06) at revision 0x2b000603; - Removal of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at revision 0x2c000390; - Removal of 06-8f-05/0x87 (SPR-SP E2) microcode (in intel-ucode/06-8f-06) at revision 0x2b000603; - Removal of 06-8f-05/0x10 (SPR-HBM B1) microcode (in intel-ucode/06-8f-06) at revision 0x2c000390; - Removal of 06-8f-06/0x87 (SPR-SP E3) microcode at revision 0x2b000603; - Removal of 06-8f-06/0x10 microcode at revision 0x2c000390; - Removal of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in intel-ucode/06-8f-06) at revision 0x2b000603; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in intel-ucode/06-8f-06) at revision 0x2b000603; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in intel-ucode/06-8f-06) at revision 0x2c000390; - Removal of06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in intel-ucode/06-ba-08) at revision 0x4123; - Removal of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in intel-ucode/06-ba-08) at revision 0x4123; - Removal of 06-ba-08/0xe0 microcode at revision 0x4123; - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003e7 up to 0xd0003f5; - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002b0 up to 0x10002c0; - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620; - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620; - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620; - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision 0x2b000603 up to 0x2b000620; - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620; - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from revision 0x2c000390 up to 0x2c0003e0; - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620; - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in intel-ucode/06-8f-08) from revision 0x2c000390 up to 0x2c0003e0; - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620; - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from revision 0x2c000390 up to 0x2c0003e0; - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620; - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620; - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision 0x2c000390 up to 0x2c0003e0; - Update of06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision 0x2b000603 up to 0x2b000620; - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision 0x37 up to 0x38; - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in intel-ucode/06-97-02) from revision 0x37 up to 0x38; - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02) from revision 0x37 up to 0x38; - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02) from revision 0x37 up to 0x38; - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in intel-ucode/06-97-05) from revision 0x37 up to 0x38; - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x37 up to 0x38; - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05) from revision 0x37 up to 0x38; - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05) from revision 0x37 up to 0x38; - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision 0x435 up to 0x436; - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in intel-ucode/06-9a-03) from revision 0x435 up to 0x436; - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in intel-ucode/06-9a-04) from revision 0x435 up to 0x436; - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x435 up to 0x436; - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x7 up to 0x9; - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xf8 up to 0xfa; - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision 0x100 up to 0x102; - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x62 up to 0x63; - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12b up to 0x12c; - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision 0x4123 up to 0x4124; - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in intel-ucode/06-ba-02) from revision 0x4123 up to0x4124; - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from revision 0x4123 up to 0x4124; - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in intel-ucode/06-ba-03) from revision 0x4123 up to 0x4124; - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4123 up to 0x4124; - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from revision 0x4123 up to 0x4124; - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1a up to 0x1c; - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in intel-ucode/06-bf-02) from revision 0x37 up to 0x38; - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in intel-ucode/06-bf-02) from revision 0x37 up to 0x38; - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x37 up to 0x38; - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02) from revision 0x37 up to 0x38; - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in intel-ucode/06-bf-05) from revision 0x37 up to 0x38; - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in intel-ucode/06-bf-05) from revision 0x37 up to 0x38; - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05) from revision 0x37 up to 0x38; - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x37 up to 0x38; - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000283 up to 0x21000291; - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in intel-ucode/06-cf-01) from revision 0x21000283 up to 0x21000291; - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in intel-ucode/06-cf-02) from revision 0x21000283 up to 0x21000291; - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000283 up to 0x21000291. - Addresses CVE-2023-34440, CVE-2023-43758, CVE-2024-24582, CVE-2024-28047, CVE-2024-28127, CVE-2024-29214, CVE-2024-31068, CVE-2024-31157, CVE-2024-37020, CVE-2024-39279, CVE-2024-39355,CVE-2024-36293 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-dd577cf35f' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: . Keep abreast of essential security enhancements for Fedora 40’s microcode_ctl tool that tackle significant CPU vulnerabilities.. Fedora Update, Microcode_CTL, CPU Fixes, Intel Microcode, Security Update. . LinuxSecurity.com Team

Calendar%202 Feb 20, 2025 Fedora
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryFedoraupdate information

Fedora 41: FEDORA-2024-28ea86c8aa critical: microcode updates

Update to upstream 2.1-47. 20241112 Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603; Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0005c0 up to 0x2b000603;. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-28ea86c8aa 2024-11-16 02:13:46.131332 -------------------------------------------------------------------------------- Name : microcode_ctl Product : Fedora 41 Version : 2.1 Release : 67.fc41 URL : https://pagure.io/microcode_ctl Summary : Tool to transform and deploy CPU microcode update for x86 Description : The microcode_ctl utility is a companion to the microcode driver written by Tigran Aivazian . The microcode update is volatile and needs to be uploaded on each system boot i.e. it doesn't reflash your cpu permanently, reboot and it reverts back to the old microcode. -------------------------------------------------------------------------------- Update Information: Update to upstream 2.1-47. 20241112 Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603; Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0005c0 up to 0x2b000603; Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603; Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603; Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603; Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603; Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603; Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision0x2b0005c0 up to 0x2b000603; Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603; Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603; Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603; Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603; Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603; Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision 0x2b0005c0 up to 0x2b000603; Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603; Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603; Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603; Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603; Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603; Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision 0x2b0005c0 up to 0x2b000603; Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision 0x36 up to 0x37; Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in intel-ucode/06-97-02) from revision 0x36 up to 0x37; Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02) from revision 0x36 up to 0x37; Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02) from revision 0x36 up to 0x37; Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in intel-ucode/06-97-05) from revision 0x36 up to 0x37; Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode fromrevision 0x36 up to 0x37; Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05) from revision 0x36 up to 0x37; Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05) from revision 0x36 up to 0x37; Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision 0x434 up to 0x435; Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in intel-ucode/06-9a-03) from revision 0x434 up to 0x435; Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in intel-ucode/06-9a-04) from revision 0x434 up to 0x435; Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x434 up to 0x435; Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1f up to 0x20; Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision 0x4122 up to 0x4123; Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in intel-ucode/06-ba-02) from revision 0x4122 up to 0x4123; Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from revision 0x4122 up to 0x4123; Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in intel-ucode/06-ba-03) from revision 0x4122 up to 0x4123; Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4122 up to 0x4123; Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from revision 0x4122 up to 0x4123; Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123; Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123; Update of 06-ba-08/0xe0 microcode from revision 0x4122 up to 0x4123; Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in intel-ucode/06-bf-02) from revision 0x36 up to 0x37; Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in intel-ucode/06-bf-02) from revision 0x36 up to 0x37; Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x36 up to 0x37; Update of 06-bf-05/0x07 (ADL C0) microcode (inintel-ucode/06-bf-02) from revision 0x36 up to 0x37; Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in intel-ucode/06-bf-05) from revision 0x36 up to 0x37; Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in intel-ucode/06-bf-05) from revision 0x36 up to 0x37; Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05) from revision 0x36 up to 0x37; Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x36 up to 0x37; Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000230 up to 0x21000283; Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in intel-ucode/06-cf-01) from revision 0x21000230 up to 0x21000283; Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in intel-ucode/06-cf-02) from revision 0x21000230 up to 0x21000283; Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000230 up to 0x21000283. Addresses CVE-2024-21820, CVE-2024-21853, CVE-2024-23918, CVE-2024-23984 -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 13 2024 Eugene Syromiatnikov 2:2.1-67 - Update to upstream 2.1-47. 20241112 - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603; - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0005c0 up to 0x2b000603; - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603; - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603; - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603; - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603; - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603; - Update of06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0005c0 up to 0x2b000603; - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603; - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603; - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603; - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603; - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603; - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision 0x2b0005c0 up to 0x2b000603; - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603; - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603; - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603; - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603; - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603; - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision 0x2b0005c0 up to 0x2b000603; - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision 0x36 up to 0x37; - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in intel-ucode/06-97-02) from revision 0x36 up to 0x37; - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02) from revision 0x36 up to 0x37; - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02) from revision 0x36 up to 0x37; - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in intel-ucode/06-97-05) from revision 0x36 up to 0x37; - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x36 up to 0x37; - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05) from revision 0x36 up to 0x37; - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05) from revision 0x36 up to 0x37; - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision 0x434 up to 0x435; - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in intel-ucode/06-9a-03) from revision 0x434 up to 0x435; - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in intel-ucode/06-9a-04) from revision 0x434 up to 0x435; - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x434 up to 0x435; - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1f up to 0x20; - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision 0x4122 up to 0x4123; - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in intel-ucode/06-ba-02) from revision 0x4122 up to 0x4123; - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from revision 0x4122 up to 0x4123; - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in intel-ucode/06-ba-03) from revision 0x4122 up to 0x4123; - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4122 up to 0x4123; - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from revision 0x4122 up to 0x4123; - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123; - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123; - Update of 06-ba-08/0xe0 microcode from revision 0x4122 up to 0x4123; - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in intel-ucode/06-bf-02) from revision 0x36 up to 0x37; - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in intel-ucode/06-bf-02) from revision 0x36 up to 0x37; - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x36 up to 0x37; - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02) from revision 0x36 up to 0x37; - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in intel-ucode/06-bf-05) from revision 0x36 up to 0x37; - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in intel-ucode/06-bf-05) from revision 0x36 up to 0x37; - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05) from revision 0x36 up to 0x37; - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x36 up to 0x37; - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000230 up to 0x21000283; - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in intel-ucode/06-cf-01) from revision 0x21000230 up to 0x21000283; - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in intel-ucode/06-cf-02) from revision 0x21000230 up to 0x21000283; - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000230 up to 0x21000283. - Addresses CVE-2024-21820, CVE-2024-21853, CVE-2024-23918, CVE-2024-23984 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-28ea86c8aa' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct:https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . Fedora's microcode_ctl upgrade addresses vulnerabilities while enhancing CPU efficiency and functionality. Discover additional details!. microcode_ctl, Fedora updates, CPU security, microcode updates, intel drivers. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Nov 16, 2024 •Critical Fedora
Banner 1 1028x280 1708121660 1771599717
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryupdateFedora

Fedora 41: FEDORA-2024-d6726b5d75 High: Microcode Update

Update to upstream 2.1-45. 20240910 Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision 0x35 up to 0x36; Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in intel-ucode/06-97-02) from revision 0x35 up to 0x36;. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-d6726b5d75 2024-09-19 00:16:03.025097 -------------------------------------------------------------------------------- Name : microcode_ctl Product : Fedora 41 Version : 2.1 Release : 65.fc41 URL : https://pagure.io/microcode_ctl Summary : Tool to transform and deploy CPU microcode update for x86 Description : The microcode_ctl utility is a companion to the microcode driver written by Tigran Aivazian . The microcode update is volatile and needs to be uploaded on each system boot i.e. it doesn't reflash your cpu permanently, reboot and it reverts back to the old microcode. -------------------------------------------------------------------------------- Update Information: Update to upstream 2.1-45. 20240910 Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision 0x35 up to 0x36; Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in intel-ucode/06-97-02) from revision 0x35 up to 0x36; Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02) from revision 0x35 up to 0x36; Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02) from revision 0x35 up to 0x36; Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in intel-ucode/06-97-05) from revision 0x35 up to 0x36; Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x35 up to 0x36; Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05) from revision 0x35 up to 0x36; Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05) from revision 0x35 up to 0x36; Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision 0x433 up to0x434; Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in intel-ucode/06-9a-03) from revision 0x433 up to 0x434; Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in intel-ucode/06-9a-04) from revision 0x433 up to 0x434; Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x433 up to 0x434; Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1e up to 0x1f; Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x123 up to 0x129; Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision 0x4121 up to 0x4122; Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122; Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122; Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122; Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4121 up to 0x4122; Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122; Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122; Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122; Update of 06-ba-08/0xe0 microcode from revision 0x4121 up to 0x4122; Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in intel-ucode/06-bf-02) from revision 0x35 up to 0x36; Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in intel-ucode/06-bf-02) from revision 0x35 up to 0x36; Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x35 up to 0x36; Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02) from revision 0x35 up to 0x36; Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in intel-ucode/06-bf-05) from revision 0x35 up to 0x36; Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in intel-ucode/06-bf-05) fromrevision 0x35 up to 0x36; Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05) from revision 0x35 up to 0x36; Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x35 up to 0x36; Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x17 up to 0x1a (old pf 0x11). Addresses CVE-2024-23984, CVE-2024-24968 Added the documentation directory to the list of files owned by the package -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 13 2024 Eugene Syromiatnikov 2:2.1-65 - Update to upstream 2.1-45. 20240910 - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision 0x35 up to 0x36; - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in intel-ucode/06-97-02) from revision 0x35 up to 0x36; - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02) from revision 0x35 up to 0x36; - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02) from revision 0x35 up to 0x36; - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in intel-ucode/06-97-05) from revision 0x35 up to 0x36; - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x35 up to 0x36; - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05) from revision 0x35 up to 0x36; - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05) from revision 0x35 up to 0x36; - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision 0x433 up to 0x434; - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in intel-ucode/06-9a-03) from revision 0x433 up to 0x434; - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in intel-ucode/06-9a-04) from revision 0x433 up to 0x434; - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x433 up to 0x434; - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1e up to 0x1f; - Update of 06-b7-01/0x32 (RPL-S B0) microcodefrom revision 0x123 up to 0x129; - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision 0x4121 up to 0x4122; - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122; - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122; - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122; - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4121 up to 0x4122; - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122; - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122; - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122; - Update of 06-ba-08/0xe0 microcode from revision 0x4121 up to 0x4122; - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in intel-ucode/06-bf-02) from revision 0x35 up to 0x36; - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in intel-ucode/06-bf-02) from revision 0x35 up to 0x36; - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x35 up to 0x36; - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02) from revision 0x35 up to 0x36; - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in intel-ucode/06-bf-05) from revision 0x35 up to 0x36; - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in intel-ucode/06-bf-05) from revision 0x35 up to 0x36; - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05) from revision 0x35 up to 0x36; - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x35 up to 0x36; - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x17 up to 0x1a (old pf 0x11). - Addresses CVE-2024-23984, CVE-2024-24968 - Added the documentation directoryto the list of files owned by the package - Resolves RHBZ#2283214, RHBZ#2311299 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2283214 - The directory /usr/share/doc/microcode_ctl/ is not in the RPM database. https://bugzilla.redhat.com/show_bug.cgi?id=2283214 [ 2 ] Bug #2311299 - 20240910 is available https://bugzilla.redhat.com/show_bug.cgi?id=2311299 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-d6726b5d75' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . Examine the recent Fedora 41 microcode_ctl enhancements focused on urgent security patches, detailing particular Intel processor versions.. Fedora 41, microcode_ctl update, CPU security, Linux updates, microcode revisions. . LinuxSecurity.com Team

Calendar%202 Sep 19, 2024 Fedora
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisoryimportantfix

openSUSE Leap 42.3: 2019:1408-1 Important: ucode-intel Security Issues

An update that fixes four vulnerabilities is now available.. openSUSE Security Update: Security update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1408-1 Rating: important References: #1104479 #1111331 #1129231 Cross-References: CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for ucode-intel fixes the following issues: This update contains the Intel QSR 2019.1 Microcode release (boo#1111331 CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091) Release notes: - Processor Identifier Version Products - Model Stepping F-MO-S/PI Old-> New - ---- new platforms ---------------------------------------- - CLX-SP B1 6-55-7/bf 05000021 Xeon Scalable Gen2 - ---- updated platforms ------------------------------------ - SNB D2/G1/Q0 6-2a-7/12 0000002e-> 0000002f Core Gen2 - IVB E1/L1 6-3a-9/12 00000020-> 00000021 Core Gen3 - HSW C0 6-3c-3/32 00000025-> 00000027 Core Gen4 - BDW-U/Y E0/F0 6-3d-4/c0 0000002b-> 0000002d Core Gen5 - IVB-E/EP C1/M1/S1 6-3e-4/ed 0000042e-> 0000042f Core Gen3 X Series; Xeon E5 v2 - IVB-EX D1 6-3e-7/ed 00000714-> 00000715 Xeon E7 v2 - HSX-E/EP Cx/M1 6-3f-2/6f 00000041-> 00000043 Core Gen4 X series; Xeon E5 v3 - HSX-EX E0 6-3f-4/80 00000013-> 00000014 Xeon E7 v3 - HSW-U C0/D0 6-45-1/72 00000024-> 00000025 Core Gen4 - HSW-H C0 6-46-1/32 0000001a-> 0000001b Core Gen4 - BDW-H/E3 E0/G0 6-47-1/22 0000001e-> 00000020 Core Gen5 - SKL-U/Y D0/K1 6-4e-3/c0 000000c6-> 000000cc Core Gen6 -SKX-SP H0/M0/U0 6-55-4/b7 0200005a-> 0000005e Xeon Scalable - SKX-D M1 6-55-4/b7 0200005a-> 0000005e Xeon D-21xx - BDX-DE V1 6-56-2/10 00000019-> 0000001a Xeon D-1520/40 - BDX-DE V2/3 6-56-3/10 07000016-> 07000017 Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19 - BDX-DE Y0 6-56-4/10 0f000014-> 0f000015 Xeon D-1557/59/67/71/77/81/87 - BDX-NS A0 6-56-5/10 0e00000c-> 0e00000d Xeon D-1513N/23/33/43/53 - APL D0 6-5c-9/03 00000036-> 00000038 Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx - SKL-H/S R0/N0 6-5e-3/36 000000c6-> 000000cc Core Gen6; Xeon E3 v5 - DNV B0 6-5f-1/01 00000024-> 0000002e Atom Processor C Series - GLK B0 6-7a-1/01 0000002c-> 0000002e Pentium Silver N/J5xxx, Celeron N/J4xxx - AML-Y22 H0 6-8e-9/10 0000009e-> 000000b4 Core Gen8 Mobile - KBL-U/Y H0 6-8e-9/c0 0000009a-> 000000b4 Core Gen7 Mobile - CFL-U43e D0 6-8e-a/c0 0000009e-> 000000b4 Core Gen8 Mobile - WHL-U W0 6-8e-b/d0 000000a4-> 000000b8 Core Gen8 Mobile - WHL-U V0 6-8e-d/94 000000b2-> 000000b8 Core Gen8 Mobile - KBL-G/H/S/E3 B0 6-9e-9/2a 0000009a-> 000000b4 Core Gen7; Xeon E3 v6 - CFL-H/S/E3 U0 6-9e-a/22 000000aa-> 000000b4 Core Gen8 Desktop, Mobile, Xeon E - CFL-S B0 6-9e-b/02 000000aa-> 000000b4 Core Gen8 - CFL-H/S P0 6-9e-c/22 000000a2-> 000000ae Core Gen9 - CFL-H R0 6-9e-d/22 000000b0-> 000000b8 Core Gen9 Mobile It also contains the update to 20190312 release (boo#1129231): - Processor Identifier Version Products - Model Stepping F-MO-S/PI Old-> New - ---- new platforms ---------------------------------------- - AML-Y22 H0 6-8e-9/10 0000009e Core Gen8 Mobile - WHL-U W0 6-8e-b/d0 000000a4 Core Gen8 Mobile -WHL-U V0 6-8e-d/94 000000b2 Core Gen8 Mobile - CFL-S P0 6-9e-c/22 000000a2 Core Gen9 Desktop - CFL-H R0 6-9e-d/22 000000b0 Core Gen9 Mobile - ---- updated platforms ------------------------------------ - HSX-E/EP Cx/M1 6-3f-2/6f 0000003d-> 00000041 Core Gen4 X series; Xeon E5 v3 - HSX-EX E0 6-3f-4/80 00000012-> 00000013 Xeon E7 v3 - SKX-SP H0/M0/U0 6-55-4/b7 0200004d-> 0000005a Xeon Scalable - SKX-D M1 6-55-4/b7 0200004d-> 0000005a Xeon D-21xx - BDX-DE V1 6-56-2/10 00000017-> 00000019 Xeon D-1520/40 - BDX-DE V2/3 6-56-3/10 07000013-> 07000016 Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19 - BDX-DE Y0 6-56-4/10 0f000012-> 0f000014 Xeon D-1557/59/67/71/77/81/87 - BDX-NS A0 6-56-5/10 0e00000a-> 0e00000c Xeon D-1513N/23/33/43/53 - APL D0 6-5c-9/03 00000032-> 00000036 Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx - APL E0 6-5c-a/03 0000000c-> 00000010 Atom x5/7-E39xx - GLK B0 6-7a-1/01 00000028-> 0000002c Pentium Silver N/J5xxx, Celeron N/J4xxx - KBL-U/Y H0 6-8e-9/c0 0000008e-> 0000009a Core Gen7 Mobile - CFL-U43e D0 6-8e-a/c0 00000096-> 0000009e Core Gen8 Mobile - KBL-H/S/E3 B0 6-9e-9/2a 0000008e-> 0000009a Core Gen7; Xeon E3 v6 - CFL-H/S/E3 U0 6-9e-a/22 00000096-> 000000aa Core Gen8 Desktop, Mobile, Xeon E - CFL-S B0 6-9e-b/02 0000008e-> 000000aa Core Gen8 And it also contains the update to 20180807a, no change except licensing. (boo#1104479). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1408=1 Package List: -openSUSE Leap 42.3 (i586 x86_64): ucode-intel-20190514-32.1 ucode-intel-blob-20190514-32.1 ucode-intel-debuginfo-20190514-32.1 ucode-intel-debugsource-20190514-32.1 References: https://www.suse.com/security/cve/CVE-2018-12126.html https://www.suse.com/security/cve/CVE-2018-12127.html https://www.suse.com/security/cve/CVE-2018-12130.html https://www.suse.com/security/cve/CVE-2019-11091.html https://bugzilla.suse.com/1104479 https://bugzilla.suse.com/1111331 https://bugzilla.suse.com/1129231 -- . Recent patch released for ucode-intel addresses multiple vulnerabilities in openSUSE, boosting overall system security and performance.. openSUSE Update, ucode-intel Fix, Important Security Update, Intel Microcode, CPU Vulnerabilities. . Severity: Important. LinuxSecurity.com Team

Calendar%202 May 20, 2019 •Important OpenSUSE
Banner 1 1028x280 1708121660 1771599717
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisoryred hatimportant

Red Hat: RHSA-2019-1155 Important: Kernel Security Update for RHEL 7.5

An update for kernel is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: kernel security update Advisory ID: RHSA-2019:1155-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2019:1155 Issue date: 2019-05-14 CVE Names: CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091 ==================================================================== 1. Summary: An update for kernel is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux ComputeNode EUS (v. 7.5) - noarch, x86_64 Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5) - x86_64 Red Hat Enterprise Linux Server EUS (v. 7.5) - noarch, ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional EUS (v. 7.5) - ppc64, ppc64le, x86_64 3. Description: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * A flaw was found in the implementation of the "fill buffer", a mechanism used by modern CPUs when a cache-miss is made on L1 CPU cache. If an attacker can generate a load operation that would create a page fault, the execution will continue speculatively with incorrect data from the fill buffer while the data is fetched from higher level caches. This response time can be measured to infer datain the fill buffer. (CVE-2018-12130) * Modern Intel microprocessors implement hardware-level micro-optimizations to improve the performance of writing data back to CPU caches. The write operation is split into STA (STore Address) and STD (STore Data) sub-operations. These sub-operations allow the processor to hand-off address generation logic into these sub-operations for optimized writes. Both of these sub-operations write to a shared distributed processor structure called the 'processor store buffer'. As a result, an unprivileged attacker could use this flaw to read private data resident within the CPU's processor store buffer. (CVE-2018-12126) * Microprocessors use a ‘load port’ subcomponent to perform load operations from memory or IO. During a load operation, the load port receives data from the memory or IO subsystem and then provides the data to the CPU registers and operations in the CPU’s pipelines. Stale load operations results are stored in the 'load port' table until overwritten by newer operations. Certain load-port operations triggered by an attacker can be used to reveal data about previous stale requests leaking data back to the attacker via a timing side-channel. (CVE-2018-12127) * Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. (CVE-2019-11091) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1646781 - CVE-2018-12126 hardware: Microarchitectural Store Buffer Data Sampling (MSBDS) 1646784 - CVE-2018-12130 hardware: Microarchitectural FillBuffer Data Sampling (MFBDS) 1667782 - CVE-2018-12127 hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS) 1705312 - CVE-2019-11091 hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM) 6. Package List: Red Hat Enterprise Linux ComputeNode EUS (v. 7.5): Source: kernel-3.10.0-862.32.2.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-862.32.2.el7.noarch.rpm kernel-doc-3.10.0-862.32.2.el7.noarch.rpm x86_64: kernel-3.10.0-862.32.2.el7.x86_64.rpm kernel-debug-3.10.0-862.32.2.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-862.32.2.el7.x86_64.rpm kernel-debug-devel-3.10.0-862.32.2.el7.x86_64.rpm kernel-debuginfo-3.10.0-862.32.2.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-862.32.2.el7.x86_64.rpm kernel-devel-3.10.0-862.32.2.el7.x86_64.rpm kernel-headers-3.10.0-862.32.2.el7.x86_64.rpm kernel-tools-3.10.0-862.32.2.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-862.32.2.el7.x86_64.rpm kernel-tools-libs-3.10.0-862.32.2.el7.x86_64.rpm perf-3.10.0-862.32.2.el7.x86_64.rpm perf-debuginfo-3.10.0-862.32.2.el7.x86_64.rpm python-perf-3.10.0-862.32.2.el7.x86_64.rpm python-perf-debuginfo-3.10.0-862.32.2.el7.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5): x86_64: kernel-debug-debuginfo-3.10.0-862.32.2.el7.x86_64.rpm kernel-debuginfo-3.10.0-862.32.2.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-862.32.2.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-862.32.2.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-862.32.2.el7.x86_64.rpm perf-debuginfo-3.10.0-862.32.2.el7.x86_64.rpm python-perf-debuginfo-3.10.0-862.32.2.el7.x86_64.rpm Red Hat Enterprise Linux Server EUS (v.7.5): Source: kernel-3.10.0-862.32.2.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-862.32.2.el7.noarch.rpm kernel-doc-3.10.0-862.32.2.el7.noarch.rpm ppc64: kernel-3.10.0-862.32.2.el7.ppc64.rpm kernel-bootwrapper-3.10.0-862.32.2.el7.ppc64.rpm kernel-debug-3.10.0-862.32.2.el7.ppc64.rpm kernel-debug-debuginfo-3.10.0-862.32.2.el7.ppc64.rpm kernel-debug-devel-3.10.0-862.32.2.el7.ppc64.rpm kernel-debuginfo-3.10.0-862.32.2.el7.ppc64.rpm kernel-debuginfo-common-ppc64-3.10.0-862.32.2.el7.ppc64.rpm kernel-devel-3.10.0-862.32.2.el7.ppc64.rpm kernel-headers-3.10.0-862.32.2.el7.ppc64.rpm kernel-tools-3.10.0-862.32.2.el7.ppc64.rpm kernel-tools-debuginfo-3.10.0-862.32.2.el7.ppc64.rpm kernel-tools-libs-3.10.0-862.32.2.el7.ppc64.rpm perf-3.10.0-862.32.2.el7.ppc64.rpm perf-debuginfo-3.10.0-862.32.2.el7.ppc64.rpm python-perf-3.10.0-862.32.2.el7.ppc64.rpm python-perf-debuginfo-3.10.0-862.32.2.el7.ppc64.rpm ppc64le: kernel-3.10.0-862.32.2.el7.ppc64le.rpm kernel-bootwrapper-3.10.0-862.32.2.el7.ppc64le.rpm kernel-debug-3.10.0-862.32.2.el7.ppc64le.rpm kernel-debug-debuginfo-3.10.0-862.32.2.el7.ppc64le.rpm kernel-debuginfo-3.10.0-862.32.2.el7.ppc64le.rpm kernel-debuginfo-common-ppc64le-3.10.0-862.32.2.el7.ppc64le.rpm kernel-devel-3.10.0-862.32.2.el7.ppc64le.rpm kernel-headers-3.10.0-862.32.2.el7.ppc64le.rpm kernel-tools-3.10.0-862.32.2.el7.ppc64le.rpm kernel-tools-debuginfo-3.10.0-862.32.2.el7.ppc64le.rpm kernel-tools-libs-3.10.0-862.32.2.el7.ppc64le.rpm perf-3.10.0-862.32.2.el7.ppc64le.rpm perf-debuginfo-3.10.0-862.32.2.el7.ppc64le.rpm python-perf-3.10.0-862.32.2.el7.ppc64le.rpm python-perf-debuginfo-3.10.0-862.32.2.el7.ppc64le.rpm s390x: kernel-3.10.0-862.32.2.el7.s390x.rpm kernel-debug-3.10.0-862.32.2.el7.s390x.rpm kernel-debug-debuginfo-3.10.0-862.32.2.el7.s390x.rpm kernel-debug-devel-3.10.0-862.32.2.el7.s390x.rpm kernel-debuginfo-3.10.0-862.32.2.el7.s390x.rpm kernel-debuginfo-common-s390x-3.10.0-862.32.2.el7.s390x.rpm kernel-devel-3.10.0-862.32.2.el7.s390x.rpm kernel-headers-3.10.0-862.32.2.el7.s390x.rpm kernel-kdump-3.10.0-862.32.2.el7.s390x.rpm kernel-kdump-debuginfo-3.10.0-862.32.2.el7.s390x.rpm kernel-kdump-devel-3.10.0-862.32.2.el7.s390x.rpm perf-3.10.0-862.32.2.el7.s390x.rpm perf-debuginfo-3.10.0-862.32.2.el7.s390x.rpm python-perf-3.10.0-862.32.2.el7.s390x.rpm python-perf-debuginfo-3.10.0-862.32.2.el7.s390x.rpm x86_64: kernel-3.10.0-862.32.2.el7.x86_64.rpm kernel-debug-3.10.0-862.32.2.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-862.32.2.el7.x86_64.rpm kernel-debug-devel-3.10.0-862.32.2.el7.x86_64.rpm kernel-debuginfo-3.10.0-862.32.2.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-862.32.2.el7.x86_64.rpm kernel-devel-3.10.0-862.32.2.el7.x86_64.rpm kernel-headers-3.10.0-862.32.2.el7.x86_64.rpm kernel-tools-3.10.0-862.32.2.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-862.32.2.el7.x86_64.rpm kernel-tools-libs-3.10.0-862.32.2.el7.x86_64.rpm perf-3.10.0-862.32.2.el7.x86_64.rpm perf-debuginfo-3.10.0-862.32.2.el7.x86_64.rpm python-perf-3.10.0-862.32.2.el7.x86_64.rpm python-perf-debuginfo-3.10.0-862.32.2.el7.x86_64.rpm Red Hat Enterprise Linux Server Optional EUS (v.7.5): ppc64: kernel-debug-debuginfo-3.10.0-862.32.2.el7.ppc64.rpm kernel-debuginfo-3.10.0-862.32.2.el7.ppc64.rpm kernel-debuginfo-common-ppc64-3.10.0-862.32.2.el7.ppc64.rpm kernel-tools-debuginfo-3.10.0-862.32.2.el7.ppc64.rpm kernel-tools-libs-devel-3.10.0-862.32.2.el7.ppc64.rpm perf-debuginfo-3.10.0-862.32.2.el7.ppc64.rpm python-perf-debuginfo-3.10.0-862.32.2.el7.ppc64.rpm ppc64le: kernel-debug-debuginfo-3.10.0-862.32.2.el7.ppc64le.rpm kernel-debug-devel-3.10.0-862.32.2.el7.ppc64le.rpm kernel-debuginfo-3.10.0-862.32.2.el7.ppc64le.rpm kernel-debuginfo-common-ppc64le-3.10.0-862.32.2.el7.ppc64le.rpm kernel-tools-debuginfo-3.10.0-862.32.2.el7.ppc64le.rpm kernel-tools-libs-devel-3.10.0-862.32.2.el7.ppc64le.rpm perf-debuginfo-3.10.0-862.32.2.el7.ppc64le.rpm python-perf-debuginfo-3.10.0-862.32.2.el7.ppc64le.rpm x86_64: kernel-debug-debuginfo-3.10.0-862.32.2.el7.x86_64.rpm kernel-debuginfo-3.10.0-862.32.2.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-862.32.2.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-862.32.2.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-862.32.2.el7.x86_64.rpm perf-debuginfo-3.10.0-862.32.2.el7.x86_64.rpm python-perf-debuginfo-3.10.0-862.32.2.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2018-12126 https://access.redhat.com/security/cve/CVE-2018-12127 https://access.redhat.com/security/cve/CVE-2018-12130 https://access.redhat.com/security/cve/CVE-2019-11091 https://access.redhat.com/security/updates/classification#important https://access.redhat.com/security/vulnerabilities/mds 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBXNsS1tzjgjWX9erEAQhAfA/7BClNdLFQ6mVCkAaiyT4M5XecnYnF+W5x RhqBHjkKrSveMf4tAE8MlticNSBuTPRZ+HR4M+xyChZIpFruinWdT/TIX8W/wq3F euD+dcN4NT+iCjYPlaAY6BAW55YGeg4tvh1NJkK8uo1EMl66USbZ6ili4vev4UnW nzwnEScRCXZJTb0kQfD6Xh9bYzxsi66ffaXOwi0kWn4GoCDasBnNmA6ML8OJD6uY kctgTFPFAyb8Xi6lfReQQgo6YVO+IMZ9zgrmXeSDx1gtQCGG0pRIMTSlj/l5uO6M mND4kstvTRcwpAFi5TfFn1Hs6cbD0je+P/EqahXdJfZA0ojspD/xcdLmExCK1m4M MZZpml/Sf+BDOUrgS3yD9l1KZuru1ZgdTTf+P2tktVCq2MksIY2wKIQxIUw1xl90 64bl1FOv0JgRrj73fzc45YFmAY73Nxo1xid+ofb61XmCO6BXRRgmxnxQPHnCkcd+ ajStZDba42vwAYK7GXXkeKpRmnDl0+DL+zdsJ9T9uQ33Ew1dIX6uluo1dAS+Sor1 u3uFG9c+z7M41iYIg3e6RSBEKZi4fwC0faiEh6xJ6gK/47CbkzxmMkxSfiRSJZ4a ogQkZVw+PH8z96d4pTDYd14f/5ntyg9Bpf/n1bpvHUQkBmnZERvpJuC4gQtCkGio yurOXEwQ4Ik=izTE -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Oracle has issued a significant patch for Java SE 8 with critical vulnerabilities affecting various systems.. Red Hat Security, Kernel Update, RHEL Security, CVE Information, Security Fixes. . Severity: Important. LinuxSecurity.com Team

Calendar%202 May 14, 2019 •Important Red Hat
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorysecurity updateimportant

SUSE: 2018:1614-1 Important: Libvirt Critical CPU Issue

An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for libvirt ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:1614-1 Rating: important References: #1092885 Cross-References: CVE-2018-3639 Affected Products: SUSE OpenStack Cloud 7 SUSE Linux Enterprise Server for SAP 12-SP2 SUSE Linux Enterprise Server 12-SP2-LTSS SUSE Enterprise Storage 4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libvirt fixes the following issues: - CVE-2018-3639: cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits pass through (bsc#1092885) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud 7: zypper in -t patch SUSE-OpenStack-Cloud-7-2018-1100=1 - SUSE Linux Enterprise Server for SAP 12-SP2: zypper in -t patch SUSE-SLE-SAP-12-SP2-2018-1100=1 - SUSE Linux Enterprise Server 12-SP2-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2018-1100=1 - SUSE Enterprise Storage 4: zypper in -t patch SUSE-Storage-4-2018-1100=1 Package List: - SUSE OpenStack Cloud 7 (s390x x86_64): libvirt-2.0.0-27.42.1 libvirt-client-2.0.0-27.42.1 libvirt-client-debuginfo-2.0.0-27.42.1 libvirt-daemon-2.0.0-27.42.1 libvirt-daemon-config-network-2.0.0-27.42.1 libvirt-daemon-config-nwfilter-2.0.0-27.42.1 libvirt-daemon-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-interface-2.0.0-27.42.1 libvirt-daemon-driver-interface-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-lxc-2.0.0-27.42.1 libvirt-daemon-driver-lxc-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-network-2.0.0-27.42.1 libvirt-daemon-driver-network-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-nodedev-2.0.0-27.42.1 libvirt-daemon-driver-nodedev-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-nwfilter-2.0.0-27.42.1 libvirt-daemon-driver-nwfilter-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-qemu-2.0.0-27.42.1 libvirt-daemon-driver-qemu-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-secret-2.0.0-27.42.1 libvirt-daemon-driver-secret-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-storage-2.0.0-27.42.1 libvirt-daemon-driver-storage-debuginfo-2.0.0-27.42.1 libvirt-daemon-hooks-2.0.0-27.42.1 libvirt-daemon-lxc-2.0.0-27.42.1 libvirt-daemon-qemu-2.0.0-27.42.1 libvirt-debugsource-2.0.0-27.42.1 libvirt-doc-2.0.0-27.42.1 libvirt-lock-sanlock-2.0.0-27.42.1 libvirt-lock-sanlock-debuginfo-2.0.0-27.42.1 libvirt-nss-2.0.0-27.42.1 libvirt-nss-debuginfo-2.0.0-27.42.1 - SUSE OpenStack Cloud 7 (x86_64): libvirt-daemon-driver-libxl-2.0.0-27.42.1 libvirt-daemon-driver-libxl-debuginfo-2.0.0-27.42.1 libvirt-daemon-xen-2.0.0-27.42.1 - SUSE Linux Enterprise Server for SAP 12-SP2 (ppc64le x86_64): libvirt-2.0.0-27.42.1 libvirt-client-2.0.0-27.42.1 libvirt-client-debuginfo-2.0.0-27.42.1 libvirt-daemon-2.0.0-27.42.1 libvirt-daemon-config-network-2.0.0-27.42.1 libvirt-daemon-config-nwfilter-2.0.0-27.42.1 libvirt-daemon-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-interface-2.0.0-27.42.1 libvirt-daemon-driver-interface-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-lxc-2.0.0-27.42.1 libvirt-daemon-driver-lxc-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-network-2.0.0-27.42.1 libvirt-daemon-driver-network-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-nodedev-2.0.0-27.42.1 libvirt-daemon-driver-nodedev-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-nwfilter-2.0.0-27.42.1 libvirt-daemon-driver-nwfilter-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-qemu-2.0.0-27.42.1 libvirt-daemon-driver-qemu-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-secret-2.0.0-27.42.1 libvirt-daemon-driver-secret-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-storage-2.0.0-27.42.1 libvirt-daemon-driver-storage-debuginfo-2.0.0-27.42.1 libvirt-daemon-hooks-2.0.0-27.42.1 libvirt-daemon-lxc-2.0.0-27.42.1 libvirt-daemon-qemu-2.0.0-27.42.1 libvirt-debugsource-2.0.0-27.42.1 libvirt-doc-2.0.0-27.42.1 libvirt-lock-sanlock-2.0.0-27.42.1 libvirt-lock-sanlock-debuginfo-2.0.0-27.42.1 libvirt-nss-2.0.0-27.42.1 libvirt-nss-debuginfo-2.0.0-27.42.1 - SUSE Linux Enterprise Server for SAP 12-SP2 (x86_64): libvirt-daemon-driver-libxl-2.0.0-27.42.1 libvirt-daemon-driver-libxl-debuginfo-2.0.0-27.42.1 libvirt-daemon-xen-2.0.0-27.42.1 - SUSE Linux Enterprise Server 12-SP2-LTSS (ppc64le s390x x86_64): libvirt-2.0.0-27.42.1 libvirt-client-2.0.0-27.42.1 libvirt-client-debuginfo-2.0.0-27.42.1 libvirt-daemon-2.0.0-27.42.1 libvirt-daemon-config-network-2.0.0-27.42.1 libvirt-daemon-config-nwfilter-2.0.0-27.42.1 libvirt-daemon-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-interface-2.0.0-27.42.1 libvirt-daemon-driver-interface-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-lxc-2.0.0-27.42.1 libvirt-daemon-driver-lxc-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-network-2.0.0-27.42.1 libvirt-daemon-driver-network-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-nodedev-2.0.0-27.42.1 libvirt-daemon-driver-nodedev-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-nwfilter-2.0.0-27.42.1 libvirt-daemon-driver-nwfilter-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-qemu-2.0.0-27.42.1 libvirt-daemon-driver-qemu-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-secret-2.0.0-27.42.1 libvirt-daemon-driver-secret-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-storage-2.0.0-27.42.1 libvirt-daemon-driver-storage-debuginfo-2.0.0-27.42.1 libvirt-daemon-hooks-2.0.0-27.42.1 libvirt-daemon-lxc-2.0.0-27.42.1 libvirt-daemon-qemu-2.0.0-27.42.1 libvirt-debugsource-2.0.0-27.42.1 libvirt-doc-2.0.0-27.42.1 libvirt-lock-sanlock-2.0.0-27.42.1 libvirt-lock-sanlock-debuginfo-2.0.0-27.42.1 libvirt-nss-2.0.0-27.42.1 libvirt-nss-debuginfo-2.0.0-27.42.1 - SUSE Linux Enterprise Server 12-SP2-LTSS (x86_64): libvirt-daemon-driver-libxl-2.0.0-27.42.1 libvirt-daemon-driver-libxl-debuginfo-2.0.0-27.42.1 libvirt-daemon-xen-2.0.0-27.42.1 - SUSE Enterprise Storage 4 (x86_64): libvirt-2.0.0-27.42.1 libvirt-client-2.0.0-27.42.1 libvirt-client-debuginfo-2.0.0-27.42.1 libvirt-daemon-2.0.0-27.42.1 libvirt-daemon-config-network-2.0.0-27.42.1 libvirt-daemon-config-nwfilter-2.0.0-27.42.1 libvirt-daemon-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-interface-2.0.0-27.42.1 libvirt-daemon-driver-interface-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-libxl-2.0.0-27.42.1 libvirt-daemon-driver-libxl-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-lxc-2.0.0-27.42.1 libvirt-daemon-driver-lxc-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-network-2.0.0-27.42.1 libvirt-daemon-driver-network-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-nodedev-2.0.0-27.42.1 libvirt-daemon-driver-nodedev-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-nwfilter-2.0.0-27.42.1 libvirt-daemon-driver-nwfilter-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-qemu-2.0.0-27.42.1 libvirt-daemon-driver-qemu-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-secret-2.0.0-27.42.1 libvirt-daemon-driver-secret-debuginfo-2.0.0-27.42.1 libvirt-daemon-driver-storage-2.0.0-27.42.1 libvirt-daemon-driver-storage-debuginfo-2.0.0-27.42.1 libvirt-daemon-hooks-2.0.0-27.42.1 libvirt-daemon-lxc-2.0.0-27.42.1 libvirt-daemon-qemu-2.0.0-27.42.1 libvirt-daemon-xen-2.0.0-27.42.1 libvirt-debugsource-2.0.0-27.42.1 libvirt-doc-2.0.0-27.42.1 libvirt-lock-sanlock-2.0.0-27.42.1 libvirt-lock-sanlock-debuginfo-2.0.0-27.42.1 libvirt-nss-2.0.0-27.42.1 libvirt-nss-debuginfo-2.0.0-27.42.1 References: https://www.suse.com/security/cve/CVE-2018-3639.html https://bugzilla.suse.com/1092885 . Crucial SUSE patch for libvirt tackling CVE-2018-3639. Click to access detailed update guidelines.. SUSE Security Update, libvirt Security, SUSE Update Instructions. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 08, 2018 •Important SuSE
Banner 1 1028x280 1708121660 1771599717
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics