Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Security fix for CVE-2020-0548, CVE-2020-0549, CVE-2020-0543 ---- Update to upstream 2.1-28. 20200609. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-e8835a5f8e 2020-06-19 01:01:42.924514 --------------------------------------------------------------------------------Name : microcode_ctl Product : Fedora 32 Version : 2.1 Release : 39.fc32 URL : https://pagure.io/microcode_ctl Summary : Tool to transform and deploy CPU microcode update for x86 Description : The microcode_ctl utility is a companion to the microcode driver written by Tigran Aivazian . The microcode update is volatile and needs to be uploaded on each system boot i.e. it doesn't reflash your cpu permanently, reboot and it reverts back to the old microcode. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2020-0548, CVE-2020-0549, CVE-2020-0543 ---- Update to upstream 2.1-28. 20200609 --------------------------------------------------------------------------------ChangeLog: * Tue Jun 16 2020 Anton Arapov 2:2.1-39 - Update to upstream 2.1-29. 20200616 * Wed Jun 10 2020 Anton Arapov 2:2.1-38 - Update to upstream 2.1-28. 20200609 --------------------------------------------------------------------------------References: [ 1 ] Bug #1788786 - CVE-2020-0548 hw: Vector Register Data Sampling https://bugzilla.redhat.com/show_bug.cgi?id=1788786 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-e8835a5f8e' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
An update that fixes one vulnerability is now available.. SUSE Security Update: Security update for microcode_ctl ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:0068-1 Rating: important References: #1075262 Cross-References: CVE-2017-5715 Affected Products: SUSE Linux Enterprise Server 11-SP4 SUSE Linux Enterprise Server 11-SP3-LTSS SUSE Linux Enterprise Point of Sale 11-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Update to Intel microcode version 20180108 (bsc#1075262 CVE-2017-5715) - The pre-released microcode fixing some important security issues is now officially published (and included in the added tarball). Among other updates it contains: - IVT C0 (06-3e-04:ed) 428-> 42a - SKL-U/Y D0 (06-4e-03:c0) ba-> c2 - BDW-U/Y E/F (06-3d-04:c0) 25-> 28 - HSW-ULT Cx/Dx (06-45-01:72) 20-> 21 - Crystalwell Cx (06-46-01:32) 17-> 18 - BDW-H E/G (06-47-01:22) 17-> 1b - HSX-EX E0 (06-3f-04:80) 0f-> 10 - SKL-H/S R0 (06-5e-03:36) ba-> c2 - HSW Cx/Dx (06-3c-03:32) 22-> 23 - HSX C0 (06-3f-02:6f) 3a-> 3b - BDX-DE V0/V1 (06-56-02:10) 0f-> 14 - BDX-DE V2 (06-56-03:10) 700000d-> 7000011 - KBL-U/Y H0 (06-8e-09:c0) 62-> 80 - KBL Y0 / CFL D0 (06-8e-0a:c0) 70-> 80 - KBL-H/S B0 (06-9e-09:2a) 5e-> 80 - CFL U0 (06-9e-0a:22) 70-> 80 - CFL B0 (06-9e-0b:02) 72-> 80 - SKX H0 (06-55-04:b7) 2000035-> 200003c - GLK B0 (06-7a-01:01) 1e-> 22 Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-microcode_ctl-13406=1 - SUSELinux Enterprise Server 11-SP3-LTSS: zypper in -t patch slessp3-microcode_ctl-13406=1 - SUSE Linux Enterprise Point of Sale 11-SP3: zypper in -t patch sleposp3-microcode_ctl-13406=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11-SP4 (i586 x86_64): microcode_ctl-1.17-102.83.9.1 - SUSE Linux Enterprise Server 11-SP3-LTSS (i586 x86_64): microcode_ctl-1.17-102.83.9.1 - SUSE Linux Enterprise Point of Sale 11-SP3 (i586): microcode_ctl-1.17-102.83.9.1 References: https://www.suse.com/security/cve/CVE-2017-5715.html https://bugzilla.suse.com/1075262 -- . Debian Security Notification: critical updates targeting CVE-2022-0847 for multiple Debian distributions.. Intel Microcode Update,SUSE Linux Security,Microcode_ctl Patch. . Severity: Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.