Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
203
security advisorydenial of serviceinformation disclosureMageia 8 MGASA-2022-0193 Moderate: Intel Microcode Security Issues
Updated microcodes for Intel processors, fixing various functional issues, and at least the following security issues: Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow an unprivileged user to . MGASA-2022-0193 - Updated microcode packages fix security vulnerabilities Publication date: 21 May 2022 URL: https://advisories.mageia.org/MGASA-2022-0193.html Type: security Affected Mageia releases: 8 CVE: CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 Updated microcodes for Intel processors, fixing various functional issues, and at least the following security issues: Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow an unprivileged user to potentially enable information disclosure via physical access (CVE-2022-0005). may allow an authenticated user to potentially enable information disclosure via local access (CVE-2022-21131). Improper input validation for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable denial of service via local access (CVE-2022-21136). Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access (CVE-2022-21151). For info about the other fixes in this update, see the github reference. References: - https://bugs.mageia.org/show_bug.cgi?id=30425 - https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20220510 - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00614.html - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00616.html - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00617.html - https://www.cve.org/CVERecord?id=CVE-2022-0005 - https://www.cve.org/CVERecord?id=CVE-2022-21131 - https://www.cve.org/CVERecord?id=CVE-2022-21136 -https://www.cve.org/CVERecord?id=CVE-2022-21151 SRPMS: - 8/nonfree/microcode-0.20220510-1.mga8.nonfree . The latest firmware updates for Intel processors tackle a range of vulnerabilities, including data exposure and service interruption threats.. Microcode Update, Intel Security Fixes, Mageia Advisory. . LinuxSecurity.com Team
May 21, 2022
Mageia
100
security advisoryinformation leakimportantSUSE 15-SP1: SUSE-SU-2019:1910-1 Important: ucode-intel Execution Issues
An update that fixes four vulnerabilities is now available. . SUSE Security Update: Security update for ucode-intel ______________________________________________________________________________ Announcement ID: SUSE-SU-2019:1910-1 Rating: important References: #1111331 Cross-References: CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091 Affected Products: SUSE Linux Enterprise Module for Basesystem 15-SP1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for ucode-intel fixes the following issues: This update contains the Intel QSR 2019.1 Microcode release (bsc#1111331) Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS) - CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling (MFBDS) - CVE-2018-12130: Microarchitectural Load Port Data Samling (MLPDS) - CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM) These updates contain the CPU Microcode adjustments for the software mitigations. For more information on this set of vulnerabilities, check out https://support.scc.suse.com/s/kb?language=en_US Release notes: ---- updated platforms ------------------------------------ SNB-E/EN/EP C1/M0 6-2d-6/6d 0000061d-> 0000061f Xeon E3/E5, Core X SNB-E/EN/EP C2/M1 6-2d-7/6d 00000714-> 00000718 Xeon E3/E5, Core X ---- new platforms ---------------------------------------- VLV C0 6-37-8/02 00000838 Atom Z series VLV C0 6-37-8/0C 00000838 Celeron N2xxx, Pentium N35xx VLV D0 6-37-9/0F 0000090c Atom E38xx CHV C0 6-4c-3/01 00000368 Atom X series CHV D0 6-4c-4/01 00000411 Atom X series Readded whatmissing in last update: BDX-ML B0/M0/R0 6-4f-1/ef 0b00002e-> 00000036 Xeon E5/E7 v4; Core i7-69xx/68xx Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Basesystem 15-SP1: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP1-2019-1910=1 Package List: - SUSE Linux Enterprise Module for Basesystem 15-SP1 (x86_64): ucode-intel-20190618-3.3.1 References: https://www.suse.com/security/cve/CVE-2018-12126.html https://www.suse.com/security/cve/CVE-2018-12127.html https://www.suse.com/security/cve/CVE-2018-12130.html https://www.suse.com/security/cve/CVE-2019-11091.html https://bugzilla.suse.com/1111331 _______________________________________________ sle-security-updates mailing list
Jul 19, 2019
•Important
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!