Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:3091-1

Опубликовано: 28 нояб. 2019
Источник: suse-cvrf

Описание

Security update for ucode-intel

This update for ucode-intel to version fixes the following issues:

  • Updated to 20191115 official security release (bsc#1157004 and bsc#1155988)
  • Includes security fixes for:
    • CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
    • CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)

Список пакетов

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
ucode-intel-20191115-3.3.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
ucode-intel-20191115-3.3.1
SUSE Linux Enterprise Server 12 SP5
ucode-intel-20191115-3.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
ucode-intel-20191115-3.3.1

Ссылки

Описание

TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.

Затронутые продукты
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ucode-intel-20191115-3.3.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ucode-intel-20191115-3.3.1
SUSE Linux Enterprise Server 12 SP5:ucode-intel-20191115-3.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20191115-3.3.1
Ссылки

Описание

Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.

Затронутые продукты
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ucode-intel-20191115-3.3.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ucode-intel-20191115-3.3.1
SUSE Linux Enterprise Server 12 SP5:ucode-intel-20191115-3.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20191115-3.3.1
Ссылки