SUSE-SU-2019:1909-1
- Source
- https://www.suse.com/support/update/announcement/2019/suse-su-20191909-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1909-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2019:1909-1
- Related
- Published
- 2019-07-19T11:52:25Z
- Modified
- 2019-07-19T11:52:25Z
- Summary
- Security update for ucode-intel
- Details
-
This update for ucode-intel fixes the following issues:
This update contains the Intel QSR 2019.1 Microcode release (bsc#1111331)
Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331)
- CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS)
- CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling (MFBDS)
- CVE-2018-12130: Microarchitectural Load Port Data Samling (MLPDS)
- CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)
These updates contain the CPU Microcode adjustments for the software mitigations.
For more information on this set of vulnerabilities, check out https://www.suse.com/support/kb/doc/?id=7023736
Release notes:
---- updated platforms ------------------------------------ SNB-E/EN/EP C1/M0 6-2d-6/6d 0000061d->0000061f Xeon E3/E5, Core X SNB-E/EN/EP C2/M1 6-2d-7/6d 00000714->00000718 Xeon E3/E5, Core X
- References
-
- https://www.suse.com/support/update/announcement/2019/suse-su-20191909-1/
- https://bugzilla.suse.com/1111331
- https://www.suse.com/security/cve/CVE-2018-12126
- https://www.suse.com/security/cve/CVE-2018-12127
- https://www.suse.com/security/cve/CVE-2018-12130
- https://www.suse.com/security/cve/CVE-2019-11091