- Update to upstream 2.1-31. 20201118

  - Removal of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at     revision 0x68[1];

  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision     0x32 up to 0x34[2].

[1] The microcode has been removed after reports of system hangs:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/is sues/44

[2] Addresses CVE-2020-8695 for this platform.

----

  - Update to upstream 2.1-30. 20201110

  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at     revision 0x700001e;

  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at     revision 0x28;

  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at     revision 0x68;

  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at     revision 0xe0;

  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at     revision 0xe0;

  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at     revision 0xe0;

  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at     revision 0xe0;

  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2)     microcode from revision 0x43 up to 0x44;

  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode     from revision 0xd6 up to 0xe2;

  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from     revision 0x1000157 up to 0x1000159;

  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0)     microcode from revision 0x2006906 up to 0x2006a08;

  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from     revision 0x4002f01 up to 0x4003003;

  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode     from revision 0x5002f01 up to 0x5003003;

  - Update of 06-5c-09/0x03 (APL D0) microcode from revision     0x38 up to 0x40;

  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from     revision 0x16 up to 0x1e;

  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0)     microcode from revision 0xd6 up to 0xe2;

  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from     revision 0x16 up to 0x18;

  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from     revision 0x78 up to 0xa0;

  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from     revision 0xd6 up to 0xde;

  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode     from revision 0xd6 up to 0xde;

  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0)     microcode from revision 0xd6 up to 0xe0;

  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from     revision 0xd6 up to 0xde;

  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0,     WHL-U V0) microcode from revision 0xd6 up to 0xde;

  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0)     microcode from revision 0xd6 up to 0xde;

  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode     from revision 0xd6 up to 0xde;

  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from     revision 0xd6 up to 0xde;

  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode     from revision 0xd6 up to 0xde;

  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode     from revision 0xd6 up to 0xde;

  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from     revision 0xca up to 0xe0.

  - Addresses CVE-2020-8695, CVE-2020-8696, CVE-2020-8698

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5184 advisory.

  - hw: Vector Register Leakage-Active (CVE-2020-8696)

  - hw: Fast forward store predictor (CVE-2020-8698)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for ucode-intel fixes the following issues :

  - Updated Intel CPU Microcode to 20201118 official     release. (bsc#1178971)

  - Removed TGL/06-8c-01/80 due to functional issues with     some OEM platforms.

  - Updated Intel CPU Microcode to 20201110 official     release.

  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX)     (bsc#1170446)

  - CVE-2020-8698: Fixed Fast Store Forward Predictor     INTEL-SA-00381 (bsc#1173594)

  - CVE-2020-8696: Vector Register Sampling Active     INTEL-SA-00381 (bsc#1173592)

  - Release notes :

  - Security updates for     [INTEL-SA-00381](https://www.intel.com/content/www/us/en     /security-center/advisory/intel-sa-00381.html).

  - Security updates for     [INTEL-SA-00389](https://www.intel.com/content/www/us/en     /security-center/advisory/intel-sa-00389.html).

  - Update for functional issues. Refer to [Second     Generation Intel&reg; Xeon&reg; Processor Scalable     Family Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/338848     ) for details.

  - Update for functional issues. Refer to [Intel&reg;
    Xeon&reg; Processor Scalable Family Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/613537     ) for details.

  - Update for functional issues. Refer to [Intel&reg;
    Xeon&reg; Processor E5 v3 Product Family Specification     Update](https://www.intel.com/content/www/us/en/processo     rs/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec     +update+e5) for details.

  - Update for functional issues. Refer to [10th Gen     Intel&reg; Core&trade; Processor Families Specification     Update](https://www.intel.com/content/www/us/en/products     /docs/processors/core/10th-gen-core-families-specificati     on-update.html) for details.

  - Update for functional issues. Refer to [8th and 9th Gen     Intel&reg; Core&trade; Processor Family Spec     Update](https://www.intel.com/content/www/us/en/products     /docs/processors/core/8th-gen-core-spec-update.html) for     details.

  - Update for functional issues. Refer to [7th Gen and 8th     Gen (U Quad-Core) Intel&reg; Processor Families     Specification     Update](https://www.intel.com/content/www/us/en/processo     rs/core/7th-gen-core-family-spec-update.html) for     details.

  - Update for functional issues. Refer to [6th Gen     Intel&reg; Processor Family Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/332689     ) for details.

  - Update for functional issues. Refer to [Intel&reg;
    Xeon&reg; E3-1200 v6 Processor Family Specification     Update](https://www.intel.com/content/www/us/en/processo     rs/xeon/xeon-e3-1200v6-spec-update.html) for details.

  - Update for functional issues. Refer to [Intel&reg;
    Xeon&reg; E-2100 and E-2200 Processor Family     Specification     Update](https://www.intel.com/content/www/us/en/products     /docs/processors/xeon/xeon-e-2100-specification-update.h     tml) for details.

    ### New Platforms | Processor | Stepping | F-M-S/PI |     Old Ver | New Ver | Products     |:---------------|:---------|:------------|:---------|:-
    --------|:--------- | CPX-SP | A1 | 06-55-0b/bf | |     0700001e | Xeon Scalable Gen3 | LKF | B2/B3 |     06-8a-01/10 | | 00000028 | Core w/Hybrid Technology |     TGL | B1 | 06-8c-01/80 | | 00000068 | Core Gen11 Mobile     | CML-H | R1 | 06-a5-02/20 | | 000000e0 | Core Gen10     Mobile | CML-S62 | G1 | 06-a5-03/22 | | 000000e0 | Core     Gen10 | CML-S102 | Q0 | 06-a5-05/22 | | 000000e0 | Core     Gen10 | CML-U62 V2 | K0 | 06-a6-01/80 | | 000000e0 |     Core Gen10 Mobile ### Updated Platforms | Processor |     Stepping | F-M-S/PI | Old Ver | New Ver | Products     |:---------------|:---------|:------------|:---------|:-
    --------|:--------- | HSX-E/EP | Cx/M1 | 06-3f-02/6f |     00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3 |     SKL-U/Y | D0 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core     Gen6 Mobile | SKL-U23e | K1 | 06-4e-03/c0 | 000000d6 |     000000e2 | Core Gen6 Mobile | SKX-SP | B1 | 06-55-03/97     | 01000157 | 01000159 | Xeon Scalable | SKX-SP |     H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon     Scalable | SKX-D | M1 | 06-55-04/b7 | 02006906 |     02006a08 | Xeon D-21xx | CLX-SP | B0 | 06-55-06/bf |     04002f01 | 04003003 | Xeon Scalable Gen2 | CLX-SP | B1 |     06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2 |     APL | D0 | 06-5c-09/03 | 00000038 | 00000040 | Pentium     N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx | APL | E0 |     06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx |     SKL-H/S | R0/N0 | 06-5e-03/36 | 000000d6 | 000000e2 |     Core Gen6; Xeon E3 v5 | GKL-R | R0 | 06-7a-08/01 |     00000016 | 00000018 | Pentium J5040/N5030, Celeron     J4125/J4025/N4020/N4120 | ICL-U/Y | D1 | 06-7e-05/80 |     00000078 | 000000a0 | Core Gen10 Mobile | AML-Y22 | H0 |     06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile |     KBL-U/Y | H0 | 06-8e-09/c0 | 000000d6 | 000000de | Core     Gen7 Mobile | CFL-U43e | D0 | 06-8e-0a/c0 | 000000d6 |     000000e0 | Core Gen8 Mobile | WHL-U | W0 | 06-8e-0b/d0 |     000000d6 | 000000de | Core Gen8 Mobile | AML-Y42 | V0 |     06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile |     CML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core     Gen10 Mobile | WHL-U | V0 | 06-8e-0c/94 | 000000d6 |     000000de | Core Gen8 Mobile | KBL-G/H/S/E3 | B0 |     06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3     v6 | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000d6 | 000000de     | Core Gen8 Desktop, Mobile, Xeon E | CFL-S | B0 |     06-9e-0b/02 | 000000d6 | 000000de | Core Gen8 | CFL-H/S     | P0 | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9 |     CFL-H | R0 | 06-9e-0d/22 | 000000d6 | 000000de | Core     Gen9 Mobile | CML-U62 | A0 | 06-a6-00/80 | 000000ca |     000000e0 | Core Gen10 Mobile

This update was imported from the SUSE:SLE-15:Update update project.

This update for ucode-intel fixes the following issues :

Updated Intel CPU Microcode to 20201118 official release.
(bsc#1178971)

  - Removed TGL/06-8c-01/80 due to functional issues with     some OEM platforms.

  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX)     INTEL-SA-00389 (bsc#1170446)

  - CVE-2020-8698: Fixed Fast Store Forward Predictor     INTEL-SA-00381 (bsc#1173594)

  - CVE-2020-8696: Vector Register Sampling Active     INTEL-SA-00381 (bsc#1173592)

Release notes :

  - Security updates for

[INTEL-SA-00381](https://www.intel.com/content/www/us/en/security-cent er/ad visory/intel-sa-00381.html).

  - Security updates for

[INTEL-SA-00389](https://www.intel.com/content/www/us/en/security-cent er/ad visory/intel-sa-00389.html).

  - Update for functional issues. Refer to [Second     Generation Intel&Acirc;&reg; Xeon&Acirc;&reg; Processor     Scalable Family Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/338848     ) for details.

  - Update for functional issues. Refer to     [Intel&Acirc;&reg; Xeon&Acirc;&reg; Processor Scalable     Family Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/613537     ) for details.

  - Update for functional issues. Refer to     [Intel&Acirc;&reg; Xeon&Acirc;&reg; Processor E5 v3     Product Family Specification

Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e 5-v3- spec-update.html?wapkw=processor+spec+update+e5) for details.

  - Update for functional issues. Refer to [10th Gen     Intel&Acirc;&reg; Core&acirc;&#132;&cent; Processor     Families Specification

Update](https://www.intel.com/content/www/us/en/products/docs/processo rs/co re/10th-gen-core-families-specification-update.html) for details.

  - Update for functional issues. Refer to [8th and 9th Gen     Intel&Acirc;&reg; Core&acirc;&#132;&cent; Processor     Family Spec

Update](https://www.intel.com/content/www/us/en/products/docs/processo rs/co re/8th-gen-core-spec-update.html) for details.

  - Update for functional issues. Refer to [7th Gen and 8th     Gen (U Quad-Core) Intel&Acirc;&reg; Processor Families     Specification

Update](https://www.intel.com/content/www/us/en/processors/core/7th-ge n-cor e-family-spec-update.html) for details.

  - Update for functional issues. Refer to [6th Gen     Intel&Acirc;&reg; Processor Family Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/332689     ) for details.

  - Update for functional issues. Refer to     [Intel&Acirc;&reg; Xeon&Acirc;&reg; E3-1200 v6 Processor     Family Specification

Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e 3-120 0v6-spec-update.html) for details.

  - Update for functional issues. Refer to     [Intel&Acirc;&reg; Xeon&Acirc;&reg; E-2100 and E-2200     Processor Family Specification

Update](https://www.intel.com/content/www/us/en/products/docs/processo rs/xe on/xeon-e-2100-specification-update.html) for details.

### New Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:----
----- | CPX-SP | A1 | 06-55-0b/bf | | 0700001e | Xeon Scalable Gen3 | LKF | B2/B3 | 06-8a-01/10 | | 00000028 | Core w/Hybrid Technology | TGL | B1 | 06-8c-01/80 | | 00000068 | Core Gen11 Mobile | CML-H | R1 | 06-a5-02/20 | | 000000e0 | Core Gen10 Mobile | CML-S62 | G1 | 06-a5-03/22 | | 000000e0 | Core Gen10 | CML-S102 | Q0 | 06-a5-05/22 | | 000000e0 | Core Gen10 | CML-U62 V2 | K0 | 06-a6-01/80 | | 000000e0 | Core Gen10 Mobile ### Updated Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:----
----- | HSX-E/EP | Cx/M1 | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3 | SKL-U/Y | D0 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | SKL-U23e | K1 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | SKX-SP | B1 | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable | SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable | SKX-D | M1 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx | CLX-SP | B0 | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2 | APL | D0 | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx | APL | E0 | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx | SKL-H/S | R0/N0 | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5 | GKL-R | R0 | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | ICL-U/Y | D1 | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile | AML-Y22 | H0 | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-U/Y | H0 | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile | CFL-U43e | D0 | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile | WHL-U | W0 | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile | AML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | CML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | WHL-U | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-G/H/S/E3 | B0 | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6 | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E | CFL-S | B0 | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8 | CFL-H/S | P0 | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9 | CFL-H | R0 | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile | CML-U62 | A0 | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for ucode-intel fixes the following issues :

Intel CPU Microcode updated to 20201027 prerelease

CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446)

CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594)

# New Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:----
----- | TGL | B1 | 06-8c-01/80 | | 00000068 | Core Gen11 Mobile | CPX-SP | A1 | 06-55-0b/bf | | 0700001e | Xeon Scalable Gen3 | CML-H | R1 | 06-a5-02/20 | | 000000e0 | Core Gen10 Mobile | CML-S62 | G1 | 06-a5-03/22 | | 000000e0 | Core Gen10 | CML-S102 | Q0 | 06-a5-05/22 | | 000000e0 | Core Gen10 | CML-U62 V2 | K0 | 06-a6-01/80 | | 000000e0 | Core Gen10 Mobile # Updated Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:----
----- | GKL-R | R0 | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | SKL-U/Y | D0 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | SKL-U23e | K1 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | APL | D0 | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx | APL | E0 | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx | SKL-H/S | R0/N0 | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5 | HSX-E/EP | Cx/M1 | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3 | SKX-SP | B1 | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable | SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable | SKX-D | M1 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx | CLX-SP | B0 | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2 | ICL-U/Y | D1 | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile | AML-Y22 | H0 | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-U/Y | H0 | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile | CFL-U43e | D0 | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile | WHL-U | W0 | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile | AML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | CML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | WHL-U | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-G/H/S/E3 | B0 | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6 | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E | CFL-S | B0 | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8 | CFL-H/S | P0 | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9 | CFL-H | R0 | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile | CML-U62 | A0 | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for ucode-intel fixes the following issues :

Updated Intel CPU Microcode to 20201110 official release.

  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX)     INTEL-SA-00389 (bsc#1170446)

  - CVE-2020-8698: Fixed Fast Store Forward Predictor     INTEL-SA-00381 (bsc#1173594)

  - CVE-2020-8696: Vector Register Sampling Active     INTEL-SA-00381 (bsc#1173592)

Release notes :

  - Security updates for

[INTEL-SA-00381](https://www.intel.com/content/www/us/en/security-cent er/ad visory/intel-sa-00381.html).

  - Security updates for

[INTEL-SA-00389](https://www.intel.com/content/www/us/en/security-cent er/ad visory/intel-sa-00389.html).

  - Update for functional issues. Refer to [Second     Generation Intel&Acirc;&reg; Xeon&Acirc;&reg; Processor     Scalable Family Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/338848     ) for details.

  - Update for functional issues. Refer to     [Intel&Acirc;&reg; Xeon&Acirc;&reg; Processor Scalable     Family Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/613537     ) for details.

  - Update for functional issues. Refer to     [Intel&Acirc;&reg; Xeon&Acirc;&reg; Processor E5 v3     Product Family Specification

Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e 5-v3- spec-update.html?wapkw=processor+spec+update+e5) for details.

  - Update for functional issues. Refer to [10th Gen     Intel&Acirc;&reg; Core&acirc;&#132;&cent; Processor     Families Specification

Update](https://www.intel.com/content/www/us/en/products/docs/processo rs/co re/10th-gen-core-families-specification-update.html) for details.

  - Update for functional issues. Refer to [8th and 9th Gen     Intel&Acirc;&reg; Core&acirc;&#132;&cent; Processor     Family Spec

Update](https://www.intel.com/content/www/us/en/products/docs/processo rs/co re/8th-gen-core-spec-update.html) for details.

  - Update for functional issues. Refer to [7th Gen and 8th     Gen (U Quad-Core) Intel&Acirc;&reg; Processor Families     Specification

Update](https://www.intel.com/content/www/us/en/processors/core/7th-ge n-cor e-family-spec-update.html) for details.

  - Update for functional issues. Refer to [6th Gen     Intel&Acirc;&reg; Processor Family Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/332689     ) for details.

  - Update for functional issues. Refer to     [Intel&Acirc;&reg; Xeon&Acirc;&reg; E3-1200 v6 Processor     Family Specification

Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e 3-120 0v6-spec-update.html) for details.

  - Update for functional issues. Refer to     [Intel&Acirc;&reg; Xeon&Acirc;&reg; E-2100 and E-2200     Processor Family Specification

Update](https://www.intel.com/content/www/us/en/products/docs/processo rs/xe on/xeon-e-2100-specification-update.html) for details.

### New Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:----
----- | CPX-SP | A1 | 06-55-0b/bf | | 0700001e | Xeon Scalable Gen3 | LKF | B2/B3 | 06-8a-01/10 | | 00000028 | Core w/Hybrid Technology | TGL | B1 | 06-8c-01/80 | | 00000068 | Core Gen11 Mobile | CML-H | R1 | 06-a5-02/20 | | 000000e0 | Core Gen10 Mobile | CML-S62 | G1 | 06-a5-03/22 | | 000000e0 | Core Gen10 | CML-S102 | Q0 | 06-a5-05/22 | | 000000e0 | Core Gen10 | CML-U62 V2 | K0 | 06-a6-01/80 | | 000000e0 | Core Gen10 Mobile ### Updated Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:----
----- | HSX-E/EP | Cx/M1 | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3 | SKL-U/Y | D0 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | SKL-U23e | K1 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | SKX-SP | B1 | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable | SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable | SKX-D | M1 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx | CLX-SP | B0 | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2 | APL | D0 | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx | APL | E0 | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx | SKL-H/S | R0/N0 | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5 | GKL-R | R0 | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | ICL-U/Y | D1 | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile | AML-Y22 | H0 | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-U/Y | H0 | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile | CFL-U43e | D0 | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile | WHL-U | W0 | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile | AML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | CML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | WHL-U | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-G/H/S/E3 | B0 | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6 | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E | CFL-S | B0 | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8 | CFL-H/S | P0 | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9 | CFL-H | R0 | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile | CML-U62 | A0 | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has microcode_ctl packages installed that are affected by multiple vulnerabilities:

  - Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2020-0543)

  - Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable     information disclosure via local access. (CVE-2020-0548)

  - Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user     to potentially enable information disclosure via local access. (CVE-2020-0549)

  - Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable     escalation of privilege via local access. (CVE-2020-24489)

  - Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to     potentially enable information disclosure via local access. (CVE-2020-24511, CVE-2020-8698)

  - Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially     enable information disclosure via local access. (CVE-2020-24512)

  - Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to     potentially enable information disclosure via local access. (CVE-2020-8695)

  - Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow     an authenticated user to potentially enable information disclosure via local access. (CVE-2020-8696)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
143171	Fedora 33 : 2:microcode_ctl (2020-2c8824c6b1)	Nessus	Fedora Local Security Checks	2020/11/23	2024/2/8	medium
143209	RHEL 6 : microcode_ctl (RHSA-2020:5184)	Nessus	Red Hat Local Security Checks	2020/11/24	2024/4/28	medium
143330	Fedora 32 : 2:microcode_ctl (2020-1afbe7ba2d)	Nessus	Fedora Local Security Checks	2020/11/30	2024/2/7	medium
143339	openSUSE Security Update : ucode-intel (openSUSE-2020-2098)	Nessus	SuSE Local Security Checks	2020/11/30	2024/2/7	medium
143735	SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2020:3514-1)	Nessus	SuSE Local Security Checks	2020/12/9	2024/2/5	medium
143763	SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2020:3276-1)	Nessus	SuSE Local Security Checks	2020/12/9	2024/2/5	medium
143814	SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2020:3457-1)	Nessus	SuSE Local Security Checks	2020/12/9	2024/2/5	medium
160753	NewStart CGSL CORE 5.04 / MAIN 5.04 : microcode_ctl Multiple Vulnerabilities (NS-SA-2022-0011)	Nessus	NewStart CGSL Local Security Checks	2022/5/9	2022/5/9	high

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium

medium

high