SUSE-SU-2024:1139-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2024/suse-su-20241139-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:1139-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2024:1139-1

Related

Published

2024-04-08T09:31:39Z

Modified

2024-04-08T09:31:39Z

Summary

Security update for ucode-intel

Details

This update for ucode-intel fixes the following issues:

Updated to Intel CPU Microcode 20240312 release. (bsc#1221323)
CVE-2023-39368: Protection mechanism failure of bus lock regulator for some Intel Processors may allow an unauthenticated user to potentially enable denial of service via network access
CVE-2023-38575: Non-transparent sharing of return predictor targets between contexts in some Intel Processors may allow an authorized user to potentially enable information disclosure via local access.
CVE-2023-28746: Information exposure through microarchitectural state after transient execution from some register files for some Intel Atom Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2023-22655 Protection mechanism failure in some 3rd and 4th Generation Intel Xeon Processors when using Intel SGX or Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2023-43490: Incorrect calculation in microcode keying mechanism for some Intel Xeon D Processors with Intel� SGX may allow a privileged user to potentially enable information disclosure via local access.

References

Affected packages

SUSE:Linux Enterprise Micro 5.3 / ucode-intel

Package

Name: ucode-intel
Purl: pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Micro%205.3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20240312-150200.38.1

Ecosystem specific

{
    "binaries": [
        {
            "ucode-intel": "20240312-150200.38.1"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.4 / ucode-intel

Package

Name: ucode-intel
Purl: pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Micro%205.4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20240312-150200.38.1

Ecosystem specific

{
    "binaries": [
        {
            "ucode-intel": "20240312-150200.38.1"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.5 / ucode-intel

Package

Name: ucode-intel
Purl: pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Micro%205.5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20240312-150200.38.1

Ecosystem specific

{
    "binaries": [
        {
            "ucode-intel": "20240312-150200.38.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP5 / ucode-intel

Package

Name: ucode-intel
Purl: pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20240312-150200.38.1

Ecosystem specific

{
    "binaries": [
        {
            "ucode-intel": "20240312-150200.38.1"
        }
    ]
}

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS / ucode-intel

Package

Name: ucode-intel
Purl: pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20240312-150200.38.1

Ecosystem specific

{
    "binaries": [
        {
            "ucode-intel": "20240312-150200.38.1"
        }
    ]
}

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS / ucode-intel

Package

Name: ucode-intel
Purl: pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20240312-150200.38.1

Ecosystem specific

{
    "binaries": [
        {
            "ucode-intel": "20240312-150200.38.1"
        }
    ]
}

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS / ucode-intel

Package

Name: ucode-intel
Purl: pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20240312-150200.38.1

Ecosystem specific

{
    "binaries": [
        {
            "ucode-intel": "20240312-150200.38.1"
        }
    ]
}

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS / ucode-intel

Package

Name: ucode-intel
Purl: pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20240312-150200.38.1

Ecosystem specific

{
    "binaries": [
        {
            "ucode-intel": "20240312-150200.38.1"
        }
    ]
}

SUSE:Linux Enterprise Server 15 SP2-LTSS / ucode-intel

Package

Name: ucode-intel
Purl: pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20240312-150200.38.1

Ecosystem specific

{
    "binaries": [
        {
            "ucode-intel": "20240312-150200.38.1"
        }
    ]
}

SUSE:Linux Enterprise Server 15 SP3-LTSS / ucode-intel

Package

Name: ucode-intel
Purl: pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20240312-150200.38.1

Ecosystem specific

{
    "binaries": [
        {
            "ucode-intel": "20240312-150200.38.1"
        }
    ]
}

SUSE:Linux Enterprise Server 15 SP4-LTSS / ucode-intel

Package

Name: ucode-intel
Purl: pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20240312-150200.38.1

Ecosystem specific

{
    "binaries": [
        {
            "ucode-intel": "20240312-150200.38.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 15 SP2 / ucode-intel

Package

Name: ucode-intel
Purl: pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20240312-150200.38.1

Ecosystem specific

{
    "binaries": [
        {
            "ucode-intel": "20240312-150200.38.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 15 SP3 / ucode-intel

Package

Name: ucode-intel
Purl: pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20240312-150200.38.1

Ecosystem specific

{
    "binaries": [
        {
            "ucode-intel": "20240312-150200.38.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 15 SP4 / ucode-intel

Package

Name: ucode-intel
Purl: pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20240312-150200.38.1

Ecosystem specific

{
    "binaries": [
        {
            "ucode-intel": "20240312-150200.38.1"
        }
    ]
}

SUSE:Manager Proxy 4.3 / ucode-intel

Package

Name: ucode-intel
Purl: pkg:rpm/suse/ucode-intel&distro=SUSE%20Manager%20Proxy%204.3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20240312-150200.38.1

Ecosystem specific

{
    "binaries": [
        {
            "ucode-intel": "20240312-150200.38.1"
        }
    ]
}

SUSE:Manager Server 4.3 / ucode-intel

Package

Name: ucode-intel
Purl: pkg:rpm/suse/ucode-intel&distro=SUSE%20Manager%20Server%204.3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20240312-150200.38.1

Ecosystem specific

{
    "binaries": [
        {
            "ucode-intel": "20240312-150200.38.1"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.1 / ucode-intel

Package

Name: ucode-intel
Purl: pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Micro%205.1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20240312-150200.38.1

Ecosystem specific

{
    "binaries": [
        {
            "ucode-intel": "20240312-150200.38.1"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.2 / ucode-intel

Package

Name: ucode-intel
Purl: pkg:rpm/suse/ucode-intel&distro=SUSE%20Linux%20Enterprise%20Micro%205.2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20240312-150200.38.1

Ecosystem specific

{
    "binaries": [
        {
            "ucode-intel": "20240312-150200.38.1"
        }
    ]
}

SUSE:Enterprise Storage 7.1 / ucode-intel

Package

Name: ucode-intel
Purl: pkg:rpm/suse/ucode-intel&distro=SUSE%20Enterprise%20Storage%207.1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20240312-150200.38.1

Ecosystem specific

{
    "binaries": [
        {
            "ucode-intel": "20240312-150200.38.1"
        }
    ]
}

openSUSE:Leap Micro 5.3 / ucode-intel

Package

Name: ucode-intel
Purl: pkg:rpm/opensuse/ucode-intel&distro=openSUSE%20Leap%20Micro%205.3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20240312-150200.38.1

Ecosystem specific

{
    "binaries": [
        {
            "ucode-intel": "20240312-150200.38.1"
        }
    ]
}

openSUSE:Leap Micro 5.4 / ucode-intel

Package

Name: ucode-intel
Purl: pkg:rpm/opensuse/ucode-intel&distro=openSUSE%20Leap%20Micro%205.4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20240312-150200.38.1

Ecosystem specific

{
    "binaries": [
        {
            "ucode-intel": "20240312-150200.38.1"
        }
    ]
}

openSUSE:Leap 15.5 / ucode-intel

Package

Name: ucode-intel
Purl: pkg:rpm/opensuse/ucode-intel&distro=openSUSE%20Leap%2015.5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20240312-150200.38.1

Ecosystem specific

{
    "binaries": [
        {
            "ucode-intel": "20240312-150200.38.1"
        }
    ]
}