linux-firmware security update

20230516-999.20.git6c9e0ed5.el9 - cd72938cb480 linux-firmware: Update AMD fam17h cpu microcode - 92624e57af69 linux-firmware: Update AMD cpu microcode 20230516-999.19.git6c9e0ed5.el9 - Rebase to upstream - Revert removal of old iwlwifi firmwares Orabug: 35260375...

linux-firmware security update

20230516-999.20.git6c9e0ed5.el8 - cd72938cb480 linux-firmware: Update AMD fam17h cpu microcode - 92624e57af69 linux-firmware: Update AMD cpu microcode 20230516-999.19.git6c9e0ed5.el8 - Rebase to upstream - Revert removal of old iwlwifi firmwares Orabug: 35260375...

Ubuntu: Security Advisory (USN-6244-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

linux-firmware security update

20230516-999.20.git6c9e0ed5.el7 - cd72938cb480 linux-firmware: Update AMD fam17h cpu microcode - 92624e57af69 linux-firmware: Update AMD cpu microcode 20230516-999.19.git6c9e0ed5.el7 - Rebase to upstream - Revert removal of old iwlwifi firmwares Orabug: 35260375...

USN-6244-1 amd64-microcode vulnerability

Tavis Ormandy discovered that some AMD processors did not properly handle speculative execution of certain vector register instructions. A local attacker could use this to expose sensitive information...

USN-6244-1: AMD Microcode vulnerability

Tavis Ormandy discovered that some AMD processors did not properly handle speculative execution of certain vector register instructions. A local attacker could use this to expose sensitive information...

Zenbleed: New Flaw in AMD Zen 2 Processors Puts Encryption Keys and Passwords at Risk

A new security vulnerability has been discovered in AMD's Zen 2 architecture-based processors that could be exploited to extract sensitive data such as encryption keys and passwords. Discovered by Google Project Zero researcher Tavis Ormandy, the flaw – codenamed Zenbleed and tracked as...

DSA-5459-1 amd64-microcode - security update

Bulletin has no description...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : AMD Microcode vulnerability (USN-6244-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 host has a package installed that is affected by a vulnerability as referenced in the USN-6244-1 advisory. Tavis Ormandy discovered that some AMD processors did not properly handle speculative execution of certain vector...

[slackware-security] kernel-firmware

New kernel-firmware packages are available for Slackware 14.2, 15.0, and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/kernel-firmware-2023072459fbffa-noarch-1.txz: Upgraded. AMD microcode updated to fix a use-after-free in AMD Zen2...

CVE-2023-20593

An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information...

Cross-Process Information Leak

Bulletin ID: AMD-SB-7008 Potential Impact: Information disclosure Severity: Medium Summary Under specific microarchitectural circumstances, a register in “Zen 2” CPUs may not be written to 0 correctly. This may cause data from another process and/or thread to be stored in the YMM register, which...

The vulnerabilities of the microprogrammed software of TP-Link routers such as TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941ND V5 allow attackers to cause service failures.

The vulnerability of the microprogrammed software of TP-Link routers such as TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941ND V5 is related to errors in resource release. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created GET request...

SUSE-SU-2023:2243-2 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Updated to Intel CPU Microcode 20230512 release. bsc1211382. - New platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ADL-N | A0 |...

microcode_ctl bug fix and enhancement update

An update is available for microcodectl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The microcodectl packages provide microcode updates for Intel processors...

The vulnerability of the microprogramming software for Samsung Exynos Modems 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123 allows a hacker to cause service failures.

The vulnerability of the microprogramming software for Samsung Exynos Modems 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123 lies in the fact that operations occur outside the memory buffer during the decoding of the status string. Exploiting this vulnerabilit...

The vulnerability of TP-Link Archer AX21 (AX1800)’s microprogramming software, related to synchronization errors when using a shared resource (“Race Situation”), allows a hacker to execute arbitrary code.

The vulnerability of TP-Link Archer AX21 AX1800’s microprogramming software is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Medium: microcode_ctl

Issue Overview: Insufficient granularity of access control in out-of-band management in some IntelR Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access. CVE-2022-21216 Incorrect default permissions in some...

Security Bulletin: Due to use of OpenSSL, IBM Virtualization Engine TS7700 is vulnerable to denial of service (CVE-2023-0215, CVE-2023-0286) and information disclosure (CVE-2022-4304)

Summary IBM Virtualization Engine TS7700 is vulnerable to denial of service CVE-2023-0215, CVE-2023-0286 and information disclosure CVE-2022-4304 due to the use of OpenSSL. OpenSSL is used by IBM Virtualization Engine TS7700 for inbound and outbound TLS connections other than those provided by th...

Security Bulletin: IBM Virtualization Engine TS7700 is vulnerable to various cryptographic attacks due to use of IBM® SDK Java™ Technology Edition, Version 8 (CVE-2023-30441)

Summary IBM Virtualization Engine TS7700 is vulnerable to various cryptographic attacks due to use of IBM® SDK Java™ Technology Edition, Version 8 CVE-2023-30441. The Java SDK is used by the TS7700 to provide the Management Interface, to perform cache management, and to provide Transparent Cloud...