Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Fixed packages 6

Vulnerabilities 3

• Unscored —
  CVE-2020-8695

  Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially en…

  intel-microcode intel-microcode Debian Ubuntu
  Nov 12, 2020
• Unscored —
  CVE-2020-8696

  Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authentic…

  intel-microcode intel-microcode Debian Ubuntu
  Nov 12, 2020
• Unscored —
  CVE-2020-8698

  Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enabl…

  intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine
  Nov 12, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1828583
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1890355
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1890356
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5183.json
• report
  https://access.redhat.com/security/cve/CVE-2020-8695
• article
  https://access.redhat.com/articles/5569051
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-8695
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-8695
• article
  https://en.wikipedia.org/wiki/Power_analysis
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html
• report
  https://access.redhat.com/security/cve/CVE-2020-8696
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-8696
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-8696
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html
• report
  https://access.redhat.com/security/cve/CVE-2020-8698
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-8698
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-8698