DSA-4701: -1 intel-microcode -- security update

Published Jun 11, 2020

Updated

intel-microcode - security update

Other sources

This update ships updated CPU microcode for some types of Intel CPUs and provides mitigations for the Special Register Buffer Data Sampling (CVE-2020-0543), Vector Register Sampling (CVE-2020-0548) and L1D Eviction Sampling (CVE-2020-0549) hardware vulnerabilities.

Affected Software

2 affected components

debian/intel-microcode

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade intel-microcode to a version that resolves this vulnerability.
Patch DSA-4701-1

Event History

Jun 11, 2020

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Which systems are covered by this update?

The update provides updated CPU microcode for some types of Intel CPUs. The supplied information does not identify the specific CPU models affected.

What vulnerabilities does the microcode update mitigate?

It provides mitigations for Special Register Buffer Data Sampling (CVE-2020-0543), Vector Register Sampling (CVE-2020-0548), and L1D Eviction Sampling (CVE-2020-0549).

How should I determine whether my system has received the mitigations?

Check whether the Debian intel-microcode security update has been installed and applied on the system. Because these are CPU microcode changes, ensure the updated microcode is loaded after installation.