{"schema_version":"1.7.3","id":"openSUSE-SU-2019:2509-1","published":"2019-11-14T06:30:51Z","modified":"2026-02-04T04:17:24.856613Z","related":["CVE-2019-11135","CVE-2019-11139"],"upstream":["CVE-2019-11135","CVE-2019-11139"],"summary":"Security update for ucode-intel","details":"This update for ucode-intel fixes the following issues:\n\n- Updated to 20191112 security release (bsc#1155988)\n  - Processor             Identifier     Version       Products\n  - Model        Stepping F-MO-S/PI      Old->New\n  - ---- new platforms ----------------------------------------\n  - CML-U62      A0       6-a6-0/80           000000c6 Core Gen10 Mobile\n  - CNL-U        D0       6-66-3/80           0000002a Core Gen8 Mobile\n  - SKX-SP       B1       6-55-3/97           01000150 Xeon Scalable\n  - ICL U/Y      D1       6-7e-5/80           00000046 Core Gen10 Mobile\n  - ---- updated platforms ------------------------------------\n  - SKL U/Y      D0       6-4e-3/c0 000000cc->000000d4 Core Gen6 Mobile\n  - SKL H/S/E3   R0/N0    6-5e-3/36 000000cc->000000d4 Core Gen6\n  - AML-Y22      H0       6-8e-9/10 000000b4->000000c6 Core Gen8 Mobile\n  - KBL-U/Y      H0       6-8e-9/c0 000000b4->000000c6 Core Gen7 Mobile\n  - CFL-U43e     D0       6-8e-a/c0 000000b4->000000c6 Core Gen8 Mobile\n  - WHL-U        W0       6-8e-b/d0 000000b8->000000c6 Core Gen8 Mobile\n  - AML-Y        V0       6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile\n  - CML-U42      V0       6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile\n  - WHL-U        V0       6-8e-c/94 000000b8->000000c6 Core Gen8 Mobile\n  - KBL-G/X      H0       6-9e-9/2a 000000b4->000000c6 Core Gen7/Gen8\n  - KBL-H/S/E3   B0       6-9e-9/2a 000000b4->000000c6 Core Gen7; Xeon E3 v6\n  - CFL-H/S/E3   U0       6-9e-a/22 000000b4->000000c6 Core Gen8 Desktop, Mobile, Xeon E\n  - CFL-S        B0       6-9e-b/02 000000b4->000000c6 Core Gen8\n  - CFL-H        R0       6-9e-d/22 000000b8->000000c6 Core Gen9 Mobile\n- Includes security fixes for:\n  - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)\n  - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","affected":[{"package":{"name":"ucode-intel","ecosystem":"openSUSE:Leap 15.1","purl":"pkg:rpm/opensuse/ucode-intel&distro=openSUSE%20Leap%2015.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20191112-lp151.2.9.1"}]}],"ecosystem_specific":{"binaries":[{"ucode-intel":"20191112-lp151.2.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2019:2509-1.json"}}],"references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4GUK5H34U2XTLAIOJIQ7UDAHEDBJ2QCT/#4GUK5H34U2XTLAIOJIQ7UDAHEDBJ2QCT"},{"type":"REPORT","url":"https://bugzilla.suse.com/1139073"},{"type":"REPORT","url":"https://bugzilla.suse.com/1141035"},{"type":"REPORT","url":"https://bugzilla.suse.com/1155988"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-11135"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-11139"}]}