RHEA-2018:2305 - Product Enhancement Advisory

Topic

Updated microcode_ctl packages that add one enhancement are now available for Red Hat Enterprise Linux 5 Extended Lifecycle Support.

Description

The microcode_ctl packages provide microcode updates for Intel and AMD processors.

This update adds the following enhancement:

• The Intel CPU microcode has been updated to the latest upstream version, which also provides new capabilities used by the Linux kernel to mitigate CVE-2018-3639, known as the Speculative Store Bypass vulnerability. (BZ#1573444)

Users of microcode_ctl are advised to upgrade to these updated packages, which add this enhancement.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Note: a system reboot is necessary for this update to take effect.

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 5 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 5 i386

Fixes

CVEs

(none)

References

• https://access.redhat.com/security/vulnerabilities/ssbd