MGASA-2018-0322

    Dashboard / Vulnerabilities / MGASA-2018-0322

    MGASA-2018-0322

    Published: 25 Jul 2018Last Modified: 16 Apr 2026

    Summary: Updated microcode packages fix security vulnerability

    Details: This microcode update provides the first set of fixes for Speculative Store Bypass (SSBD, Spectre v4, CVE-2018-3639) and Rogue System Register Read (RSRE, Spectre v3a, CVE-2018-3640) for Intel Sandybridge server, Ivy Bridge server, Haswell server, Skylake server, Broadwell server, a few HEDT Core i7/i9 models. Included is also an AMD cpu microcode fix for family 15h Processor Revision ID 0x00610f01 missed in the MGASA-2018-0260 update.

    References: https://advisories.mageia.org/MGASA-2018-0322.html, https://bugs.mageia.org/show_bug.cgi?id=23313

    Affected packages

    Package

    Name: microcode

    Purl: pkg:rpm/mageia/microcode?arch=source&distro=mageia-6

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -0.20180703-1.mga6.nonfree

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High