| Package | intel-microcode |
|---|---|
| Version | 3.20180807a.1~deb7u1 |
| Related CVEs | CVE-2018-3615 CVE-2018-3620 CVE-2018-3646 CVE-2018-3639 CVE-2018-3640 CVE-2017-5715 |
Security researchers identified speculative execution side-channel methods which have the potential to improperly gather sensitive data from multiple types of computing devices with different vendors’ processors and operating systems.
In order to fix those issues an update to the intel-microcode package is required, which is non-free. It is related to ELA-18-1 and adds more mitigations for additional types of Intel processors.
For more information please also read the official Intel security advisories at:
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00088.html
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html
For Debian 7 Wheezy, these problems have been fixed in version 3.20180807a.1~deb7u1.
We recommend that you upgrade your intel-microcode packages.
Further information about Extended LTS security advisories can be found in the dedicated section of our website.