A microcode_ctl security, bug fix and enhancement update has been released for Oracle Linux 7.

El-errata: ELSA-2021-3028 Important: Oracle Linux 7 microcode_ctl security, bug fix and enhancement update

Oracle Linux Security Advisory ELSA-2021-3028

  http://linux.oracle.com/errata/ELSA-2021-3028.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
microcode_ctl-2.1-73.11.0.1.el7_9.x86_64.rpm

SRPMS:
  http://oss.oracle.com/ol7/SRPMS-updates/microcode_ctl-2.1-73.11.0.1.el7_9.src.rpm

Related CVEs:

CVE-2020-0543
CVE-2020-0548
CVE-2020-0549
CVE-2020-8695
CVE-2020-8696
CVE-2020-8698
CVE-2020-24489
CVE-2020-24511
CVE-2020-24512



Description of changes:

[2:2.1-73.11.0.1]
- for Intel, do not trigger load if on-disk microcode is not an update [Orabug: 30634727]
- set early_microcode="no" in virtualized guests to avoid early load bugs [Orabug: 30618736]
- ensure late loading fixes are present on 4.1.12-* and 4.14.35-*
- enable early and late load for 5.4.17-*
- enable early loading for 06-4f-01 caveat
- remove no longer appropriate caveats for 06-2d-07 and 06-55-04

[2:2.1-73.11]
- Update Intel CPU microcode to microcode-20210608 release:
- Fixes in releasenote.md file.

[2:2.1-73.10]
- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).