A microcode_ctl security update has been released for Oracle Linux 6.

El-errata: ELSA-2022-9670 Important: Oracle Linux 6 Extended Lifecycle Support (ELS) microcode_ctl security update

Oracle Linux Security Advisory ELSA-2022-9670

  http://linux.oracle.com/errata/ELSA-2022-9670.html

The following updated rpms for Oracle Linux 6 Extended Lifecycle Support (ELS) have been uploaded to the Unbreakable Linux Network:

i386:
microcode_ctl-1.17-33.31.0.3.el6_10.i686.rpm

x86_64:
microcode_ctl-1.17-33.31.0.3.el6_10.x86_64.rpm


Related CVEs:

CVE-2022-21123
CVE-2022-21125
CVE-2022-21127
CVE-2022-21166



Description of changes:

[3:1.17-33.31.0.3]
- update 06-55-04 to 0x2006d05
- update 06-55-07 to 0x5003302
- update 06-6a-04 to 0xb000280
- update 06-6a-06 to 0xd000375

[3:1.17-33.31.0.2]
- update Intel microcode bundle to 20210608

[3:1.17-33.31.0.1]
- recognize the "force-intel" file path available on EL7+ [orabug 31655792]
- disable live load during %post due to UEK4 rendezvous timeouts [orabug 31655792]
- merge Oracle changes for early load via dracut
- remove no longer appropriate caveats for 06-2d-07 and 06-55-04
- remove other caveat support to be compatible with early load logic
- enable late load on install for UEK4 kernels marked safe (except BDW-79)
- set early_microcode="no" in virtualized guests to avoid early load bugs [Orabug: 30618737]

_______________________________________________