Hi everyone,
Today we released 34 security advisories for customers to review. 31 of the advisories are for a variety of software including WiFi and chipset drivers, various applications, utilities, and toolkits. The bulk of these were coordinated through our bug bounty program and customers should visit our product security center to see if they need to take action.
There are two firmware advisories. One affecting OpenBMC or base management controller, that will be of interest to those using Intel server products and the other is a Thunderbolt controller advisory that all customers should review. These issues were found internally by Intel engineers.
The last one on the list is also a software advisory for the System Usage Report for Gameplay utility. There is one CVE for an issue reported through our bug bounty program but please note, a mitigation is not being released as this software has been discontinued. If you’re using this software, our guidance is to uninstall it and instead, use the latest Intel Computing Improvement Program software to report performance data.
In Chips & Salsa episode '24-1, CRob and I give a quick rundown of todays advisores:
Regards,
Jerry Bryant
Sr. Director, Incident Response & Security Communications
Intel Product Assurance and Security
Intel Product Assurance and Security (IPAS) is designed to serve as a security center of excellence – a sort of mission control – that looks across all of Intel. Beyond addressing the security issues of today, we are looking longer-term at the evolving threat landscape and continuously improving product security in the years ahead.