SUSE-SU-2019:3340-1 -- SLES spectre-meltdown-checkerID: oval:org.secpod.oval:def:89003049 | Date: (C)2021-02-27 (M)2024-05-22 |
Class: PATCH | Family: unix |
This update for spectre-meltdown-checker fixes the following issues: - version 0.43 - feat: implement TAA detection - feat: implement MCEPSC / iTLB Multihit detection - feat: taa: add TSX_CTRL MSR detection in hardware info - feat: fwdb: use both Intel GitHub repo and MCEdb to build our firmware version database - feat: use --live with --kernel/--config/--map to override file detection in live mode - enh: rework the vuln logic of MDS with --paranoid - enh: explain that Enhanced IBRS is better for performance than classic IBRS - enh: kernel: autodetect customized arch kernels from cmdline - enh: kernel decompression: better tolerance against missing tools - enh: mock: implement reading from /proc/cmdline - fix: variant3a: Silvermont CPUs are not vulnerable to variant 3a - fix: lockdown: detect Red Hat locked down kernels - fix: lockdown: detect locked down mode in vanilla 5.4+ kernels - fix: sgx: on locked down kernels, fallback to CPUID bit for detection - fix: fwdb: builtin version takes precedence if the local cached version is older - fix: pteinv: don"t check kernel image if not available - fix: silence useless error from grep - fix: msr: fix msr module detection under Ubuntu 19.10 - fix: mocking value for read_msr - chore: rename mcedb cmdline parameters to fwdb, and change db version scheme - chore: fwdb: update to v130.20191104+i20191027 - chore: add GitHub check workflow
Platform: |
SUSE Linux Enterprise Server 12 SP5 |
Product: |
spectre-meltdown-checker |