[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

253650

 
 

909

 
 

197367

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2019:3348-1 -- SLES spectre-meltdown-checker

ID: oval:org.secpod.oval:def:89050806Date: (C)2023-10-16   (M)2024-05-22
Class: PATCHFamily: unix




This update for spectre-meltdown-checker fixes the following issues: - feat: implement TAA detection - feat: implement MCEPSC / iTLB Multihit detection - feat: taa: add TSX_CTRL MSR detection in hardware info - feat: fwdb: use both Intel GitHub repo and MCEdb to build our firmware version database - feat: use --live with --kernel/--config/--map to override file detection in live mode - enh: rework the vuln logic of MDS with --paranoid - enh: explain that Enhanced IBRS is better for performance than classic IBRS - enh: kernel: autodetect customized arch kernels from cmdline - enh: kernel decompression: better tolerance against missing tools - enh: mock: implement reading from /proc/cmdline - fix: variant3a: Silvermont CPUs are not vulnerable to variant 3a - fix: lockdown: detect Red Hat locked down kernels - fix: lockdown: detect locked down mode in vanilla 5.4+ kernels - fix: sgx: on locked down kernels, fallback to CPUID bit for detection - fix: fwdb: builtin version takes precedence if the local cached version is older - fix: pteinv: don"t check kernel image if not available - fix: silence useless error from grep - fix: msr: fix msr module detection under Ubuntu 19.10 - fix: mocking value for read_msr - chore: rename mcedb cmdline parameters to fwdb, and change db version scheme - chore: fwdb: update to v130.20191104+i20191027 - chore: add GitHub check workflow

Platform:
SUSE Linux Enterprise Desktop 15 SP1
SUSE Linux Enterprise Server 15 SP1
Product:
spectre-meltdown-checker
Reference:
SUSE-SU-2019:3348-1
CVE-2018-12207
CVE-2019-11135
CVE    2
CVE-2018-12207
CVE-2019-11135
CPE    2
cpe:/o:suse:suse_linux_enterprise_server:15:sp1
cpe:/a:spectre-meltdown-checker:spectre-meltdown-checker

© SecPod Technologies