FEDORA-2019-eb176fa2cb created by ganto 9 months ago for Fedora 30
stable

Update to 0.43. Changes:

  • feat: implement TAA detection (CVE-2019-11135)
  • feat: implement MCEPSC / iTLB Multihit detection (CVE-2018-12207)
  • feat: taa: add TSX_CTRL MSR detection in hardware info
  • feat: fwdb: use both Intel GitHub repo and MCEdb to build our firmware version database
  • feat: use --live with --kernel/--config/--map to override file detection in live mode
  • enh: rework the vuln logic of MDS with --paranoid (fixes #307)
  • enh: explain that Enhanced IBRS is better for performance than classic IBRS
  • enh: kernel: autodetect customized arch kernels from cmdline
  • enh: kernel decompression: better tolerance against missing tools
  • enh: mock: implement reading from /proc/cmdline
  • fix: variant3a: Silvermont CPUs are not vulnerable to variant 3a
  • fix: lockdown: detect Red Hat locked down kernels (impacts MSR writes)
  • fix: lockdown: detect locked down mode in vanilla 5.4+ kernels
  • fix: sgx: on locked down kernels, fallback to CPUID bit for detection
  • fix: fwdb: builtin version takes precedence if the local cached version is older
  • fix: pteinv: don't check kernel image if not available
  • fix: silence useless error from grep (fixes #322)
  • fix: msr: fix msr module detection under Ubuntu 19.10 (fixes #316)
  • fix: mocking value for read_msr
  • chore: rename mcedb cmdline parameters to fwdb, and change db version scheme
  • chore: fwdb: update to v130.20191104+i20191027

How to install

sudo dnf upgrade --advisory=FEDORA-2019-eb176fa2cb

This update has been submitted for testing by ganto.

9 months ago

This update's test gating status has been changed to 'waiting'.

9 months ago

This update's test gating status has been changed to 'ignored'.

9 months ago

This update has been pushed to testing.

9 months ago

This update can be pushed to stable now if the maintainer wishes

9 months ago

This update has been submitted for stable by bodhi.

9 months ago

This update has been pushed to stable.

9 months ago

Please login to add feedback.

Metadata
Type
enhancement
Karma
0
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-1
Stable by Karma
1
Stable by Time
7 days
Dates
submitted
9 months ago
in testing
9 months ago
in stable
9 months ago

Automated Test Results