spectre-meltdown-checker-0.44-3.6.1 < > , 2 a p9|h `AQNt'ĬR椅B?ZX4&RD3ϪqWsZ}7 4 @T^4)/*څA%9C?CNnN ,T/'"ixH$SzKxl
n(H!~1BDc~腆%bRiЍ )<Î+P+:lT3I{IUxYo3AokQO{nʹl ?' {."YKF&3眗^ > > H ? 8 d & O 9 Z g }
" P d ( < 8 D
9 x
: V
F 7 G L H ` I t X | Y \ ] ^ b c a d e f l u v $ w x y z 4 C spectre-meltdown-checker 0.44 3.6.1 Spectre & Meltdown Vulnerability Checker A shell script to tell if your Linux installation is vulnerable
against the three "speculative execution" CVEs that were made public
in early 2018.
Without options, the script inspects the currently running kernel.
Alternatively, a kernel image can be specify on the command line to
analyze a non-running kernel.
The script tries to detect mitigations, including backported
non-vanilla patches, regardless of the advertised kernel version
number. a sheep90 SUSE Linux Enterprise 15 SUSE LLC GPL-3.0-only https://www.suse.com/ Productivity/Security https://github.com/speed47/spectre-meltdown-checker linux x86_64 [ #= A큤A큤 a a _Wa a acee3af632a94358eaf723ec818b9e203e59547428d6c4643131d74c495cab19 5d6fbd2c1681b967be21e7f1982e5f7e359a6e31d6d1e41871c0bb8c8645031a f20948605b5d8e349977579aae01357e50f9fe4d158fc044d33c35b5fab41684 root root root root root root root root root root spectre-meltdown-checker-0.44-3.6.1.src.rpm spectre-meltdown-checker spectre-meltdown-checker(x86-64) @
/bin/sh rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 aS@]@]^@\\P\e\e[/[[ @[@Z\ZYZX@meissner@suse.com meissner@suse.com palica@liguros.net meissner@suse.com palica@liguros.net jengelh@inai.de meissner@suse.com sean@suspend.net jengelh@inai.de meissner@suse.com adrian@suse.de adrian@suse.de adrian@suse.de - version 0.44 (bsc#1189477)
- feat: add support for SRBDS related vulnerabilities
- feat: add zstd kernel decompression (#370)
- enh: arm: add experimental support for binary arm images
- enh: rsb filling: no longer need the 'strings' tool to check for kernel support in live mode
- fix: fwdb: remove Intel extract tempdir on exit
- fix: has_vmm: ignore kernel threads when looking for a hypervisor (fixes #278)
- fix: fwdb: use the commit date as the intel fwdb version
- fix: fwdb: update Intel's repository URL
- fix: arm64: CVE-2017-5753: kernels 4.19+ use a different nospec macro
- fix: on CPU parse info under FreeBSD
- chore: github: add check run on pull requests
- chore: fwdb: update to v165.20201021+i20200616 - version 0.43
- feat: implement TAA detection (CVE-2019-11135 bsc#1139073)
- feat: implement MCEPSC / iTLB Multihit detection (CVE-2018-12207 bsc#1117665)
- feat: taa: add TSX_CTRL MSR detection in hardware info
- feat: fwdb: use both Intel GitHub repo and MCEdb to build our firmware version database
- feat: use --live with --kernel/--config/--map to override file detection in live mode
- enh: rework the vuln logic of MDS with --paranoid (fixes #307)
- enh: explain that Enhanced IBRS is better for performance than classic IBRS
- enh: kernel: autodetect customized arch kernels from cmdline
- enh: kernel decompression: better tolerance against missing tools
- enh: mock: implement reading from /proc/cmdline
- fix: variant3a: Silvermont CPUs are not vulnerable to variant 3a
- fix: lockdown: detect Red Hat locked down kernels (impacts MSR writes)
- fix: lockdown: detect locked down mode in vanilla 5.4+ kernels
- fix: sgx: on locked down kernels, fallback to CPUID bit for detection
- fix: fwdb: builtin version takes precedence if the local cached version is older
- fix: pteinv: don't check kernel image if not available
- fix: silence useless error from grep (fixes #322)
- fix: msr: fix msr module detection under Ubuntu 19.10 (fixes #316)
- fix: mocking value for read_msr
- chore: rename mcedb cmdline parameters to fwdb, and change db version scheme
- chore: fwdb: update to v130.20191104+i20191027
- chore: add GitHub check workflow
- upstream tarball no longer includes license, use the gpl 3 standalone html for it - version 0.42
* add FreeBSD MDS mitigation detection
* add mocking functionality to help debugging, dump data to mock the behavior of your CPU with --dump-mock-data
* AMD, ARM and CAVIUM are not vulnerable to MDS
* RDCL_NO bit wasn't taking precedence for L1TF check on some newer Intel CPUs
* The MDS_NO bit on newer Intel CPUs is now recognized and used
* remove libvirtd from hypervisor detection to avoid false positives (#278)
* under BSD, the data returned when reading MSR was incorrectly formatted
* update builtin MCEdb from v110 to v111 - noarch does not work on older distros, removed - version 0.41
* add support for the 4 MDS CVEs
* add Spectre and Meltdown mitigation detection for Hygon CPU
* for SSBD, report whether the mitigation is active
* and other fixes and enhancements - Use Source URL. Remove services, just run `osc service lr
download_files` for updating. - disable the services, just run "osc service disabledrun" for upadating. - version 0.40
* add support for L1TF CVEs (aka Foreshadow and Foreshadow-NG)
* add summary of vulnerabilities at the end of script execution - Compact and wrap description. - version 0.37
* lots of improvements
* spectre v4 and v3a added - update to version 0.31
* meltdown: detecting Xen PV, reporting as not vulnerable
* is_cpu_vulnerable: add check for old Atoms
* ibrs: check for spec_ctrl_ibrs in cpuinfo - update to version 0.29
* AMD updates - initial package of version 0.27 sheep90 1629294215 0.44-3.6.1 0.44-3.6.1 spectre-meltdown-checker.sh spectre-meltdown-checker README.md spectre-meltdown-checker gpl-3.0-standalone.html /usr/bin/ /usr/share/doc/packages/ /usr/share/doc/packages/spectre-meltdown-checker/ /usr/share/licenses/ /usr/share/licenses/spectre-meltdown-checker/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:20887/SUSE_SLE-15-SP1_Update/061a456bd78a8675656c709dd69995f6-spectre-meltdown-checker.SUSE_SLE-15-SP1_Update drpm xz 5 x86_64-suse-linux POSIX shell script, ASCII text executable, with very long lines directory ASCII text, with very long lines HTML document, ASCII text R gE|'Wv utf-8 6247d79c4fcbf75083b6e16b4b18c72cfc22f2af2b70bbff2cf9bbc4a4a7d7ba ? 7zXZ
! t/>] "k%:JCn_b Vx&R@1^Gnon"/"C Zt vV4XQ$쾔 wV&4\9T܌6sh%Ԯ}>Ƚ@ݢK ֏t7pR(tAaPصht*.__ i
2.p@91,4R
WC[]t8239Mys ^%=3L#w` 7mc~ϠYf i >_,US ͍fr̨ Л4d{UʫB'8S]*S:1ؕ%!A w{x}V)VzZ OA5~Wn]xRu_Ln`6UԴՌN< eal}`Z1 y(pΪu̿r!,2IXϸew(4ONwQ)j) +ZM)cۂ ݐ+ㄙh!'Cdu4Nړzjl)JS:s +27m 0 }Na"HU,$ Uo`{hpؽaɞܦ B{X L0t XcAE^:26VO2&-]h$z>|b'd0.S%
o|#N@9X.ot չËU&M0Iyr/|G>;j7ɻ8^FV+e&9UFpɻy
%cmuC1?;윍ZݺC43Fd[.n} ੨So9rvʇ HP+wxȞ;:ӟ*Nz(*eJtB#"}jK٠a;V| f9p ^TIr>i-Cيj-n8҃0@r0W OQ珒c T!3LԲ=+8D6!f)~,ď<lC,ڔJL5>%8M":C H1]U+h_~RՍ)`Zx^(A
b&KE8V*]5(7t߰VgF2_K1'f+ vkIVܐh1Jg*~%Ìh`BI0(34x~BH<| |#2O$FGo+5wͼޠ S&e[/'| 2n <VÌJNqyb&wߘоca# UJ@|;3zcXZ^, H|$r71.ܘtojc7vd.MHi9Kg+X,`:{Eݦ k1ΚSlDžI=eY#"(ϓI% UWhߊFrX0DK*Jʜ՝m֟;Ryޔ
>%PVz\^OTqZ
"b;n(j&@,EILmȶByC
_.G#S/{KXOB* $:K0kNNX=R݁aڼ˰B6/Ls9zYNy 7q,$*"+?7W]ʏݢvl' $5KfJT2M:ì[L Z-]fʩ)%] HֵNI4eV~K
LAu4w{S]kFYqÜL@X)=-+?Fbk
M
BA]:; 4`93 yU)P2LJ{SwєZ
VFwY:54iF*OH5&kJe/kmf w?cn;:bi/-Ao &o?-1nv:K#_)V\OH5[EeC!py^0o_&.,@t. ܀ZwRDN`YY2ps88/Vz+ .C4ȷ bHM-wp `$d WNBo?t/h~kJF) ˟vH;2[JHefDbke
TUcp(R&e W O.4D:.eCz!(͵7P㹺.ř1!`1u\`ƵsjQ{ ]ń5[>`wNLGRY`w{KzRC|9 J9kK r
5B+X=GRw}ynCr fŃ\s 呆nBP>jz|['X&Z@J;מ 5o4!C0U6wtۑB<]W.l{[.p.Ƥ <>/Y[$ߗ3Ns<8DR4C7VKY?z mO2f`n "^^W2mzqIw jʷLHTG*"Ӭ1)'SuK)qOꌆwM xHT (\iP# &o#Ce.X@K!w 1NIoPFv 7(,/ꐣ?mg<"Qb6*ю\`HKq f O^$φs 67yKdѕgV Vj>
Xx:1ypvLK8\7c y{5ntr#4g;QKW\aUTL 5
>k#LFD&Ȕᝆ-EV"[nCK+ۦ-^8W*ujF!ey@ mJ"|z*u<4 Q.f
|RMJ
.[&۰qUbA;S8 WD-#w :ʑ)3ZVK3{i,3ӑe/ouV&%ZV- ^)Qeiwq:$!"s4e**Q?\H/T?=v,lԕh"Տvyׇ
"ӝ;ʠRfEeR~l X|K0Q%V;I<<!IxT . uЮE R{gr FǻZWڌ u 6.~Ks ; Y 3N -e9oPV Aj%P. -&e6 Ja88,G8kjLUZZ="s$dn+yjrJP8L a}):Qytঊ8 J-(}nIAOYphldxI/#"<+PHdsבɉJ#h Aqۗ2d16u= LB@j.!Ev% nou +o,j'~@:N \b+(yĴOܴgX-ʼ$J4H+
p~>7`筄 }qZƤ1 _%2|C{Ds
KZݦĩ]Z
(pnD5Z}DM(pP f
w~aR.#ȗ5Vu{1~/iƢt|'#m:7֊
^ bEhyr)P/rPA*9 Yoc
<ko+ ^J2>+0I9VƲ}Vupr=NԵS͂bݬWϤOyZ D¿Nď*N$?յl@ O>I):7{!* U~} s6x9 WL3!8ܛ15~{94QG8?8Duv}Q2SH &TK| _ nW:FgDG ~ $AaXIuNav벦ۖhP3-sLV#+J) tHA ˗ܮ4
s 9QEzL{z-RLώ݀n~a`!\RL&Dr#[Xuy1< )FaƷielr!gc5`=b*Ne9|0g^(֝&Y_g_q}2dyB.d.l'? J|3ԆA Θ ՙɸ@k/-1Uֳ(Ûj!~D|,ヾ_sVOS > |%dQEw}$z"*BĚ>%,t2fqKJ GZ3kak}aRUeV#T=sMpC!S7t^X 7g>Z H