MX 17/18 Repository: The Spectre-Meltdown-Checker Thread

[philotux]

If "uname -a" shows kernel version 4.19.0-1 (4.19.5) or earlier, use MX Package Installer to reinstall or install the 4.19 kernel, which will update to the current 4.19.0-5 (4.19.37) MX kernel.

Great! Thank you so much Stevo. Following your advice on updating the kernel, all is green here:

Code: Select all

SUMMARY: 
CVE-2017-5753:OK 
CVE-2017-5715:OK 
CVE-2017-5754:OK 
CVE-2018-3640:OK 
CVE-2018-3639:OK 
CVE-2018-3615:OK 
CVE-2018-3620:OK 
CVE-2018-3646:OK 
CVE-2018-12126:OK 
CVE-2018-12130:OK 
CVE-2018-12127:OK 
CVE-2019-11091:OK

[Stevo]

Mmikeinsantarosa has also reported that the secure Liquorix 5.1 kernel also supports his broadband wimax internet card.

[Gerson]

MX 18.3 comes with the kernel linux-image-4.19.0-5-amd64-unsigned; it does not give me vulnerabilities, but if I put a kernel higher than the one that brings MX 18.3 for example the Linux mx 4.20.0-16.2-liquorix-amd64 gives me 5 vulnerabilities and if I go up to linux-image-5.1.0-6.1-liquorix- amd64 gives me only one vulnerability.

[Stevo]

The 4.20 kernel is actually older than our MX 4.19.37 kernel, does not have the security fixes, and is no longer supported. I'll ask Tim to remove it from the repo.

I can't get that problem with the Liquorix 5.1-0.6 kernels--does any other user get it?

[mmikeinsantarosa]

My laptop:

Code: Select all

System:    Host: mx17mainlt Kernel: 5.1.0-6.1-liquorix-amd64 x86_64 bits: 64 
           Desktop: Xfce 4.12.3 Distro: MX-18.3_x64 Continuum March 14  2018 

SUMMARY: CVE-2017-5753:OK
CVE-2017-5715:KO
CVE-2017-5754:OK CVE-2018-3640:OK CVE-2018-3639:OK CVE-2018-3615:OK CVE-2018-3620:OK CVE-2018-3646:OK CVE-2018-12126:OK CVE-2018-12130:OK CVE-2018-12127:OK CVE-2019-11091:OK

[Gerson]

Notebook Compaq Presario 21 Verk

Code: Select all

Linux mx 5.1.0-6.1-liquorix-amd64 #1 ZEN SMP PREEMPT liquorix 5.1-1~mx17+1 (2019-06-01) x86_64 GNU/Linux

CVE-2017-5715:KO

SUMMARY: CVE-2017-5753:OK CVE-2017-5715:KO CVE-2017-5754:OK CVE-2018-3640:OK CVE-2018-3639:OK CVE-2018-3615:OK CVE-2018-3620:OK CVE-2018-3646:OK CVE-2018-12126:OK CVE-2018-12130:OK CVE-2018-12127:OK CVE-2019-11091:OK

[Stevo]

Updated to 0.44 in main repo. The official release adds checking for CVE-2020-0543 [Special Register Buffer Data Sampling (SRBDS)].