Page 3 of 3

Re: MX 17/18 Repository: The Spectre-Meltdown-Checker Thread

Posted: Thu Jun 06, 2019 4:18 pm
by philotux
Stevo wrote: Thu Jun 06, 2019 2:49 pm If "uname -a" shows kernel version 4.19.0-1 (4.19.5) or earlier, use MX Package Installer to reinstall or install the 4.19 kernel, which will update to the current 4.19.0-5 (4.19.37) MX kernel.
Great! Thank you so much Stevo. Following your advice on updating the kernel, all is green here:

Code: Select all

SUMMARY: 
CVE-2017-5753:OK 
CVE-2017-5715:OK 
CVE-2017-5754:OK 
CVE-2018-3640:OK 
CVE-2018-3639:OK 
CVE-2018-3615:OK 
CVE-2018-3620:OK 
CVE-2018-3646:OK 
CVE-2018-12126:OK 
CVE-2018-12130:OK 
CVE-2018-12127:OK 
CVE-2019-11091:OK

Re: MX 17/18 Repository: The Spectre-Meltdown-Checker Thread

Posted: Thu Jun 06, 2019 5:23 pm
by Stevo
Mmikeinsantarosa has also reported that the secure Liquorix 5.1 kernel also supports his broadband wimax internet card.

Re: MX 17/18 Repository: The Spectre-Meltdown-Checker Thread

Posted: Thu Jun 06, 2019 7:05 pm
by Gerson
MX 18.3 comes with the kernel linux-image-4.19.0-5-amd64-unsigned; it does not give me vulnerabilities, but if I put a kernel higher than the one that brings MX 18.3 for example the Linux mx 4.20.0-16.2-liquorix-amd64 gives me 5 vulnerabilities and if I go up to linux-image-5.1.0-6.1-liquorix- amd64 gives me only one vulnerability.

Re: MX 17/18 Repository: The Spectre-Meltdown-Checker Thread

Posted: Thu Jun 06, 2019 7:09 pm
by Stevo
The 4.20 kernel is actually older than our MX 4.19.37 kernel, does not have the security fixes, and is no longer supported. I'll ask Tim to remove it from the repo.

I can't get that problem with the Liquorix 5.1-0.6 kernels--does any other user get it?

Re: MX 17/18 Repository: The Spectre-Meltdown-Checker Thread

Posted: Fri Jun 07, 2019 9:06 am
by mmikeinsantarosa
My laptop:

Code: Select all

System:    Host: mx17mainlt Kernel: 5.1.0-6.1-liquorix-amd64 x86_64 bits: 64 
           Desktop: Xfce 4.12.3 Distro: MX-18.3_x64 Continuum March 14  2018 
SUMMARY: CVE-2017-5753:OK
CVE-2017-5715:KO
CVE-2017-5754:OK CVE-2018-3640:OK CVE-2018-3639:OK CVE-2018-3615:OK CVE-2018-3620:OK CVE-2018-3646:OK CVE-2018-12126:OK CVE-2018-12130:OK CVE-2018-12127:OK CVE-2019-11091:OK

Re: MX 17/18 Repository: The Spectre-Meltdown-Checker Thread

Posted: Fri Jun 07, 2019 12:19 pm
by Gerson
Notebook Compaq Presario 21 Verk

Code: Select all

Linux mx 5.1.0-6.1-liquorix-amd64 #1 ZEN SMP PREEMPT liquorix 5.1-1~mx17+1 (2019-06-01) x86_64 GNU/Linux
CVE-2017-5715:KO
SUMMARY: CVE-2017-5753:OK CVE-2017-5715:KO CVE-2017-5754:OK CVE-2018-3640:OK CVE-2018-3639:OK CVE-2018-3615:OK CVE-2018-3620:OK CVE-2018-3646:OK CVE-2018-12126:OK CVE-2018-12130:OK CVE-2018-12127:OK CVE-2019-11091:OK

Re: MX 17/18 Repository: The Spectre-Meltdown-Checker Thread

Posted: Tue Dec 01, 2020 5:08 pm
by Stevo
Updated to 0.44 in main repo. The official release adds checking for CVE-2020-0543 [Special Register Buffer Data Sampling (SRBDS)].