github-actions[bot]
6f8112c700
enh: CVE-2022-40982 (Downfall) overhaul
...
built from commit c4c4ea8c0a5f2ffde852a22f26b9801bca61139a
dated 2026-04-02 19:55:25 +0200
by Stéphane Lesimple (speed47_github@speed47.net )
- added `--kernel-config` support for all three Kconfig variants seen over all kernel versions up to now
- added `--kernel-map` support for `gds_select_mitigation` in `System.map`
- fixed the `--sysfs-only` mode
- added verbose information about remediation when `--explain` is used
- implemented `--paranoid mode`, requiring `GDS_MITIGATION_LOCKED` so that mitigation can't be disabled at runtime
- fixed offline mode (was wrongly looking at the system `dmesg`)
- better microcode status reporting (enabled, disabled, unsupported, unknown)
- fixed unknown (EOL) AVX-capable Intel family 6 CPUs now defaulting to affected
- fixed 2 missing known affected CPU models: INTEL_FAM6_SKYLAKE_L and INTEL_FAM6_SKYLAKE
2026-04-02 18:03:22 +00:00
github-actions[bot]
f46c743cad
chore: build: also add new files, handle github workflows
...
built from commit c799974038
dated 2026-04-02 18:47:00 +0200
by Stéphane Lesimple (speed47_github@speed47.net )
2026-04-02 16:48:13 +00:00
github-actions[bot]
33bdd0688d
chore: conditional workflows on all branches
...
built from commit 5e2af29e6a
dated 2026-04-02 18:36:43 +0200
by Stéphane Lesimple (speed47_github@speed47.net )
2026-04-02 16:39:04 +00:00
github-actions[bot]
7f87ade3fe
chore: conditional workflows on all branches
...
built from commit 44312e3ed385437674a56340b53ca59df291fc41
dated 2026-04-02 18:36:43 +0200
by Stéphane Lesimple (speed47_github@speed47.net )
2026-04-02 16:38:01 +00:00
github-actions[bot]
e2d4d14e14
chore: add stalebot in dryrun
...
built from commit 5fc008f2d4
dated 2026-04-02 13:13:19 +0200
by Stéphane Lesimple (speed47_github@speed47.net )
2026-04-02 11:36:58 +00:00
github-actions[bot]
ddf2f2c723
chore: add stalebot in dryrun
...
built from commit 5fc008f2d4
dated 2026-04-02 13:13:19 +0200
by Stéphane Lesimple (speed47_github@speed47.net )
2026-04-02 11:14:30 +00:00
github-actions[bot]
fe376887ab
enh: CVE-2017-5715; check for unprivileged eBPF for paranoid mode
...
built from commit e5c6d2d905
dated 2026-04-01 20:37:54 +0000
by Stéphane Lesimple (speed47_github@speed47.net )
2026-04-01 20:39:36 +00:00
github-actions[bot]
7b41bcca2b
chore: shellcheck fixes
...
built from commit ac327ce7c5
dated 2026-04-01 20:10:29 +0000
by Stéphane Lesimple (speed47_github@speed47.net )
2026-04-01 20:11:58 +00:00
github-actions[bot]
151dd12e3e
fix: cap_rdcl_no, cap_gds_no, cap_tsa_*_no were not setting the current CPU status as immune for their respective vulns
...
built from commit 278989d550
dated 2026-04-01 00:47:41 +0200
by Stéphane Lesimple (speed47_github@speed47.net )
2026-03-31 22:48:56 +00:00
github-actions[bot]
15ea90f312
enh: draft rework of CVE-2017-5753 aka spectre v1
...
built from commit 4738e8f0ad
dated 2026-04-01 00:22:07 +0200
by Stéphane Lesimple (speed47_github@speed47.net )
2026-03-31 22:23:17 +00:00
github-actions[bot]
5fd6a20ebb
chore: readme: add a second table one about impact/mitigation, rework sections
...
built from commit c20369d9e3899b03280bf72893956f36844bc969
dated 2026-03-31 22:57:00 +0200
by Stéphane Lesimple (speed47_github@speed47.net )
2026-03-31 22:09:49 +00:00
github-actions[bot]
e7df6a3e30
chore: readme: add a second table one about impact/mitigation
...
built from commit 4f16822bb11f5b8461647c228a7f2087d5716aea
dated 2026-03-31 22:57:00 +0200
by Stéphane Lesimple (speed47_github@speed47.net )
2026-03-31 22:05:17 +00:00
github-actions[bot]
ba24551c56
chore: readme: add a second table one about impact/mitigation
...
built from commit 25a7e7089a3c14f0b2d1320995b08d9d941d8c51
dated 2026-03-31 22:57:00 +0200
by Stéphane Lesimple (speed47_github@speed47.net )
2026-03-31 22:02:37 +00:00
github-actions[bot]
7c2699c01a
chore: readme: add a second table one about impact/mitigation
...
built from commit 3e969c94e04e48f8db9dbb5603371e1180a4d32a
dated 2026-03-31 22:57:00 +0200
by Stéphane Lesimple (speed47_github@speed47.net )
2026-03-31 21:53:12 +00:00
github-actions[bot]
6663b6422e
chore: readme: add a second table one about impact/mitigation
...
built from commit b74adb0957c471014dce284b2b6bf8cad85edf38
dated 2026-03-31 22:57:00 +0200
by Stéphane Lesimple (speed47_github@speed47.net )
2026-03-31 21:43:28 +00:00
github-actions[bot]
fe55c70658
chore: clearer CVE table in README.md
...
built from commit 9bbefb7bae40c7c240641b3f714691a76976c9c0
dated 2026-03-31 22:57:00 +0200
by Stéphane Lesimple (speed47_github@speed47.net )
2026-03-31 21:01:37 +00:00
github-actions[bot]
d0822e1f9d
chore: prepare for dev-build renaming to test-build
...
built from commit 295324a545
dated 2026-03-31 19:34:52 +0200
by Stéphane Lesimple (speed47_github@speed47.net )
2026-03-31 17:53:45 +00:00
github-actions[bot]
10e5b5749e
chore: set VERSION when building
...
built from commit efa07e7fd9
dated 2026-03-30 23:46:13 +0200
by Stéphane Lesimple (speed47_github@speed47.net )
2026-03-30 22:22:20 +00:00
github-actions[bot]
4f7f83a40e
chore: set VERSION when building
...
built from commit 88099e12bf082112a1579e2cd37f010c29463e9d
dated 2026-03-30 23:46:13 +0200
by Stéphane Lesimple (speed47_github@speed47.net )
2026-03-30 21:51:45 +00:00
github-actions[bot]
4bbbd71564
update dev docs and refactor CVE list in readme
...
built from commit eabddf3d72
dated 2026-03-30 23:24:18 +0200
by Stéphane Lesimple (speed47_github@speed47.net )
2026-03-30 21:39:55 +00:00
github-actions[bot]
c174a8b754
update dev docs and readme
...
built from commit f66cb22a6d4779162909ea1ae1139c80942b1ce8
dated 2026-03-30 23:24:18 +0200
by Stéphane Lesimple (speed47_github@speed47.net )
2026-03-30 21:28:20 +00:00
github-actions[bot]
0f36203b5f
chore: adjust workflow for dev-build
...
built from commit 254f8ece6de39214c5e25694b0fea8c2ddfbf511
dated 2026-03-30 21:24:34 +0200
by Stéphane Lesimple (speed47_github@speed47.net )
2026-03-30 21:08:41 +00:00