* fix: arm64: collapse per-core CPU info lists to a single line (#576)
built from commit 7d9345a32f
dated 2026-06-02 17:21:31 +0000
by Stéphane Lesimple (speed47_github@speed47.net)
Store the per-core implementer/part/arch/variant/revision lists
space-separated (no embedded newlines, which also cleans up JSON and
prometheus output) and dedup them for the human-readable display, so
homogeneous systems show e.g. "0x41" instead of repeating it per core.
* chore: add stalebot in dryrun
built from commit afadf53f7f
dated 2026-04-02 13:13:19 +0200
by Stéphane Lesimple (speed47_github@speed47.net)
* Merge branch 'test' into source
built from commit 952fe6a87f
dated 2026-04-02 18:40:05 +0200
by Stéphane Lesimple (speed47_github@speed47.net)
* Merge pull request #530 from speed47/test
built from commit d3c0f1a24d
dated 2026-04-02 16:49:41 +0000
by Stéphane Lesimple (speed47_github@speed47.net)
chore: workflows revamp
* Merge pull request #532 from speed47/test
built from commit 6fac2d8ff1
dated 2026-04-02 21:32:39 +0000
by Stéphane Lesimple (speed47_github@speed47.net)
Retbleed / Downfall overhald / doc updates
* enh: add known fixed ucode versions for CVE-2023-23583 (Reptar) and CVE-2024-45332 (BPI)
built from commit cccb3c0081
dated 2026-04-04 17:50:04 +0200
by Stéphane Lesimple (speed47_github@speed47.net)
* fix: add rebleet to --variant
built from commit 7a7408d124
dated 2026-04-04 18:17:35 +0200
by Stéphane Lesimple (speed47_github@speed47.net)
* Merge pull request #566 from speed47/test
built from commit 3e2b6cc734
dated 2026-04-20 11:02:38 +0000
by Stéphane Lesimple (speed47_github@speed47.net)
Prepare release v26.33.0420xxx
* Merge pull request #571 from speed47/test
built from commit 0045d237fa
dated 2026-06-01 20:44:44 +0000
by Stéphane Lesimple (speed47_github@speed47.net)
Prepare next release
* update: fwdb from v349+i20260227+615b to v349+i20260512+1cce, 19 microcode changes
built from commit 645a79846b
dated 2026-06-01 20:56:45 +0000
by github-actions[bot] (41898282+github-actions[bot]@users.noreply.github.com)
---------
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
7a7408d fix: add rebleet to --variant
cccb3c0 enh: add known fixed ucode versions for CVE-2023-23583 (Reptar) and CVE-2024-45332 (BPI)
090f109 doc: add CVE-2023-31315 (SinkClose) to the unsupported list, add categories
5dc9c3c chore: reorder CVE list in README.md
a00fab1 feat: implement CVE-2025-40300 (VMScape) and CVE-2024-45332 (BTI)
e0b818f chore: stalebot: disable dryrun by default
4af1155 feat: implement CVE-2024-28956 (ITS, Indirect Target Selection) vulnerability and mitigation detection
dfed6f3 doc: add note about more unsupported CVEs
1652977 add a generated version of src/libs/003_intel_models.sh
a089ae8 fix: sys_interface_check() must set the caller's $msg var (closes#533)
cc6bbaa chore: don't include src/ generated files in build
2717b0a doc: CVE-2020-12965 unsupported (#478)
Some old ARM processors (e.g., ARM926EJ-S) report CPU architecture
with suffix in /proc/cpuinfo (e.g., "5TEJ" for ARMv5TEJ).
This caused an "integer expression expected" error when comparing
against numeric values. Extract the numeric prefix before integer comparisons.
Fixes#505.
On ARM64 systems, /proc/cpuinfo uses different field names (CPU implementer,
CPU variant, CPU part, CPU revision) instead of x86-style fields (cpu family,
model, stepping). This left these variables empty, causing printf to fail
with 'invalid number' errors when formatting them as hex values.
Fixes#520.
The info page of GNU head says:
> For compatibility 'head' also supports an obsolete option syntax
> '-[NUM][bkm][cqv]', [...] Scripts intended for standard hosts should use
> '-c NUM' or '-n NUM' instead.
At least busybox's head does not support the `-NUM` syntax.
This contradicts our usual "if we don't know, consider vulnerable" motto,
but as this vuln is extremely specific (which is not the case for the Spectre
range of vulnerabilities, for example), this is the correct approach here.
Stéphane Lesimple
github-actions[bot]
speed47
Gabriel Francisco
Jörg Sommer
Ivan Zahariev
Stephane Lesimple
Sébastien Mériot