{"schema_version":"1.7.3","id":"SUSE-SU-2024:0884-1","published":"2024-03-14T12:26:57Z","modified":"2026-02-04T04:02:17.256030Z","related":["CVE-2023-20593"],"upstream":["CVE-2023-20593"],"summary":"Security update for spectre-meltdown-checker","details":"This update for spectre-meltdown-checker fixes the following issues:\n\n- updated to 0.46\n  This release mainly focuses on the detection of the new Zenbleed\n  (CVE-2023-20593) vulnerability, among few other changes that were in\n  line waiting for a release:\n  - feat: detect the vulnerability and mitigation of Zenbleed (CVE-2023-20593)\n  - feat: add the linux-firmware repository as another source for CPU microcode versions\n  - feat: arm: add Neoverse-N2, Neoverse-V1 and Neoverse-V2\n  - fix: docker: adding missing utils (#433)\n  - feat: add support for Guix System kernel\n  - fix: rewrite SQL to be sqlite3 >= 3.41 compatible (#443)\n  - fix: a /devnull file was mistakenly created on the filesystem\n  - fix: fwdb: ignore MCEdb versions where an official Intel version exists (fixes #430)\n\n- updated to 0.45\n  - arm64: phytium: Add CPU Implementer Phytium\n  - arm64: variant 4: detect ssbd mitigation from kernel img, system.map or kconfig\n  - chore: ensure vars are set before being dereferenced (set -u compat)\n  - chore: fix indentation\n  - chore: fwdb: update to v220+i20220208\n  - chore: only attempt to load msr and cpuid module once\n  - chore: read_cpuid: use named constants\n  - chore: readme: framapic is gone, host the screenshots on GitHub\n  - chore: replace 'Vulnerable to' by 'Affected by' in the hw section\n  - chore: speculative execution -> transient execution\n  - chore: update fwdb to v222+i20220208\n  - chore: update Intel Family 6 models\n  - chore: wording: model not vulnerable -> model not affected\n  - doc: add an FAQ entry about CVE support\n  - doc: add an FAQ.md and update the README.md accordingly\n  - doc: more FAQ and README\n  - doc: readme: make the FAQ entry more visible\n  - feat: add --allow-msr-write, no longer write by default (#385), detect when writing is denied\n  - feat: add --cpu, apply changes to (read|write)_msr, update fwdb to v221+i20220208\n  - feat: add subleaf != 0 support for read_cpuid\n  - feat: arm: add Cortex A77 and Neoverse-N1 (fixes #371)\n  - feat: bsd: for unimplemented CVEs, at least report when CPU is not affected\n  - feat: hw check: add IPRED, RRSBA, BHI features check\n  - feat: implement detection for MCEPSC under BSD\n  - feat: set default TMPDIR for Android (#415)\n  - fix: extract_kernel: don't overwrite kernel_err if already set\n  - fix: has_vmm false positive with pcp\n  - fix: is_ucode_blacklisted: fix some model names\n  - fix: mcedb: v191 changed the MCE table format\n  - fix: refuse to run under MacOS and ESXi\n  - fix: retpoline: detection on 5.15.28+ (#420)\n  - fix: variant4: added case where prctl ssbd status is tagged as 'unknown'\n","affected":[{"package":{"name":"spectre-meltdown-checker","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","purl":"pkg:rpm/suse/spectre-meltdown-checker&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.46-150100.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"spectre-meltdown-checker":"0.46-150100.3.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0884-1.json"}},{"package":{"name":"spectre-meltdown-checker","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","purl":"pkg:rpm/suse/spectre-meltdown-checker&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.46-150100.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"spectre-meltdown-checker":"0.46-150100.3.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0884-1.json"}},{"package":{"name":"spectre-meltdown-checker","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","purl":"pkg:rpm/suse/spectre-meltdown-checker&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.46-150100.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"spectre-meltdown-checker":"0.46-150100.3.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0884-1.json"}},{"package":{"name":"spectre-meltdown-checker","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","purl":"pkg:rpm/suse/spectre-meltdown-checker&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.46-150100.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"spectre-meltdown-checker":"0.46-150100.3.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0884-1.json"}},{"package":{"name":"spectre-meltdown-checker","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","purl":"pkg:rpm/suse/spectre-meltdown-checker&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.46-150100.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"spectre-meltdown-checker":"0.46-150100.3.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0884-1.json"}},{"package":{"name":"spectre-meltdown-checker","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","purl":"pkg:rpm/suse/spectre-meltdown-checker&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.46-150100.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"spectre-meltdown-checker":"0.46-150100.3.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0884-1.json"}},{"package":{"name":"spectre-meltdown-checker","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","purl":"pkg:rpm/suse/spectre-meltdown-checker&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.46-150100.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"spectre-meltdown-checker":"0.46-150100.3.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0884-1.json"}},{"package":{"name":"spectre-meltdown-checker","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","purl":"pkg:rpm/suse/spectre-meltdown-checker&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.46-150100.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"spectre-meltdown-checker":"0.46-150100.3.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0884-1.json"}},{"package":{"name":"spectre-meltdown-checker","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","purl":"pkg:rpm/suse/spectre-meltdown-checker&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.46-150100.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"spectre-meltdown-checker":"0.46-150100.3.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0884-1.json"}},{"package":{"name":"spectre-meltdown-checker","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","purl":"pkg:rpm/suse/spectre-meltdown-checker&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.46-150100.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"spectre-meltdown-checker":"0.46-150100.3.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0884-1.json"}},{"package":{"name":"spectre-meltdown-checker","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","purl":"pkg:rpm/suse/spectre-meltdown-checker&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.46-150100.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"spectre-meltdown-checker":"0.46-150100.3.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0884-1.json"}},{"package":{"name":"spectre-meltdown-checker","ecosystem":"SUSE:Manager Proxy 4.3","purl":"pkg:rpm/suse/spectre-meltdown-checker&distro=SUSE%20Manager%20Proxy%204.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.46-150100.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"spectre-meltdown-checker":"0.46-150100.3.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0884-1.json"}},{"package":{"name":"spectre-meltdown-checker","ecosystem":"SUSE:Manager Server 4.3","purl":"pkg:rpm/suse/spectre-meltdown-checker&distro=SUSE%20Manager%20Server%204.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.46-150100.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"spectre-meltdown-checker":"0.46-150100.3.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0884-1.json"}},{"package":{"name":"spectre-meltdown-checker","ecosystem":"SUSE:Enterprise Storage 7.1","purl":"pkg:rpm/suse/spectre-meltdown-checker&distro=SUSE%20Enterprise%20Storage%207.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.46-150100.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"spectre-meltdown-checker":"0.46-150100.3.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0884-1.json"}},{"package":{"name":"spectre-meltdown-checker","ecosystem":"openSUSE:Leap 15.5","purl":"pkg:rpm/opensuse/spectre-meltdown-checker&distro=openSUSE%20Leap%2015.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.46-150100.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"spectre-meltdown-checker":"0.46-150100.3.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0884-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240884-1/"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-20593"}]}