Commit Graph

4 Commits

Author SHA1 Message Date
Justin Santa Barbara 17774c5c9b Fixes per code review
Treat "spectre/meltdown" as one vuln, and stay away from parsing which
CVE is which.

The advisory is that the kernel must be updated, which CVEs are fixed
(or not) are not really the issue.
2018-01-07 23:57:00 -05:00
Justin Santa Barbara 77bf212a3c Suggest tweaks to meltdown advisory 2018-01-07 23:07:55 -05:00
chrislovecnm 4ab033e1e3 README tweaks from PR reviews 2018-01-07 20:47:38 -07:00
chrislovecnm 9b77d88c1a Adding cve updates for spectre and meltdown
This advisory covers the following 3 CVEs, Variant 1 and 3 are currently
resolved.

Variant 1: bounds check bypass (CVE-2017-5753)
Variant 2: branch target injection (CVE-2017-5715)
Variant 3: rogue data cache load (CVE-2017-5754)
2018-01-07 18:18:44 -07:00