From 06a1c34423b31378773ad9cf9cdd036b58613afe Mon Sep 17 00:00:00 2001 From: Nils Freydank Date: Wed, 13 Nov 2019 10:06:11 +0100 Subject: [PATCH] pygoscelis: Bump to 5.3.11-x240 (see also CVE-2019-11135) Yay, intel lied again about security: - CVE-2019-11135 - https://software.intel.com/security-software-guidance/insights/deep-dive-intel-transactional-synchronization-extensions-intel-tsx-asynchronous-abort - German newspaper: https://www.golem.de/news/tsx-asynchronous-abort-taa-intel-verheimlichte-gravierende-xeon-sicherheitsluecke-1911-144944.html --- pygoscelis-config | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/pygoscelis-config b/pygoscelis-config index faca23f..7c5f396 100644 --- a/pygoscelis-config +++ b/pygoscelis-config @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 5.3.10 Kernel Configuration +# Linux/x86 5.3.11 Kernel Configuration # # @@ -428,6 +428,9 @@ CONFIG_X86_SMAP=y # CONFIG_X86_INTEL_UMIP is not set # CONFIG_X86_INTEL_MPX is not set # CONFIG_X86_INTEL_MEMORY_PROTECTION_KEYS is not set +CONFIG_X86_INTEL_TSX_MODE_OFF=y +# CONFIG_X86_INTEL_TSX_MODE_ON is not set +# CONFIG_X86_INTEL_TSX_MODE_AUTO is not set CONFIG_EFI=y CONFIG_EFI_STUB=y # CONFIG_EFI_MIXED is not set