Arch Linux User Repository

+ pkgver = 0.46+23+g0f2edb1

+ pkgrel = 1

+ provides = spectre-meltdown-checker=0.46+23+g0f2edb1

+ source = git+https://github.com/speed47/spectre-meltdown-checker.git#commit=0f2edb1a71733c1074550166c5e53abcfaa4d6ca

+ sha256sums = 60d4ba956556ce2f6a9d6799663490888fdc50654ad02ca8dca491b94a5ab826

+pkgver=0.46+23+g0f2edb1

+pkgrel=1

+_commit=0f2edb1a71733c1074550166c5e53abcfaa4d6ca

+ '60d4ba956556ce2f6a9d6799663490888fdc50654ad02ca8dca491b94a5ab826')

+index dc272f4..230bab7 100755

+ VERSION='0.46+'

+@@ -299,33 +299,33 @@ explain()

+- CVE-2023-23583) echo "Reptar, redundant prefix issue";;

++ CVE-2023-23583) echo "Reptar, problema de prefixo redundante";;

+@@ -353,7 +353,7 @@ _is_cpu_affected_cached()

+ CVE-2023-23583) return $variant_reptar;;

+@@ -369,17 +369,17 @@ is_cpu_affected()

+@@ -432,17 +432,17 @@ is_cpu_affected()

+@@ -474,23 +474,23 @@ is_cpu_affected()

+@@ -499,7 +499,7 @@ is_cpu_affected()

+@@ -523,14 +523,14 @@ is_cpu_affected()

+@@ -538,7 +538,7 @@ is_cpu_affected()

+@@ -553,14 +553,14 @@ is_cpu_affected()

+@@ -630,7 +630,7 @@ is_cpu_affected()

+@@ -664,7 +664,7 @@ is_cpu_affected()

+@@ -687,66 +687,66 @@ is_cpu_affected()

+@@ -770,22 +770,22 @@ is_cpu_affected()

+@@ -806,7 +806,7 @@ is_cpu_affected()

+@@ -1021,7 +1021,7 @@ is_cpu_ssb_free()

+@@ -1059,13 +1059,13 @@ download_file()

+@@ -1086,25 +1086,25 @@ update_fwdb()

+@@ -1116,23 +1116,23 @@ update_fwdb()

+ sqlite3 "$mcedb_tmp" "UPDATE \"AMD\" SET \"pfmask\"='FF'"

+@@ -1164,21 +1164,21 @@ update_fwdb()

+@@ -1187,13 +1187,13 @@ update_fwdb()

+ _cpuid=$(fms2cpuid "$_family" "$_model" "$_stepping")

+ _cpuid=$(printf "%08X" "$_cpuid")

+ _sqlstm="INSERT INTO \"AMD\" (\"origin\",\"cpuid\",\"pfmask\",\"version\",\"yyyymmdd\") VALUES ('linux-firmware','$_cpuid','FF','$_version','20000101')"

+@@ -1203,19 +1203,19 @@ update_fwdb()

+ # we'll use the more recent fw for Intel and AMD

+ sqlite3 "$mcedb_tmp" "SELECT '# I,0x'||\"t1\".\"cpuid\"||',0x'||\"t1\".\"pfmask\"||',0x'||MAX(\"t1\".\"version\")||','||\"t1\".\"yyyymmdd\" FROM \"Intel\" AS \"t1\" LEFT OUTER JOIN \"Intel\" AS \"t2\" ON \"t2\".\"cpuid\"=\"t1\".\"cpuid\" AND \"t2\".\"pfmask\"=\"t1\".\"pfmask\" AND \"t2\".\"yyyymmdd\" > \"t1\".\"yyyymmdd\" WHERE \"t2\".\"yyyymmdd\" IS NULL GROUP BY \"t1\".\"cpuid\",\"t1\".\"pfmask\" ORDER BY \"t1\".\"cpuid\",\"t1\".\"pfmask\" ASC;" | grep -v '^# .,0x00000000,';

+ sqlite3 "$mcedb_tmp" "SELECT '# A,0x'||\"t1\".\"cpuid\"||',0x'||\"t1\".\"pfmask\"||',0x'||MAX(\"t1\".\"version\")||','||\"t1\".\"yyyymmdd\" FROM \"AMD\" AS \"t1\" LEFT OUTER JOIN \"AMD\" AS \"t2\" ON \"t2\".\"cpuid\"=\"t1\".\"cpuid\" AND \"t2\".\"pfmask\"=\"t1\".\"pfmask\" AND \"t2\".\"yyyymmdd\" > \"t1\".\"yyyymmdd\" WHERE \"t2\".\"yyyymmdd\" IS NULL GROUP BY \"t1\".\"cpuid\",\"t1\".\"pfmask\" ORDER BY \"t1\".\"cpuid\",\"t1\".\"pfmask\" ASC;" | grep -v '^# .,0x00000000,';

+@@ -1234,19 +1234,19 @@ parse_opt_file()

+@@ -1309,7 +1309,7 @@ while [ -n "${1:-}" ]; do

+@@ -1340,8 +1340,8 @@ while [ -n "${1:-}" ]; do

+@@ -1351,7 +1351,7 @@ while [ -n "${1:-}" ]; do

+@@ -1359,29 +1359,29 @@ while [ -n "${1:-}" ]; do

+@@ -1402,7 +1402,7 @@ while [ -n "${1:-}" ]; do

+ reptar) opt_cve_list="$opt_cve_list CVE-2023-23583"; opt_cve_all=0;;

+@@ -1422,7 +1422,7 @@ while [ -n "${1:-}" ]; do

+@@ -1430,12 +1430,12 @@ done

+@@ -1478,11 +1478,11 @@ pvulnstatus()

+@@ -1497,7 +1497,7 @@ pvulnstatus()

+ CVE-2023-23583) aka="REPTAR";;

+@@ -1505,41 +1505,41 @@ pvulnstatus()

+@@ -1576,28 +1576,28 @@ check_kernel()

+@@ -1609,19 +1609,19 @@ try_decompress()

+@@ -1632,18 +1632,18 @@ try_decompress()

+@@ -1657,7 +1657,7 @@ extract_kernel()

+@@ -1679,9 +1679,9 @@ extract_kernel()

+@@ -1704,16 +1704,16 @@ load_msr()

+@@ -1727,16 +1727,16 @@ load_cpuid()

+@@ -1764,7 +1764,7 @@ read_cpuid()

+@@ -1791,18 +1791,18 @@ read_cpuid_one_core()

+@@ -1814,7 +1814,7 @@ read_cpuid_one_core()

+@@ -1834,13 +1834,13 @@ read_cpuid_one_core()

+@@ -1849,13 +1849,13 @@ read_cpuid_one_core()

+@@ -1864,15 +1864,15 @@ read_cpuid_one_core()

+@@ -1930,7 +1930,7 @@ write_msr()

+ else

+ # compare first core with the other ones

+ if [ $_first_core_ret != $ret ]; then

+- write_msr_msg="result is not homogeneous between all cores, at least core 0 and $_core differ!"

++ write_msr_msg="resultado não é homogêneo entre todos os núcleos, pelo menos o núcleo 0 e $_core diferem!"

+ return $WRITE_MSR_RET_ERR

+ fi

+ fi

+@@ -1947,13 +1947,13 @@ write_msr_one_core()

+ _value_dec=$(( $3 ))

+ _value=$(printf "0x%x" "$_value_dec")

+

+- write_msr_msg='unknown error'

++ write_msr_msg='erro desconhecido'

+ : "${msr_locked_down:=0}"

+

+ _mockvarname="SMC_MOCK_WRMSR_${_msr}_RET"

+ # shellcheck disable=SC2086,SC1083

+ if [ -n "$(eval echo \${$_mockvarname:-})" ]; then

+- _debug "write_msr: MOCKING enabled for msr $_msr func returns $(eval echo \$$_mockvarname)"

++ _debug "write_msr: MOCKING ativado para retornos de msr $_msr func $(eval echo \$$_mockvarname)"

+ mocked=1

+ [ "$(eval echo \$$_mockvarname)" = $WRITE_MSR_RET_LOCKDOWN ] && msr_locked_down=1

+ return "$(eval echo \$$_mockvarname)"

+@@ -1964,7 +1964,7 @@ write_msr_one_core()

+ load_msr

+ fi

+ if [ ! -e /dev/cpu/0/msr ] && [ ! -e /dev/cpuctl0 ]; then

+- read_msr_msg="is msr kernel module available?"

++ read_msr_msg="o módulo do kernel msr está disponível?"

+ return $WRITE_MSR_RET_ERR

+ fi

+

+@@ -1975,17 +1975,17 @@ write_msr_one_core()

+ # for Linux

+ # convert to decimal

+ if [ ! -w /dev/cpu/"$_core"/msr ]; then

+- write_msr_msg="No write permission on /dev/cpu/$_core/msr"

++ write_msr_msg="Sem permissão de gravação em /dev/cpu/$_core/msr"

+ return $WRITE_MSR_RET_ERR

+ # if wrmsr is available, use it

+ elif command -v wrmsr >/dev/null 2>&1 && [ "${SMC_NO_WRMSR:-}" != 1 ]; then

+- _debug "write_msr: using wrmsr"

++ _debug "write_msr: usando wrmsr"

+ wrmsr $_msr_dec $_value_dec 2>/dev/null; ret=$?

+ # ret=4: msr doesn't exist, ret=127: msr.allow_writes=off

+ [ "$ret" = 127 ] && _write_denied=1

+ # or fallback to dd if it supports seek_bytes, we prefer it over perl because we can tell the difference between EPERM and EIO

+ elif dd if=/dev/null of=/dev/null bs=8 count=1 seek="$_msr_dec" oflag=seek_bytes 2>/dev/null && [ "${SMC_NO_DD:-}" != 1 ]; then

+- _debug "write_msr: using dd"

++ _debug "write_msr: usando dd"

+ awk "BEGIN{printf \"%c\", $_value_dec}" | dd of=/dev/cpu/"$_core"/msr bs=8 count=1 seek="$_msr_dec" oflag=seek_bytes 2>/dev/null; ret=$?

+ # if it failed, inspect stderrto look for EPERM

+ if [ "$ret" != 0 ]; then

+@@ -1995,13 +1995,13 @@ write_msr_one_core()

+ fi

+ # or if we have perl, use it, any 5.x version will work

+ elif command -v perl >/dev/null 2>&1 && [ "${SMC_NO_PERL:-}" != 1 ]; then

+- _debug "write_msr: using perl"

++ _debug "write_msr: usando perl"

+ ret=1

+ perl -e "open(M,'>','/dev/cpu/$_core/msr') and seek(M,$_msr_dec,0) and exit(syswrite(M,pack(v4,$_value_dec)))"; [ $? -eq 8 ] && ret=0

+ else

+- _debug "write_msr: got no wrmsr, perl or recent enough dd!"

++ _debug "write_msr: não tenho wrmsr, perl ou dd recente o suficiente!"

+ mockme=$(printf "%b\n%b" "$mockme" "SMC_MOCK_WRMSR_${_msr}_RET=$WRITE_MSR_RET_ERR")

+- write_msr_msg="missing tool, install either msr-tools or perl"

++ write_msr_msg="ferramenta ausente, instale msr-tools ou perl"

+ return $WRITE_MSR_RET_ERR

+ fi

+ if [ "$ret" != 0 ]; then

+@@ -2014,22 +2014,22 @@ write_msr_one_core()

+ # yet more recent versions of the msr module can be set to msr.allow_writes=off, in which case no dmesg message is printed,

+ # but the write fails

+ if [ "$_write_denied" = 1 ]; then

+- _debug "write_msr: writing to msr has been denied"

++ _debug "write_msr: escrita para msr foi negado"

+ mockme=$(printf "%b\n%b" "$mockme" "SMC_MOCK_WRMSR_${_msr}_RET=$WRITE_MSR_RET_LOCKDOWN")

+ msr_locked_down=1

+- write_msr_msg="your kernel is configured to deny writes to MSRs from user space"

++ write_msr_msg="seu kernel está configurado para negar gravações em MSRs do espaço do usuário"

+ return $WRITE_MSR_RET_LOCKDOWN

+ elif dmesg | grep -qF "msr: Direct access to MSR"; then

+- _debug "write_msr: locked down kernel detected (Red Hat / Fedora)"

++ _debug "write_msr: kernel bloqueado detectado (Red Hat/Fedora)"

+ mockme=$(printf "%b\n%b" "$mockme" "SMC_MOCK_WRMSR_${_msr}_RET=$WRITE_MSR_RET_LOCKDOWN")

+ msr_locked_down=1

+- write_msr_msg="your kernel is locked down (Fedora/Red Hat), please reboot without secure boot and retry"

++ write_msr_msg="seu kernel está bloqueado (Fedora/Red Hat), reinicie sem inicialização segura e tente novamente"

+ return $WRITE_MSR_RET_LOCKDOWN

+ elif dmesg | grep -qF "raw MSR access is restricted"; then

+- _debug "write_msr: locked down kernel detected (vanilla)"

++ _debug "write_msr: kernel bloqueado detectado (vanilla)"

+ mockme=$(printf "%b\n%b" "$mockme" "SMC_MOCK_WRMSR_${_msr}_RET=$WRITE_MSR_RET_LOCKDOWN")

+ msr_locked_down=1

+- write_msr_msg="your kernel is locked down, please reboot with lockdown=none in the kernel cmdline and retry"

++ write_msr_msg="seu kernel está bloqueado, reinicie com lockdown=none no cmdline do kernel e tente novamente"

+ return $WRITE_MSR_RET_LOCKDOWN

+ fi

+ unset _write_denied

+@@ -2042,7 +2042,7 @@ write_msr_one_core()

+ else

+ ret=$WRITE_MSR_RET_KO

+ fi

+- _debug "write_msr: for cpu $_core on msr $_msr, value=$_value, ret=$ret"

++ _debug "write_msr: para cpu $_core no msr $_msr, value=$_value, ret=$ret"

+ mockme=$(printf "%b\n%b" "$mockme" "SMC_MOCK_WRMSR_${_msr}_RET=$ret")

+ return $ret

+ }

+@@ -2072,7 +2072,7 @@ read_msr()

+ else

+ # compare first core with the other ones

+ if [ $_first_core_ret != $ret ] || [ "$_first_core_value" != "$read_msr_value" ]; then

+- read_msr_msg="result is not homogeneous between all cores, at least core 0 and $_core differ!"

++ read_msr_msg="resultado não é homogêneo entre todos os núcleos, pelo menos o núcleo 0 e $_core diferem!"

+ return $READ_MSR_RET_ERR

+ fi

+ fi

+@@ -2088,13 +2088,13 @@ read_msr_one_core()

+ _msr=$(printf "0x%x" "$_msr_dec")

+

+ read_msr_value=''

+- read_msr_msg='unknown error'

++ read_msr_msg='erro desconhecido'

+

+ _mockvarname="SMC_MOCK_RDMSR_${_msr}"

+ # shellcheck disable=SC2086,SC1083

+ if [ -n "$(eval echo \${$_mockvarname:-})" ]; then

+ read_msr_value="$(eval echo \$$_mockvarname)"

+- _debug "read_msr: MOCKING enabled for msr $_msr, returning $read_msr_value"

++ _debug "read_msr: MOCKING ativado para msr $_msr, retornando $read_msr_value"

+ mocked=1

+ return $READ_MSR_RET_OK

+ fi

+@@ -2102,7 +2102,7 @@ read_msr_one_core()

+ _mockvarname="SMC_MOCK_RDMSR_${_msr}_RET"

+ # shellcheck disable=SC2086,SC1083

+ if [ -n "$(eval echo \${$_mockvarname:-})" ] && [ "$(eval echo \$$_mockvarname)" -ne 0 ]; then

+- _debug "read_msr: MOCKING enabled for msr $_msr func returns $(eval echo \$$_mockvarname)"

++ _debug "read_msr: MOCKING ativado para retornos de msr $_msr func $(eval echo \$$_mockvarname)"

+ mocked=1

+ return "$(eval echo \$$_mockvarname)"

+ fi

+@@ -2112,7 +2112,7 @@ read_msr_one_core()

+ load_msr

+ fi

+ if [ ! -e /dev/cpu/0/msr ] && [ ! -e /dev/cpuctl0 ]; then

+- read_msr_msg="is msr kernel module available?"

++ read_msr_msg="o módulo do kernel msr está disponível?"

+ return $READ_MSR_RET_ERR

+ fi

+

+@@ -2131,24 +2131,24 @@ read_msr_one_core()

+ # for Linux

+ if [ ! -r /dev/cpu/"$_core"/msr ]; then

+ mockme=$(printf "%b\n%b" "$mockme" "SMC_MOCK_RDMSR_${_msr}_RET=$READ_MSR_RET_ERR")

+- read_msr_msg="No read permission for /dev/cpu/$_core/msr"

++ read_msr_msg="Sem permissão de leitura para /dev/cpu/$_core/msr"

+ return $READ_MSR_RET_ERR

+ # if rdmsr is available, use it

+ elif command -v rdmsr >/dev/null 2>&1 && [ "${SMC_NO_RDMSR:-}" != 1 ]; then

+- _debug "read_msr: using rdmsr on $_msr"

++ _debug "read_msr: usando rdmsr em $_msr"

+ read_msr_value=$(rdmsr -r $_msr_dec 2>/dev/null | od -t u8 -A n)

+ # or if we have perl, use it, any 5.x version will work

+ elif command -v perl >/dev/null 2>&1 && [ "${SMC_NO_PERL:-}" != 1 ]; then

+- _debug "read_msr: using perl on $_msr"

++ _debug "read_msr: usando perl em $_msr"

+ read_msr_value=$(perl -e "open(M,'<','/dev/cpu/$_core/msr') and seek(M,$_msr_dec,0) and read(M,\$_,8) and print" | od -t u8 -A n)

+ # fallback to dd if it supports skip_bytes

+ elif dd if=/dev/null of=/dev/null bs=8 count=1 skip="$_msr_dec" iflag=skip_bytes 2>/dev/null; then

+- _debug "read_msr: using dd on $_msr"

++ _debug "read_msr: usando dd em $_msr"

+ read_msr_value=$(dd if=/dev/cpu/"$_core"/msr bs=8 count=1 skip="$_msr_dec" iflag=skip_bytes 2>/dev/null | od -t u8 -A n)

+ else

+- _debug "read_msr: got no rdmsr, perl or recent enough dd!"

++ _debug "read_msr: não tenho rdmsr, perl ou dd recente o suficiente!"

+ mockme=$(printf "%b\n%b" "$mockme" "SMC_MOCK_RDMSR_${_msr}_RET=$READ_MSR_RET_ERR")

+- read_msr_msg='missing tool, install either msr-tools or perl'

++ read_msr_msg='ferramenta ausente, instale msr-tools ou perl'

+ return $READ_MSR_RET_ERR

+ fi

+ if [ -z "$read_msr_value" ]; then

+@@ -2160,7 +2160,7 @@ read_msr_one_core()

+ read_msr_value=$(( read_msr_value ))

+ fi

+ mockme=$(printf "%b\n%b" "$mockme" "SMC_MOCK_RDMSR_${_msr}='$read_msr_value'")

+- _debug "read_msr: MSR=$_msr value is $read_msr_value"

++ _debug "read_msr: MSR=$_msr o valor é $read_msr_value"

+ return $READ_MSR_RET_OK

+ }

+

+@@ -2238,35 +2238,35 @@ parse_cpu_details()

+@@ -2284,7 +2284,7 @@ parse_cpu_details()

+@@ -2310,14 +2310,14 @@ parse_cpu_details()

+- ucode_found=$(printf "family 0x%x model 0x%x stepping 0x%x ucode 0x%x cpuid 0x%x pfid 0x%x" \

++ ucode_found=$(printf "familia 0x%x modelo 0x%x stepping 0x%x ucode 0x%x cpuid 0x%x pfid 0x%x" \

+ "$cpu_family" "$cpu_model" "$cpu_stepping" "$cpu_ucode" "$cpu_cpuid" "$cpu_platformid")

+@@ -2471,7 +2471,7 @@ is_ucode_blacklisted()

+@@ -2487,12 +2487,12 @@ is_ucode_blacklisted()

+ cpuid=$(( $(echo "$tuple" | cut -d, -f1) ))

+ ucode=$(( $(echo "$tuple" | cut -d, -f2) ))

+ if [ "$cpu_cpuid" = "$cpuid" ] && [ "$cpu_ucode" = "$ucode" ]; then

+- _debug "is_ucode_blacklisted: we have a match! ($cpuid/$ucode)"

++ _debug "is_ucode_blacklisted: temos uma partida! ($cpuid/$ucode)"

+ return 0

+ fi

+

+@@ -2525,7 +2525,7 @@ is_skylake_cpu()

+@@ -2619,9 +2619,9 @@ is_xen() {

+@@ -2650,7 +2650,7 @@ is_xen_domU()

+@@ -2670,13 +2670,13 @@ if [ -r "$mcedb_cache" ]; then

+@@ -2696,10 +2696,10 @@ is_latest_known_ucode()

+@@ -2716,15 +2716,15 @@ is_latest_known_ucode()

+ fi

+ ucode=$(( $(echo "$tuple" | cut -d, -f4) ))

+ ucode_date=$(echo "$tuple" | cut -d, -f5 | sed -r 's=(....)(..)(..)=\1/\2/\3=')

+@@ -2736,7 +2736,7 @@ get_cmdline()

+@@ -2749,17 +2749,17 @@ get_cmdline()

+@@ -2767,7 +2767,7 @@ fi

+@@ -2778,10 +2778,10 @@ fi

+@@ -2790,7 +2790,7 @@ if [ "$opt_coreos" = 1 ]; then

+@@ -2798,21 +2798,21 @@ fi

+@@ -2831,14 +2831,14 @@ parse_cpu_details

+@@ -2847,7 +2847,7 @@ if [ "$opt_live" = 1 ]; then

+@@ -2856,7 +2856,7 @@ if [ "$opt_live" = 1 ]; then

+@@ -2934,60 +2934,60 @@ if [ "$opt_live" = 1 ]; then

+@@ -3003,15 +3003,15 @@ else

+@@ -3040,7 +3040,7 @@ sys_interface_check()

+@@ -3051,7 +3051,7 @@ sys_interface_check()

+@@ -3061,25 +3061,25 @@ sys_interface_check()

+@@ -3087,29 +3087,29 @@ sys_interface_check()

+@@ -3117,179 +3117,179 @@ check_cpu()

+@@ -3297,11 +3297,11 @@ check_cpu()

+@@ -3324,35 +3324,35 @@ check_cpu()

+@@ -3363,60 +3363,60 @@ check_cpu()

+@@ -3424,22 +3424,22 @@ check_cpu()

+@@ -3452,7 +3452,7 @@ check_cpu()

+@@ -3465,7 +3465,7 @@ check_cpu()

+@@ -3483,7 +3483,7 @@ check_cpu()

+@@ -3495,89 +3495,89 @@ check_cpu()

+- pstatus yellow YES

++ pstatus yellow SIM

+@@ -3588,32 +3588,32 @@ check_cpu()

+@@ -3627,60 +3627,60 @@ check_cpu()

+@@ -3688,31 +3688,31 @@ check_cpu()

+@@ -3722,7 +3722,7 @@ check_cpu()

+@@ -3737,60 +3737,60 @@ check_cpu()

+- _warn "the mitigations for recent vulnerabilities), or upgrade to a newer one if available."

+@@ -3810,12 +3810,12 @@ check_redhat_canonical_spectre()

+@@ -3825,7 +3825,7 @@ check_redhat_canonical_spectre()

+@@ -3850,7 +3850,7 @@ check_has_vmm()

+@@ -3866,17 +3866,17 @@ check_has_vmm()

+@@ -3888,19 +3888,19 @@ check_has_vmm()

+@@ -3912,7 +3912,7 @@ check_CVE_2017_5753_linux()

+@@ -3942,46 +3942,46 @@ check_CVE_2017_5753_linux()

+@@ -3997,24 +3997,24 @@ check_CVE_2017_5753_linux()

+@@ -4024,32 +4024,32 @@ check_CVE_2017_5753_linux()

+@@ -4060,10 +4060,10 @@ check_CVE_2017_5753_linux()

+@@ -4071,36 +4071,36 @@ check_CVE_2017_5753_linux()

+@@ -4113,9 +4113,9 @@ check_CVE_2017_5753_bsd()

+@@ -4126,19 +4126,19 @@ check_CVE_2017_5753_bsd()

+@@ -4146,7 +4146,7 @@ check_CVE_2017_5715_linux()

+@@ -4170,21 +4170,21 @@ check_CVE_2017_5715_linux()

+@@ -4193,8 +4193,8 @@ check_CVE_2017_5715_linux()

+@@ -4203,27 +4203,27 @@ check_CVE_2017_5715_linux()

+@@ -4236,8 +4236,8 @@ check_CVE_2017_5715_linux()

+@@ -4247,16 +4247,16 @@ check_CVE_2017_5715_linux()

+@@ -4268,35 +4268,35 @@ check_CVE_2017_5715_linux()

+@@ -4306,104 +4306,104 @@ check_CVE_2017_5715_linux()

+@@ -4422,17 +4422,17 @@ check_CVE_2017_5715_linux()

+@@ -4440,28 +4440,28 @@ check_CVE_2017_5715_linux()

+@@ -4472,50 +4472,50 @@ check_CVE_2017_5715_linux()

+@@ -4523,44 +4523,44 @@ check_CVE_2017_5715_linux()

+@@ -4568,66 +4568,66 @@ check_CVE_2017_5715_linux()

+@@ -4637,11 +4637,11 @@ check_CVE_2017_5715_linux()

+@@ -4670,58 +4670,58 @@ check_CVE_2017_5715_linux()

+@@ -4736,7 +4736,7 @@ check_CVE_2017_5715_bsd()

+@@ -4756,11 +4756,11 @@ pti_performance_check()

+@@ -4768,19 +4768,19 @@ pti_performance_check()

+@@ -4788,14 +4788,14 @@ check_CVE_2017_5754_linux()

+@@ -4805,7 +4805,7 @@ check_CVE_2017_5754_linux()

+@@ -4814,29 +4814,29 @@ check_CVE_2017_5754_linux()

+@@ -4845,16 +4845,16 @@ check_CVE_2017_5754_linux()

+ kpti_enabled=$(cat /sys/kernel/debug/x86/pti_enabled 2>/dev/null)

+- _debug "kpti_enabled: file /sys/kernel/debug/x86/pti_enabled exists and says: $kpti_enabled"

++ _debug "kpti_enabled: arquivo /sys/kernel/debug/x86/pti_enabled existe e diz: $kpti_enabled"

+ elif is_xen_dom0; then

+ pti_xen_pv_domU=$(xl dmesg | grep 'XPTI' | grep 'DomU enabled' | head -1)

+

+@@ -4863,34 +4863,34 @@ check_CVE_2017_5754_linux()

+@@ -4903,68 +4903,68 @@ check_CVE_2017_5754_linux()

+@@ -4972,41 +4972,41 @@ check_CVE_2017_5754_linux()

+@@ -5017,29 +5017,29 @@ check_CVE_2017_5754_bsd()

+@@ -5050,19 +5050,19 @@ check_CVE_2018_3640()

+@@ -5070,115 +5070,115 @@ check_CVE_2018_3639_linux()

+@@ -5188,50 +5188,50 @@ check_CVE_2018_3639_linux()

+@@ -5244,9 +5244,9 @@ check_CVE_2018_3639_bsd()

+@@ -5256,20 +5256,20 @@ check_CVE_2018_3615()

+@@ -5277,19 +5277,19 @@ check_CVE_2018_3615()

+@@ -5297,60 +5297,60 @@ check_CVE_2018_3620_linux()

+@@ -5359,32 +5359,32 @@ check_CVE_2018_3620_linux()

+@@ -5393,19 +5393,19 @@ check_CVE_2018_3620_bsd()

+@@ -5416,46 +5416,46 @@ check_CVE_2018_3646_linux()

+@@ -5465,13 +5465,13 @@ check_CVE_2018_3646_linux()

+@@ -5480,131 +5480,131 @@ check_CVE_2018_3646_linux()

+@@ -5653,64 +5653,64 @@ check_CVE_2019_11091()

+@@ -5718,14 +5718,14 @@ check_mds_bsd()

+@@ -5733,25 +5733,25 @@ check_mds_bsd()

+@@ -5759,7 +5759,7 @@ check_mds_bsd()

+@@ -5767,12 +5767,12 @@ check_mds_linux()

+@@ -5780,46 +5780,46 @@ check_mds_linux()

+@@ -5830,30 +5830,30 @@ check_mds_linux()

+@@ -5886,19 +5886,19 @@ check_mds_linux()

+@@ -5906,63 +5906,63 @@ check_CVE_2019_11135_linux()

+@@ -5976,9 +5976,9 @@ check_CVE_2019_11135_bsd()

+@@ -5988,19 +5988,19 @@ check_CVE_2019_11135_bsd()

+@@ -6010,57 +6010,57 @@ check_CVE_2018_12207_linux()

+@@ -6070,31 +6070,31 @@ check_CVE_2018_12207_linux()

+@@ -6105,19 +6105,19 @@ check_CVE_2018_12207_bsd()

+@@ -6125,42 +6125,42 @@ check_CVE_2020_0543_linux()

+@@ -6171,13 +6171,13 @@ check_CVE_2020_0543_linux()

+@@ -6185,22 +6185,22 @@ check_CVE_2020_0543_linux()

+@@ -6214,9 +6214,9 @@ check_CVE_2020_0543_bsd()

+@@ -6226,38 +6226,38 @@ check_CVE_2020_0543_bsd()

+@@ -6266,78 +6266,78 @@ check_CVE_2023_20593_linux()

+@@ -6350,17 +6350,17 @@ check_CVE_2023_20593_linux()

+@@ -6370,75 +6370,75 @@ check_CVE_2022_40982_linux() {

+@@ -6450,17 +6450,17 @@ check_CVE_2022_40982_linux() {

+@@ -6470,143 +6470,143 @@ check_CVE_2023_20569_linux() {

+- pstatus green YES

++ pstatus green SIM

+@@ -6618,12 +6618,12 @@ check_CVE_2023_20569_linux() {

+

+ check_CVE_2023_23583() {

+ cve='CVE-2023-23583'

+- _info "\033[1;34m$cve aka '$(cve2name "$cve")'\033[0m"

++ _info "\033[1;34m$cve também conhecido como '$(cve2name "$cve")'\033[0m"

+ if [ "$os" = Linux ]

+ then

+ check_CVE_2023_23583_linux

+ else

+- _warn "Unsupported OS ($os)."

++ _warn "SO não suportado ($os)."

+ fi

+ }

+

+@@ -6636,15 +6636,15 @@ check_CVE_2023_23583_linux() {

+ # the mitigation is only ucode-based and there's no flag exposed,

+ # so most of the work has already been done by is_cpu_affected()

+ if ! is_cpu_affected "$cve" ; then

+- pvulnstatus "$cve" OK "your CPU vendor reported your CPU model as not affected"

++ pvulnstatus "$cve" OK "seu fornecedor de CPU relatou seu modelo de CPU como não afetado"

+ else

+- _info_nol "* Reptar is mitigated by microcode: "

++ _info_nol "* Reptar é mitigado por microcódigo: "

+ if [ "$cpu_ucode" -lt "$reptar_fixed_ucode_version" ]; then

+- pstatus yellow NO "You have ucode $(printf "0x%x" $cpu_ucode) and version $(printf "0x%x" $reptar_fixed_ucode_version) minimum is required"

+- pvulnstatus $cve VULN "Your microcode is too old to mitigate the vulnerability"

++ pstatus yellow NÃO "Você tem ucode $(printf "0x%x" $cpu_ucode) e a versão $(printf "0x%x" $reptar_fixed_ucode_version) mínima é necessária"

++ pvulnstatus $cve VULN "Seu microcódigo é muito antigo para mitigar a vulnerabilidade"

+ else

+- pstatus green YES "You have ucode $(printf "0x%x" $cpu_ucode) which is recent enough (>= $(printf "0x%x" $reptar_fixed_ucode_version))"

+- pvulnstatus $cve OK "Your microcode mitigates the vulnerability"

++ pstatus green SIM "Você tem ucode $(printf "0x%x" $cpu_ucode) que é recente o suficiente (>= $(printf "0x%x" $reptar_fixed_ucode_version))"

++ pvulnstatus $cve OK "Seu microcódigo atenua a vulnerabilidade"

+ fi

+ fi

+ }

+@@ -6668,16 +6668,16 @@ do

+@@ -6695,31 +6695,31 @@ if [ -n "$mockme" ] && [ "$opt_mock" = 1 ]; then

+@@ -6734,8 +6734,8 @@ if [ "$opt_batch" = 1 ] && [ "$opt_batch_format" = "json" ]; then