Chipsec

Latest version: v1.13.7

Safety actively analyzes 682244 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 13 of 14

1.3.5

New or Updated Modules:
* None

New or Updated Functionality:
* None

Fixes:
* Fixed decompress exception in Linux
* Fixed exception when running chipsec_main from UEFI Shell
* Fixed compiler error on Fedora26

1.3.4

New or Updated Modules:
* none

New or Updated Functionality:
* Updated support for 7th/8th generation Intel processors
* Added ability to undefine a configuration entry
* Added HAL and utilcmd for TPM Event Log
* Added utilcmd for TPM commands
* Added support for Apollo Lake
* added utilcmd to inspect PCI command/control registers

Fixes:
* re-enable test_reg_get_control test
* fix PCI read access for RWE driver
* fix issue in decompression
* general cleanup

1.3.3

New or Updated Modules:
* Added common.spi_access to verify the host processor access rights for different SPI regions

New or Updated Functionality:
* Added ability to search a memory region of a string
* Updated support for the RWE driver

Fixes:
* Added error handling if a register type is not supported

1.3.2

New or Updated Modules:
* Updated X64 Python for UEFI Shell

New or Updated Functionality:
* Updated FREG definitions
* Added mmap support to kernel module and chipsec device

Fixes:
* Fixed memory reads with kernel 4.8+
* Fixed version display in chipsec_util
* Fixed UEFI Shell X64 calling convention for SW SMI generation
* Fixed range check in bios_wp
* Fixed P2SB register accesses
* Fixed IOCTL_WRMMIO for x86_64 in Linux driver

1.3.1

New or Updated Modules:
* Added source code for the manual under `/docs`

New or Updated Functionality:
* Added PFS support
* Added MMIO MSGBUS support
* Added compression source to setup script
* Added named register access to `chipsec_util`
* Updated README
* Updated version display
* Updated travis-ci to use trusty
* Updated public processor support
* Updated loading of configuration files to enforce a consistent order

Fixes:
* Fixed SMI register passing
* Fixed read_register to include thread information
* Fixed ASCII symbols in UEFI decode command
* Fixed Linux driver build issues on some 32bit systems
* Fixed RC register definition for 100/200 series PCH
* Fixed BUC register definition for 100/200 series PCH
* Fixed issues decompression for UEFI firmware images
* Fixed detection of failed SMBUS transactions
* Fixed exception in `chipsec_util decode types`
* Fixed exception in `chipsec_util smi`
* Fixed support for processor numbers larger than 255 under Windows
* Removed `__version__` entries

Notes:
* Due to changes in this version of CHIPSEC the Windows driver must be rebuilt for the tool to function correctly.

1.3.0

Not secure
This version includes the following new or updated modules:
- `tools.uefi.whitelist` - The module can generate a list of EFI executables from (U)EFI firmware file or extracted from flash ROM, and then later check firmware image in flash ROM or file against this list of [expected/whitelisted] executables
- `tools.uefi.blacklist` - Improved search of blacklisted EFI binaries, added exclusion rules, enhanced `blacklist.json` config file
- `tools.smm.rogue_mmio_bar` - Experimental module that may help checking SMM firmware for MMIO BAR hijacking vulnerabilities described in "BARing the System: New vulnerabilities in Coreboot & UEFI based systems" (http://www.intelsecurity.com/advanced-threat-research/content/data/REConBrussels2017_BARing_the_system.pdf) by Intel Advanced Threat Research team at RECon Brussels 2017
- `tools.uefi.uefivar_fuzz` - The module is fuzzing UEFI Variable interface. The module is using UEFI SetVariable interface to write new UEFI variables to SPI flash NVRAM with randomized name/attributes/GUID/data/size.

This version includes the following new or updated functionality:
- Debian packaging support
- Compiling in setup.py and automated loading of chipsec.kext kernel module on macOS
- Internal Graphics Device support including software DMA via Graphics Aperture
- Improved parsing andsearch within UEFI images including update capsules
- Export of extracted EFI firmware tree in JSON format
- Export of CHIPSEC results in JSON format via --json command-line argument
- EFI (de-)compression ported from uefi-firmware-parser project
- Decompression to macOS helper to parse Mac EFI firmware images
- Support of command-line arguments in chipsec_util.py
- SMI count command
- Improved platform dependent Flash descriptor parsing
- ReadWriteEverything helper to work with RWE driver
- map_io_space to improve SPI read performance on Linux
- Native (OS based) access PCI, port I/O and CPU MSR to Linux helper
- Improved chipsec_util.py unit testing

This version includes the following fixes:
- better support of macOS (still functionality missing)
- bug fixes when running in UEFI shell environment
- fixed `tools.vmm.pci_fuzz` and `tools.vmm.pcie_overlap_fuzz` modues
- updated all HAL components to inherit HALBase

Page 13 of 14

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.