Update ARM Trusted Firmware to 1.5 which includes changes for: https://github.com/ARM-software/arm-trusted-firmware/wiki/ARM-Trusted-Firmware-Security-Advisory-TFV-5 Not initializing or saving/restoring PMCR_EL0 can leak secure world timing information
https://github.com/ARM-software/arm-trusted-firmware/wiki/Arm-Trusted-Firmware-Security-Advisory-TFV-6 Arm Trusted Firmware exposure to speculative processor vulnerabilities using cache timing side-channels Compiles, have no RK3399 to test on. Index: Makefile =================================================================== RCS file: /cvs/ports/sysutils/arm-trusted-firmware/Makefile,v retrieving revision 1.4 diff -u -p -r1.4 Makefile --- Makefile 22 Aug 2017 15:42:19 -0000 1.4 +++ Makefile 21 Mar 2018 03:51:02 -0000 @@ -6,8 +6,7 @@ COMMENT= ARM Trusted Firmware GH_ACCOUNT= ARM-software GH_PROJECT= arm-trusted-firmware -GH_TAGNAME= v1.4 -REVISION= 0 +GH_TAGNAME= v1.5 CATEGORIES= sysutils Index: distinfo =================================================================== RCS file: /cvs/ports/sysutils/arm-trusted-firmware/distinfo,v retrieving revision 1.1.1.1 diff -u -p -r1.1.1.1 distinfo --- distinfo 20 Aug 2017 21:32:07 -0000 1.1.1.1 +++ distinfo 21 Mar 2018 03:52:22 -0000 @@ -1,2 +1,2 @@ -SHA256 (arm-trusted-firmware-1.4.tar.gz) = ba4CrNhSeDlL+tbiaD4YblMypxHkSRrEYyrWSA9uVJQ= -SIZE (arm-trusted-firmware-1.4.tar.gz) = 2261166 +SHA256 (arm-trusted-firmware-1.5.tar.gz) = dNxsnrWfK6zIp2vWAtMH0QVpn5DSyQKIL7riib9EQ2E= +SIZE (arm-trusted-firmware-1.5.tar.gz) = 2684635