Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #192704

Re: Is Debian Linux protected against the Meltdown and Spectre security flaws?

From Michael Lange <klappnase@freenet.de>
Newsgroups linux.debian.user
Subject Re: Is Debian Linux protected against the Meltdown and Spectre security flaws?
Date 2018-02-19 19:30 +0100
Message-ID <vkYmm-6zz-5@gated-at.bofh.it> (permalink)
References <vkTwm-3uw-7@gated-at.bofh.it> <vkUsq-433-7@gated-at.bofh.it> <vkWXg-5wG-7@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

Hi,

On Mon, 19 Feb 2018 16:40:19 +0000
Michael Fothergill <michael.fothergill@gmail.com> wrote:

> On 19 February 2018 at 14:10, Greg Wooledge <wooledg@eeg.ccf.org> wrote:
> 
> > On Mon, Feb 19, 2018 at 09:13:42PM +0800, Turritopsis Dohrnii Teo En
> > Ming wrote:
> > > What are the patches that I can download and install to be protected
> > > against the Meltdown and Spectre security vulnerabilities?
> >
> > Meltdown patch went out a month ago.
> >
> > Spectre, see here:
> > https://security-tracker.debian.org/tracker/CVE-2017-5753
> 
> 
> ​Please excuse my extreme ignorance here, but there is something
> puzzling me a bit in the spectre web page......
> 
> For the sid entry, the table says the following:
> 
> Source PackageReleaseVersionStatus
> sid                                             4.15.4-1    vulnerable
> 
> I had thought up to now that e.g. kernel 4.15.4-1 was new enough that if
> you compiled it with gcc 7.3 then the spectre fix would then work.
> 
> Does the status indicator here refer to the spectre problem?
> 
> If it does why does it say vulnerable?

There seems to be some confusion in this thread.
The page linked above refers to CVE-2017-5753 a.k.a. "Spectre-1".
You mean CVE-2017-5715 a.k.a. "Spectre-2".

Regards

Michael

.-.. .. ...- .   .-.. --- -. --.   .- -. -..   .--. .-. --- ... .--. . .-.

It would be illogical to assume that all conditions remain stable.
		-- Spock, "The Enterprise Incident", stardate 5027.3

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Is Debian Linux protected against the Meltdown and Spectre security flaws? Turritopsis Dohrnii Teo En Ming <tdteoenming@gmail.com> - 2018-02-19 14:20 +0100
  Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-19 14:40 +0100
    Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Roberto C. Sánchez <roberto@debian.org> - 2018-02-19 15:30 +0100
    Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Andy Smith <andy@strugglers.net> - 2018-02-20 06:00 +0100
      Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Greg Wooledge <wooledg@eeg.ccf.org> - 2018-02-20 14:50 +0100
  Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Greg Wooledge <wooledg@eeg.ccf.org> - 2018-02-19 15:20 +0100
    Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-19 18:00 +0100
      Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Reco <recoverym4n@gmail.com> - 2018-02-19 18:10 +0100
        Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-19 18:50 +0100
          Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Reco <recoverym4n@gmail.com> - 2018-02-19 19:10 +0100
            Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Lange <klappnase@freenet.de> - 2018-02-19 19:40 +0100
      Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Lange <klappnase@freenet.de> - 2018-02-19 19:30 +0100
        Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-19 20:10 +0100
          Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Lange <klappnase@freenet.de> - 2018-02-19 20:20 +0100
            Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-19 22:30 +0100
              Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Andy Smith <andy@strugglers.net> - 2018-02-20 06:10 +0100
                Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-20 09:30 +0100
                Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Lange <klappnase@freenet.de> - 2018-02-20 11:10 +0100
                Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-20 16:00 +0100
                Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Stephan Seitz <stse+debian@fsing.rootsland.net> - 2018-02-20 10:20 +0100
                Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Andy Smith <andy@strugglers.net> - 2018-02-20 16:20 +0100
  Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Brad Rogers <brad@fineby.me.uk> - 2018-02-19 15:20 +0100
    Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Lange <klappnase@freenet.de> - 2018-02-19 19:40 +0100
      Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Brad Rogers <brad@fineby.me.uk> - 2018-02-19 20:20 +0100
      Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Gene Heskett <gheskett@shentel.net> - 2018-02-19 21:30 +0100
        Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Greg Wooledge <wooledg@eeg.ccf.org> - 2018-02-19 21:50 +0100
          Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Lange <klappnase@freenet.de> - 2018-02-20 00:20 +0100
          Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Gene Heskett <gheskett@shentel.net> - 2018-02-20 00:30 +0100
    Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Vincent Lefevre <vincent@vinc17.net> - 2018-02-27 17:10 +0100

csiph-web