Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #190663

Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws

From The Wanderer <wanderer@fastmail.fm>
Newsgroups linux.debian.user
Subject Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws
Date 2018-01-04 19:20 +0100
Message-ID <v4ihs-Jn-15@gated-at.bofh.it> (permalink)
References <v4hv3-a1-7@gated-at.bofh.it> <v4i7M-Fs-5@gated-at.bofh.it>
Organization This space intentionally left blank.

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

On 2018-01-04 at 13:06, francis picabia wrote:

> On Thu, Jan 4, 2018 at 1:22 PM, Curt <curty@free.fr> wrote:
> 
>> https://arstechnica.com/gadgets/2018/01/meltdown-and-spectre-every-modern-
>> processor-has-unfixable-security-fladdws/U
>>
>>
>> TL;DR
>>
>>  Windows, Linux, and macOS have all received security patches that
>>  significantly alter how the operating systems handle virtual memory in
>>  order to protect against a hitherto undisclosed flaw.
> 
> AKA
> CVE-2017-5754

That's the CVE for just one of the vulnerabilities: Meltdown.

Spectre has two separate CVEs: CVE-2017-5753 and CVE-2017-5715

> Debian does not have this released as a kernel update yet in any release at
> this time.
> 
> https://security-tracker.debian.org/tracker/CVE-2017-5754

https://security-tracker.debian.org/tracker/CVE-2017-5753
https://security-tracker.debian.org/tracker/CVE-2017-5715

Same.

If I recall what I read earlier correctly, kernel 4.15 contains the
Meltdown mitigation, but no system-wide fix for Spectre is expected to
be possible.

-- 
   The Wanderer

The reasonable man adapts himself to the world; the unreasonable one
persists in trying to adapt the world to himself. Therefore all
progress depends on the unreasonable man.         -- George Bernard Shaw

Back to linux.debian.user | Previous | Next — Previous in thread | Find similar | Unroll thread


Thread

“Meltdown” and  “Spectre”: Every modern processor has  unfixable security flaws Curt <curty@free.fr> - 2018-01-04 18:30 +0100
  Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws The Wanderer <wanderer@fastmail.fm> - 2018-01-04 18:40 +0100
  Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws Michael Fothergill <michael.fothergill@gmail.com> - 2018-01-04 18:50 +0100
    Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws The Wanderer <wanderer@fastmail.fm> - 2018-01-04 19:00 +0100
      Re: “Meltdown” and  “Spectre”: Every modern processor has  unfixable security flaws Tixy <tixy@yxit.co.uk> - 2018-01-04 19:20 +0100
        Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws The Wanderer <wanderer@fastmail.fm> - 2018-01-04 19:30 +0100
      Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws Michael Fothergill <michael.fothergill@gmail.com> - 2018-01-04 19:40 +0100
        Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws Nicholas Geovanis <nickgeovanis@gmail.com> - 2018-01-04 20:00 +0100
      Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws Jack Dangler <tdldev@gmail.com> - 2018-01-05 13:50 +0100
        Re: “Meltdown” and “Spectre”: Every modern processor has  unfixable security flaws <tomas@tuxteam.de> - 2018-01-05 14:00 +0100
          Re: "Meltdown" and "Spectre": Every modern processor has unfixable security flaws "Thomas Schmitt" <scdbackup@gmx.net> - 2018-01-05 14:50 +0100
            Re: "Meltdown" and "Spectre": Every modern processor has unfixable  security flaws <tomas@tuxteam.de> - 2018-01-05 15:40 +0100
              Re: "Meltdown" and "Spectre": Every modern processor has unfixable security flaws "Thomas Schmitt" <scdbackup@gmx.net> - 2018-01-05 16:50 +0100
                Re: "Meltdown" and "Spectre": Every modern processor has unfixable  security flaws <tomas@tuxteam.de> - 2018-01-05 17:10 +0100
                [OFFTOPIC] Re: "Meltdown" and "Spectre": Every modern processor has unfixable security flaws Stefan Monnier <monnier@iro.umontreal.ca> - 2018-01-05 19:10 +0100
                Re: [OFFTOPIC] Re: "Meltdown" and "Spectre": Every modern processor  has unfixable security flaws SDA <marathon.durandal@gmail.com> - 2018-01-08 02:40 +0100
                Re: [OFFTOPIC] Re: "Meltdown" and "Spectre": Every modern processor  has unfixable security flaws Curt <curty@free.fr> - 2018-01-08 11:30 +0100
                Re: [OFFTOPIC] Re: "Meltdown" and "Spectre": Every modern processor  has unfixable security flaws Tom Furie <tom@furie.org.uk> - 2018-01-08 13:10 +0100
          Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws Nicholas Geovanis <nickgeovanis@gmail.com> - 2018-01-05 17:40 +0100
            Re: “Meltdown” and “Spectre”: Every modern processor has  unfixable security flaws <tomas@tuxteam.de> - 2018-01-05 17:50 +0100
            [OFFTOPIC] Re: “Meltdown” and  “Spectre”: Every modern processor has unfixable  security flaws Stefan Monnier <monnier@iro.umontreal.ca> - 2018-01-05 19:10 +0100
  Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws francis picabia <fpicabia@gmail.com> - 2018-01-04 19:10 +0100
    Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws bw <bwtnguy@yahoo.com> - 2018-01-04 19:20 +0100
    Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws The Wanderer <wanderer@fastmail.fm> - 2018-01-04 19:20 +0100

csiph-web