Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #5369

Re: [SECURITY] [DSA 4078-1] linux security update

Show all headers | View raw

Hello,


Am 2018-01-11 um 11:58 schrieb Henrique de Moraes Holschuh:
> On Thu, 11 Jan 2018, Frank Nord wrote:
>> I've problems applying this on my mac mini (Intel(R) Core(TM) 2 Duo CPU,
>> P7550  @ 2.6 GHz).

>> 3.20170707.1~deb9u1 from stretch. What's the recommended
>> microcode-version for this kernel?
> 
> The one you have is currently fine.  Intel has not published
> Spectre-related microcode mitigation for the Core 2 duo, at least not
> yet.
> 
> Maybe they will update the Core2 duo, maybe they will not... It is a
> very old model, the microcode might not have enough control there to do
> it without disabling way way too much stuff (and thus incurring an
> absurd performance regression).
> 
> When the microcode doesn't have the Spectre mitigation support for
> whatever reason (or you opt to not use it because it is too slow, etc),
> "retpoline" software mitigation should do the job just fine to protect
> against the currently known variants of spectre.
> 
> However, retpoline support is not ready yet.  It is being worked on the
> kernel upstream, and it requires compiler support, too... which is also
> being worked at gcc and clang upstream.
> 
> We have a couple interesting weeks ahead of us, with lots of -security
> and stable updates to do :p

Thanks for your help - that's interesting.

Getting back to my original question: Shall I file a bug report for
deb9u2 not being able to boot my P7550 (in contrast to deb9u1) or is it
known anyway?

Greetings,
Frank

Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Re: [SECURITY] [DSA 4078-1] linux security update Frank Nord <frank.nord@mailbox.org> - 2018-01-11 01:20 +0100
  Re: [SECURITY] [DSA 4078-1] linux security update Henrique de Moraes Holschuh <hmh@debian.org> - 2018-01-11 12:00 +0100
    Re: [SECURITY] [DSA 4078-1] linux security update Frank Nord <frank.nord@mailbox.org> - 2018-01-11 12:50 +0100
      Re: [SECURITY] [DSA 4078-1] linux security update Frank Nord <frank.nord@mailbox.org> - 2018-01-12 01:10 +0100
        Re: [SECURITY] [DSA 4078-1] linux security update Moritz Mühlenhoff <jmm@inutil.org> - 2018-01-12 11:00 +0100
          Re: [SECURITY] [DSA 4078-1] linux security update Henrique de Moraes Holschuh <hmh@debian.org> - 2018-01-12 13:30 +0100

csiph-web