Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #192710

Re: Is Debian Linux protected against the Meltdown and Spectre security flaws?

From Michael Fothergill <michael.fothergill@gmail.com>
Newsgroups linux.debian.user
Subject Re: Is Debian Linux protected against the Meltdown and Spectre security flaws?
Date 2018-02-19 20:10 +0100
Message-ID <vkYZ4-72v-11@gated-at.bofh.it> (permalink)
References <vkTwm-3uw-7@gated-at.bofh.it> <vkUsq-433-7@gated-at.bofh.it> <vkWXg-5wG-7@gated-at.bofh.it> <vkYmm-6zz-5@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On 19 February 2018 at 18:24, Michael Lange <klappnase@freenet.de> wrote:

> Hi,
>
> On Mon, 19 Feb 2018 16:40:19 +0000
> Michael Fothergill <michael.fothergill@gmail.com> wrote:
>
> > On 19 February 2018 at 14:10, Greg Wooledge <wooledg@eeg.ccf.org> wrote:
> >
> > > On Mon, Feb 19, 2018 at 09:13:42PM +0800, Turritopsis Dohrnii Teo En
> > > Ming wrote:
> > > > What are the patches that I can download and install to be protected
> > > > against the Meltdown and Spectre security vulnerabilities?
> > >
> > > Meltdown patch went out a month ago.
> > >
> > > Spectre, see here:
> > > https://security-tracker.debian.org/tracker/CVE-2017-5753
> >
> >
> > ​Please excuse my extreme ignorance here, but there is something
> > puzzling me a bit in the spectre web page......
> >
> > For the sid entry, the table says the following:
> >
> > Source PackageReleaseVersionStatus
> > sid                                             4.15.4-1    vulnerable
> >
> > I had thought up to now that e.g. kernel 4.15.4-1 was new enough that if
> > you compiled it with gcc 7.3 then the spectre fix would then work.
> >
> > Does the status indicator here refer to the spectre problem?
> >
> > If it does why does it say vulnerable?
>
> There seems to be some confusion in this thread.
> The page linked above refers to CVE-2017-5753 a.k.a. "Spectre-1".
>

Are you saying that this link:
​
https://security-tracker.debian.org/tracker/CVE-2017-5753

​which looks like it should be going to a spectre 1 fix is actually a
discussion and tables etc
of the spectre 2 fixes that are in the pipeline ie it is incorrectly
labelled?

Cheers

MF​



> You mean CVE-2017-5715 a.k.a. "Spectre-2".
>
> Regards
>
> Michael
>
> .-.. .. ...- .   .-.. --- -. --.   .- -. -..   .--. .-. --- ... .--. . .-.
>
> It would be illogical to assume that all conditions remain stable.
>                 -- Spock, "The Enterprise Incident", stardate 5027.3
>
>

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Is Debian Linux protected against the Meltdown and Spectre security flaws? Turritopsis Dohrnii Teo En Ming <tdteoenming@gmail.com> - 2018-02-19 14:20 +0100
  Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-19 14:40 +0100
    Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Roberto C. Sánchez <roberto@debian.org> - 2018-02-19 15:30 +0100
    Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Andy Smith <andy@strugglers.net> - 2018-02-20 06:00 +0100
      Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Greg Wooledge <wooledg@eeg.ccf.org> - 2018-02-20 14:50 +0100
  Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Greg Wooledge <wooledg@eeg.ccf.org> - 2018-02-19 15:20 +0100
    Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-19 18:00 +0100
      Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Reco <recoverym4n@gmail.com> - 2018-02-19 18:10 +0100
        Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-19 18:50 +0100
          Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Reco <recoverym4n@gmail.com> - 2018-02-19 19:10 +0100
            Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Lange <klappnase@freenet.de> - 2018-02-19 19:40 +0100
      Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Lange <klappnase@freenet.de> - 2018-02-19 19:30 +0100
        Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-19 20:10 +0100
          Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Lange <klappnase@freenet.de> - 2018-02-19 20:20 +0100
            Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-19 22:30 +0100
              Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Andy Smith <andy@strugglers.net> - 2018-02-20 06:10 +0100
                Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-20 09:30 +0100
                Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Lange <klappnase@freenet.de> - 2018-02-20 11:10 +0100
                Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-20 16:00 +0100
                Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Stephan Seitz <stse+debian@fsing.rootsland.net> - 2018-02-20 10:20 +0100
                Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Andy Smith <andy@strugglers.net> - 2018-02-20 16:20 +0100
  Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Brad Rogers <brad@fineby.me.uk> - 2018-02-19 15:20 +0100
    Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Lange <klappnase@freenet.de> - 2018-02-19 19:40 +0100
      Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Brad Rogers <brad@fineby.me.uk> - 2018-02-19 20:20 +0100
      Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Gene Heskett <gheskett@shentel.net> - 2018-02-19 21:30 +0100
        Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Greg Wooledge <wooledg@eeg.ccf.org> - 2018-02-19 21:50 +0100
          Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Lange <klappnase@freenet.de> - 2018-02-20 00:20 +0100
          Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Gene Heskett <gheskett@shentel.net> - 2018-02-20 00:30 +0100
    Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Vincent Lefevre <vincent@vinc17.net> - 2018-02-27 17:10 +0100

csiph-web