Foreshadow vulnerability

Post Reply
Message
Author
User avatar
ChrisUK
Qualified MX Guide
Posts: 299
Joined: Tue Dec 12, 2017 1:04 pm

Foreshadow vulnerability

#1 Post by ChrisUK »

This has been known about for a while, but I thought I'd wait for the mitigation before posting (people panic, and the best we can get is "mitigation"... can't be fixed ;) )

Just received 4.9.110-3+deb9u3 kernel that mitigates Foreshadow. Although the 4.9 series is covered, I've not seen any thing for the later kernel series... doesn't affect me, but I'm sure it will others
Chris

MX 18 MX 19 - Manjaro

User avatar
ChrisUK
Qualified MX Guide
Posts: 299
Joined: Tue Dec 12, 2017 1:04 pm

Re: Foreshadow vulnerability

#2 Post by ChrisUK »

I must say that I'm very surprised that there's no interest in this... perhaps I've misread the relevant info. I'd assumed that the later Kernel series not being patched might be a concern... oh well.
Chris

MX 18 MX 19 - Manjaro

dr-kart
Posts: 135
Joined: Sun Oct 22, 2017 8:12 pm

Re: Foreshadow vulnerability

#3 Post by dr-kart »

ChrisUK wrote: Wed Aug 22, 2018 12:40 am ... there's no interest in this...
I guess I have mentioned that issue here

User avatar
ChrisUK
Qualified MX Guide
Posts: 299
Joined: Tue Dec 12, 2017 1:04 pm

Re: Foreshadow vulnerability

#4 Post by ChrisUK »

dr-kart wrote: Wed Aug 22, 2018 1:58 am
ChrisUK wrote: Wed Aug 22, 2018 12:40 am ... there's no interest in this...
I guess I have mentioned that issue here
Ahh, that explains it somewhat. I did a forum search for "foreshadow" before posting... guess I should have done a more detailed search.
Chris

MX 18 MX 19 - Manjaro

User avatar
stsoh
Posts: 183
Joined: Sun Aug 20, 2017 10:11 am

Re: Foreshadow vulnerability

#5 Post by stsoh »

ChrisUK wrote: Wed Aug 22, 2018 12:40 am I must say that I'm very surprised that there's no interest in this...
all been exposed for decades, many hidden unknowns........wait for newly cpu design w/o inbuilt faults. :p
MX-17.1_x64 Horizon, G41M-P33 Combo (MS-7592), Pentium E5400 (2706 MHz), 8Gb RAM (984 MT/s),
Intel 4 Series Integrated Graphics, Realtek PCIe Fast RTL8101/2/6E, PCI Gigabit RTL8169 Ethernets.
Accepted Linux when i found MX-Linux in 2016.

User avatar
Stevo
Developer
Posts: 12774
Joined: Fri Dec 15, 2006 8:07 pm

Re: Foreshadow vulnerability

#6 Post by Stevo »

If you're vunerable and want a kernel with those fixes, the choices are currently Debian 4.9, the latest 4.17 Liquorix or Debian backported kernel in our test repo, or probably the latest antiX 4.9 or 4.17 kernels. Unfortunately, we don't have any patches for the 4.14 and 4.15 kernels yet.

Post Reply

Return to “General”