From owner-freebsd-amd64@freebsd.org Mon Feb 19 12:50:43 2018 Return-Path: Delivered-To: freebsd-amd64@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 63E50F239D4 for ; Mon, 19 Feb 2018 12:50:43 +0000 (UTC) (envelope-from tdteoenming@gmail.com) Received: from mail-yw0-x22e.google.com (mail-yw0-x22e.google.com [IPv6:2607:f8b0:4002:c05::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 00A6B73991 for ; Mon, 19 Feb 2018 12:50:43 +0000 (UTC) (envelope-from tdteoenming@gmail.com) Received: by mail-yw0-x22e.google.com with SMTP id e65so3695759ywh.9 for ; Mon, 19 Feb 2018 04:50:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to:cc; bh=TmqeXHw6plsLc1Zci7JXe+W8ODjn4fhqWZXECNrgP7c=; b=TSsLm8PCeMz6Gg8lYbp558goSyIbsflmj/9kmunddWp0FVFuR5KxAZDBuFXG3I5FCN 8FlxILXeMYtNez7AsIZ7KGPzTN7+Cfi17nWSN3qe7jXn8npQImKqt3iMlNtPsRfdMGWo wnmML71j6MxV/XXVWlH2GR11seC3m3n1a1mLj3TzZZVQvG8aer+UtzEZZPeBNvqv6Nwq K2qxjAZrWAK+E8tFpSFFU3m5GcP+9XwmfOUBMUlgn5O0TY65w5yuxZ+yqDRh/77XkIsj oARROaC3LurDv+G7lOOsTXcjXWoHgANMGt4HJ78Z4na4xaIblLYD6rN/+A7Ianlihnip JCjQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=TmqeXHw6plsLc1Zci7JXe+W8ODjn4fhqWZXECNrgP7c=; b=om5HM1oSyn1ixyPNTNp8mCv3VjajFcG0/Xq+CofchQ1nIpcqIGfpCASm1/N3U4q4gS ur4X9N/dhUhRp8NwUuko2d+iVTGyel1slRFDYCVqG/8tKG1389QcL3gOAj9BpIec7Po7 uZPRRXdf/xOIFDV33Tt/2+aW7om0whhyXq1BiBesFLBF3yB9GdtJ3EiWucppddOta5ku SPk0j6Ip7RmUxkrFTuEwY87tp/6tbFKD+wtNr2tXYSooWP4SOKTIZVr2EhSTfI4V/Q3n Q1l1yg1g1BVIbFa+hj4Jeqp1K5BPQ4CMMxk6g+id8fOomNed8olqDWDRiRpCAUQa8EVz D0Bg== X-Gm-Message-State: APf1xPB00bYlO/icbhtsOMdFpKnycveXTIUN/qTHKLYfPjZJ3FBTWvKH U2QlJjMBoA83A9IGii8ESJFIw4+RWdw4XCWscScx X-Google-Smtp-Source: AH8x224vmSHB/00ImqofaEaJjSjygEs2kLrU+VyeJA8A55DAjoaKpebcuOgic/OsFqAAB2BNRq2VxptHBNLh9wpHcjg= X-Received: by 10.13.205.3 with SMTP id p3mr9911875ywd.377.1519044642148; Mon, 19 Feb 2018 04:50:42 -0800 (PST) MIME-Version: 1.0 Received: by 10.129.162.72 with HTTP; Mon, 19 Feb 2018 04:50:41 -0800 (PST) From: Turritopsis Dohrnii Teo En Ming Date: Mon, 19 Feb 2018 20:50:41 +0800 Message-ID: Subject: Is FreeBSD UNIX protected against the Meltdown and Spectre security flaws? To: freebsd-amd64@freebsd.org Content-Type: text/plain; charset="UTF-8" X-BeenThere: freebsd-amd64@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: Porting FreeBSD to the AMD64 platform List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Feb 2018 12:50:43 -0000 I am running pfSense firewall community edition at home in Singapore. What are the patches that I can download and install to be protected against the Meltdown and Spectre security vulnerabilities? ===BEGIN SIGNATURE=== Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 30 Oct 2017 [1] https://tdtemcerts.wordpress.com/ [2] http://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming ===END SIGNATURE=== From owner-freebsd-amd64@freebsd.org Tue Feb 20 10:01:34 2018 Return-Path: Delivered-To: freebsd-amd64@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 458B2F17F4D for ; Tue, 20 Feb 2018 10:01:34 +0000 (UTC) (envelope-from freebsd.ed.lists@sumeritec.com) Received: from mx36-out25.antispamcloud.com (mx36-out25.antispamcloud.com [209.126.121.73]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id B3D436E0DC for ; Tue, 20 Feb 2018 10:01:32 +0000 (UTC) (envelope-from freebsd.ed.lists@sumeritec.com) Received: from [153.92.8.106] (helo=srv31.niagahoster.com) by mx5.antispamcloud.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.89) (envelope-from ) id 1enzJv-0004GK-Rw; Tue, 20 Feb 2018 05:14:25 +0100 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sumeritec.com; s=default; h=Content-Transfer-Encoding:Content-Type: MIME-Version:References:In-Reply-To:Message-ID:Subject:Cc:To:From:Date:Sender :Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=iCjKw2Gd7WsdK7ArKV+kF1BySTqHzYIi77G9EudfyLI=; b=PzZg4pYAH0F8eDNUPRGXGO/P0W XxhWKkNhQt4MjQXzspEt5TDiUXjCNFoX2DCy/p42blXj8gNd3z0lnUnYh0tdS2eQcw6zrkOIismgM 1jdMvDk8a1yFNjbXY1vUP4GFT4WHHTEJsnqb+zFfrtCrIKdZoRaNEslVDgO2fQBQwBQ0ManFvUOdr 9yLiA37RRicaH03Mf8F68t4zme5WwOKvflGwvVBVsu9xmlr5weOLJICdefQAmgE9Tid4ceoas4ZgE SS5yZIp94xoBJonp/UVtcSRVMCP/q8L2IJXi6EDizTskHCfPI0358yc1YJvfLbW4x3ZIWT7lEcUGr zd1aWJLw==; Received: from [114.125.71.240] (port=56005 helo=X220.sumeritec.com) by srv31.niagahoster.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.89_1) (envelope-from ) id 1enzJ9-0007tA-Oq; Tue, 20 Feb 2018 11:13:38 +0700 Date: Tue, 20 Feb 2018 12:13:30 +0800 From: Erich Dollansky To: Turritopsis Dohrnii Teo En Ming Cc: freebsd-amd64@freebsd.org Subject: Re: Is FreeBSD UNIX protected against the Meltdown and Spectre security flaws? Message-ID: <20180220121330.209c1350.freebsd.ed.lists@sumeritec.com> In-Reply-To: References: MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-OutGoing-Spam-Status: No, score=-1.0 X-AuthUser: freebsd.ed.lists@sumeritec.com X-Originating-IP: 153.92.8.106 X-AntiSpamCloud-Domain: out.niagahoster.com X-AntiSpamCloud-Username: niaga Authentication-Results: antispamcloud.com; auth=pass (login) smtp.auth=niaga@out.niagahoster.com X-AntiSpamCloud-Outgoing-Class: unsure X-AntiSpamCloud-Outgoing-Evidence: Combined (0.16) X-Recommended-Action: accept X-Filter-ID: EX5BVjFpneJeBchSMxfU5kCGqX4pG3MVzXBQuY9R6W5602E9L7XzfQH6nu9C/Fh9KJzpNe6xgvOx q3u0UDjvO9SqbtmCJrZF4ckee8VqpIILWiOpJCkU6ijwcaJpj63WAEdENkZ2HbHcJS54jBDyYtWZ i5bIIYa9S0h67ZH5SXvTAPBu/W5TEAv4+M5qjm1k4pWx7WxWFZpsjT/483ewgu5JfusABNhIyJPP 5Nt4ch+oZzRwNqxawyh0X57iJI3wq8cZWR20xkhRU+wteAIV/gw2PumJmLlsnGMWqoMXjs4W+aPN 2EfShEEGgr77vGPM5p/0jHI+4jcFgXWf7G0ncztWqrVH3GZyYxeOwcH765j+OVg/7O+tyVElvJ63 vY0Iza6sVdgwkBECjdoM4toPI22pHDwwk7Jb2vlaEyyktkqzFg7Z5LN4nMmqB2NPQrxbGWmxZ9sv yC8jtttFq4it9NezYqxGMqsKjARq8PBC4qhIAlvDy6EQrhjG0kd71UCNmdySlZou9qHIGOZDEEo7 O9CWUDl6hp96RIaeG6P8U6Q3JSnnMFc3TwY6/ScWsBhi9ZmJrf2LzvnfkfJ+W5fXgH4PcKD4um+M mV+xKQjLHMy1T4Jy1vRjxXs9BiwJXNNgAgXSdsJJ7vUbfyPwMcB0/tK1dueVWFX/jVbkJGDb+5HY XhRD6fcQKEcw54qdrdeYGFV4nJjDqSNnJSNd9xPRyWqdATJ7NIi/YyhwKbuhB8Wj+KrQcD1H8dDQ mVFJAuTs0Plza+EFMmTc9Li70SmMWTwEKu9ntussNcaGj1yTfYMe6HRjDaJVXSQgiL8KMk925Mnu kALX5/mr0yZz9SFq4v7QFZeCReDiqGhlxdWfIlX04LOaXSiaTacva6c8PlMFkds+0Y7NwU9aOPum EguiH1YFvf25LVONYbYifH5OzZAkoDjQt66mlya2F1V1wco3WQ93T15hjlFfHO6OYWtZrq7qLige J3Alm+IX3ni5gcc= X-Report-Abuse-To: spam@quarantine1.antispamcloud.com X-BeenThere: freebsd-amd64@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: Porting FreeBSD to the AMD64 platform List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Feb 2018 10:01:34 -0000 Hi, On Mon, 19 Feb 2018 20:50:41 +0800 Turritopsis Dohrnii Teo En Ming wrote: > I am running pfSense firewall community edition at home in Singapore. > What are the patches that I can download and install to be protected > against the Meltdown and Spectre security vulnerabilities? > use either FreeBSD 11 or FreeBSD 12 in their most current versions. Like for all other operating systems too, it is not a protection, it is just a mitigation. Erich