Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 26 May 2019 17:17:55 +0300
From:      freneza <frenezahomo@gmail.com>
To:        freebsd-security@freebsd.org
Subject:   CVE-2017-5753 (Spectre Variant 1, bounds check bypass)
Message-ID:  <95d36182-df26-be72-972e-2f468be4a939@gmail.com>

next in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--rlhuGywz1q8FDK3YsrquYYhaptCUXlIns
Content-Type: multipart/mixed; boundary="FxP931YuQZA6rv4OEGtgn2e2SHfuB1mVL";
 protected-headers="v1"
From: freneza <frenezahomo@gmail.com>
To: freebsd-security@freebsd.org
Message-ID: <95d36182-df26-be72-972e-2f468be4a939@gmail.com>
Subject: CVE-2017-5753 (Spectre Variant 1, bounds check bypass)

--FxP931YuQZA6rv4OEGtgn2e2SHfuB1mVL
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Content-Language: en-US

Greetings freebsd-security,

Are there any plans to mitigate Spectre Variant 1?

I ran `spectre-meltdown-checker.sh` from
https://raw.githubusercontent.com/speed47/spectre-meltdown-checker/master=
/spectre-meltdown-checker.sh
and it says there is not mitigation for BSD yet.

Knowing that all the CPU vulnerabilities were mitigated except this one,
I'm unsure if the script is actually wrong.

In addition, MDS was mitigated very quickly with advisories while I
haven't heard any news about this one.

Thank you



--FxP931YuQZA6rv4OEGtgn2e2SHfuB1mVL--

--rlhuGywz1q8FDK3YsrquYYhaptCUXlIns
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=i3wF
-----END PGP SIGNATURE-----

--rlhuGywz1q8FDK3YsrquYYhaptCUXlIns--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?95d36182-df26-be72-972e-2f468be4a939>