From owner-freebsd-questions@freebsd.org Wed Jan 31 20:59:37 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id EB71FEE14C3 for ; Wed, 31 Jan 2018 20:59:36 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from kicp.uchicago.edu (kicp.uchicago.edu [128.135.20.70]) by mx1.freebsd.org (Postfix) with ESMTP id 9951977C81 for ; Wed, 31 Jan 2018 20:59:36 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from point.uchicago.edu (point.uchicago.edu [128.135.52.6]) by kicp.uchicago.edu (Postfix) with ESMTP id 8ABE571804D; Wed, 31 Jan 2018 14:59:29 -0600 (CST) Subject: Re: Response to Meltdown and Spectre To: "Zahrir, Abderrahmane" , "freebsd-questions@FreeBSD.org" References: From: Valeri Galtsev Message-ID: <87f124e9-2310-b751-d027-e4bf34275441@kicp.uchicago.edu> Date: Wed, 31 Jan 2018 14:59:29 -0600 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.5.2 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Jan 2018 20:59:37 -0000 On 01/31/18 14:13, Zahrir, Abderrahmane wrote: > Hi Guys, > > I understand that you have not been notified early enough about the Meltdown and spectre security flow. > However do we have a rough estimate (something like an approximate month) of when a patch will be available for the latest version 11.1 and possibly 11.0? First of all, I'm by no means speaking for FreeBSD developers team, I am just one of the users (sysadmins who runs FreeBSD on several servers). I would not ask FreeBSD folks to speed it up, or anything. They really do great job to deal with somebody's else crap the best system architecture wise way possible. One thing could be mentioned here: Intel released new microcode some time ago, which effectively was bricking some of end user's machines. They withdrew it, and recommended to hold off, and go back to old microcode. [Co-]incidentally, RedHat removed from its updates patching microcode; this they had to do for the same reason, and basically made it the issue between end user and CPU (or machine?) manufacturer. Sorry if I misinterpreted anything (most of which I know from CentOS general mail list). Valeri > > Regards, Dahman ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++