[Bug 1741282] Re: spectre/meltdown: Updates planned for *-microcode and xen-hpyervisor?

[Jan Kellermann]

Hi, we use Ubuntu as Dom0 and like this solution. But we need some
information if there would be solutions in the near future.

Ubuntu 16.04 use xen-hypervisor 4.6. So PVH, PVH shim or HVM shim can not be used. 
For 4.6 exists a mitigation "Xen PTI" (see http://xenbits.xen.org/xsa/xsa254/README.pti). 
Will xen-hypervisor 4.6 be updated? 

Will xen-hypervisor 4.9 (Ubuntu Bionic) get the patches for PVH, PVH
shim or HVM shim?

PVH seems the best solution. Will this supported by Ubuntu Bionic?

See http://xenbits.xen.org/xsa/advisory-254.html

Best regards

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to intel-microcode in Ubuntu.
https://bugs.launchpad.net/bugs/1741282

Title:
  spectre/meltdown: Updates planned for *-microcode and xen-hpyervisor?

Status in intel-microcode package in Ubuntu:
  Confirmed
Status in xen package in Ubuntu:
  Confirmed

Bug description:
  In cve-tracker for spectre/meltdown (https://people.canonical.com
  /~ubuntu-security/cve/2017/CVE-2017-5753.html
  https://people.canonical.com/~ubuntu-
  security/cve/2017/CVE-2017-5715.html https://people.canonical.com
  /~ubuntu-security/cve/2017/CVE-2017-5754.html) i am missing the xen-
  packages like xen-hypervisor. See
  https://xenbits.xen.org/xsa/advisory-254.html

  Are also updates for *-microcode-packages planned an some
  documentation?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/intel-microcode/+bug/1741282/+subscriptions