[Bug 1741282] Re: spectre/meltdown: Updates planned for *-microcode and xen-hpyervisor?

[Seth Arnold]

Hello Jan, the Xen hypervisor is community supported; we can't guarantee
that it will be updated for this. The kernel patches to try to mitigate
these issues are huge and very complicated -- if they are any indicator
of the scale of the Xen patches, it may not be feasible to release
updates for these issues.

intel-microcode has been released https://usn.ubuntu.com/usn/usn-3531-1/
but enough people have reported regressions to Intel that we have not
yet pushed this update to all users via additional package dependencies.
People who already had the package installed should have it now, and we
haven't heard many (if any) reports about trouble, but your results may
differ. I have not heard any timelines for delivering updated microcode.

I understand the AMD microcode update is coming shortly after AMD signs
it.

See
https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdown
for more details.

Thanks

** Changed in: intel-microcode (Ubuntu)
       Status: New => Confirmed

** Changed in: xen (Ubuntu)
       Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to intel-microcode in Ubuntu.
https://bugs.launchpad.net/bugs/1741282

Title:
  spectre/meltdown: Updates planned for *-microcode and xen-hpyervisor?

Status in intel-microcode package in Ubuntu:
  Confirmed
Status in xen package in Ubuntu:
  Confirmed

Bug description:
  In cve-tracker for spectre/meltdown (https://people.canonical.com
  /~ubuntu-security/cve/2017/CVE-2017-5753.html
  https://people.canonical.com/~ubuntu-
  security/cve/2017/CVE-2017-5715.html https://people.canonical.com
  /~ubuntu-security/cve/2017/CVE-2017-5754.html) i am missing the xen-
  packages like xen-hypervisor. See
  https://xenbits.xen.org/xsa/advisory-254.html

  Are also updates for *-microcode-packages planned an some
  documentation?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/intel-microcode/+bug/1741282/+subscriptions