Re: [Test-Announce] Re: Call for testing: updates to address today's CPU/kernel vulnerability

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, 2018-01-03 at 21:49 -0700, Brendan Conoboy wrote:
> This is probably where the "AMD is safe" rumor started, but that is 
> only 1/3, maybe 2/3.  Now that the context is public let's be clear: 
> even AMD processors are vulnerable without the patched kernel Adam has 
> asked for help testing.

AIUI, the kernel update released today only addresses one of the known
vuln variants - CVE-2017-5754 , or "Meltdown". It does not address CVE-
2017-5753 or CVE-2017-5715.

My understanding is that the "AMD is safe" belief basically stems from
the initial public reports of this (early on 2018-01-03 US time)
talking mainly or exclusively about CVE-2017-5754, as if it were the
*only* variant discovered. As the day progressed, Google's blog post
with more accurate information was posted and disseminated, but the
news stories (particularly the grossly simplified ones in the
mainstream media and less technical 'tech' press) mostly missed this.
-- 
Adam Williamson
Fedora QA Community Monkey
IRC: adamw | Twitter: AdamW_Fedora | XMPP: adamw AT happyassassin . net
http://www.happyassassin.net
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux