---

NetBSD 8.0 Released with Spectre V2/V4, Meltdown, and Lazy FPU Mitigations

Coming seven months after the first and last point release of the NetBSD 7 series, NetBSD 8.0 is here with mitigations for both the Spectre Variant 2 (CVE-2017-5715) and Spectre Variant 4 (CVE-2018-3639) security vulnerabilities, as well as for the Meltdown (CVE-2017-5754) and Lazy FPU State Save/Restore (CVE-2018-3665) vulnerabilities. All mitigations are now enabled by default, and the Spectre Variant 4 mitigations are available for both Intel and AMD processors. Also, the Spectre Variant 2 mitigations are based on Retpoline technique used in the GCC (GNU Compiler Collection) system compiler along with various hardware mitigations available for Intel or AMD CPUs via microcode updates.