Linux Today: Linux News On Internet Time.

NetBSD 8.0 Released with Spectre V2/V4, Meltdown, and Lazy FPU Mitigations

Jul 21, 2018, 18:00 (0 Talkback[s])
(Other stories by Marius Nestor)

Coming seven months after the first and last point release of the NetBSD 7 series, NetBSD 8.0 is here with mitigations for both the Spectre Variant 2 (CVE-2017-5715) and Spectre Variant 4 (CVE-2018-3639) security vulnerabilities, as well as for the Meltdown (CVE-2017-5754) and Lazy FPU State Save/Restore (CVE-2018-3665) vulnerabilities. All mitigations are now enabled by default, and the Spectre Variant 4 mitigations are available for both Intel and AMD processors. Also, the Spectre Variant 2 mitigations are based on Retpoline technique used in the GCC (GNU Compiler Collection) system compiler along with various hardware mitigations available for Intel or AMD CPUs via microcode updates.

Complete Story