Форум Slackware Linux

Только spectre пока нигде не исправлен, если правильно путаю, все реляции на этот счет еще преждевременны.

В копилку полезностей по теме:
https://github.com/speed47/spectre-meltdown-checker

All Intel processors manufactured since circa 1995 are thought to be vulnerable.

slackware 14.2 changes for Mon, 15 Jan 2018 23:13:01 GMT
...
patches/packages/linux-4.4.111/*: Upgraded.
This kernel includes mitigations for the Spectre (variant 2) and Meltdown
speculative side channel attacks.

оно?

оно?
https://mirror.slackbuilds.org/rss/slackware64-14.2.rss wrote:
slackware 14.2 changes for Mon, 15 Jan 2018 23:13:01 GMT
...
patches/packages/linux-4.4.111/*: Upgraded.
This kernel includes mitigations for the Spectre (variant 2) and Meltdown
speculative side channel attacks.

осталось найти грамотное пошаговое HOWTO про то как обновить microcode, может быть кто-то запостит тут

-- Microcode update instructions --
This package contains Intel microcode files in two formats:
* microcode.dat
* intel-ucode directory

microcode.dat is in a traditional text format. It is still used in some
Linux distributions. It can be updated to the system through the old microcode
update interface which is avaialble in the kernel with
CONFIG_MICROCODE_OLD_INTERFACE=y.

To update the microcode.dat to the system, one need:
1. Ensure the existence of /dev/cpu/microcode
2. Write microcode.dat to the file, e.g.
dd if=microcode.dat of=/dev/cpu/microcode bs=1M

intel-ucode dirctory contains binary microcode files named in
family-model-stepping pattern. The file is supported in most modern Linux
distributions. It's generally located in the /lib/firmware directory,
and can be updated throught the microcode reload interface.

To update the intel-ucode package to the system, one need:
1. Ensure the existence of /sys/devices/system/cpu/microcode/reload
2. Copy intel-ucode directory to /lib/firmware, overwrite the files in
/lib/firmware/intel-ucode/
3. Write the reload interface to 1 to reload the microcode files, e.g.
echo 1 > /sys/devices/system/cpu/microcode/reload

intel-ucode dirctory

они что, даже в инструкции опечатались? /facepalm

вот и я опчём. Не торопитесь! Работает? Не трогай и умников страстно желающих что-то "улучшить" лучше сразу отстреливай.

https://github.com/speed47/spectre-meltdown-checker

Wed Feb 7 04:28:48 UTC 2018
patches/packages/gcc-5.5.0-i586-1_slack14.2.txz: Upgraded.
Upgraded to the latest gcc-5 release, with patches to support
-mindirect-branch=thunk-extern, allowing full mitigation of Spectre v2
in the kernel (when CONFIG_RETPOLINE is used).
patches/packages/gcc-g++-5.5.0-i586-1_slack14.2.txz: Upgraded.
patches/packages/gcc-gfortran-5.5.0-i586-1_slack14.2.txz: Upgraded.
patches/packages/gcc-gnat-5.5.0-i586-1_slack14.2.txz: Upgraded.
patches/packages/gcc-go-5.5.0-i586-1_slack14.2.txz: Upgraded.
patches/packages/gcc-java-5.5.0-i586-1_slack14.2.txz: Upgraded.
patches/packages/gcc-objc-5.5.0-i586-1_slack14.2.txz: Upgraded.
patches/packages/linux-4.4.115/*: Upgraded.
This kernel includes full retpoline mitigation for the Spectre (variant 2)
speculative side channel attack.
Please note that this kernel was compiled with gcc-5.5.0, also provided as
an update for Slackware 14.2. You'll need to install the updated gcc in order
to compile kernel modules that will load into this updated kernel.
Be sure to upgrade your initrd after upgrading the kernel packages.
If you use lilo to boot your machine, be sure lilo.conf points to the correct
kernel and initrd and run lilo as root to update the bootloader.
If you use elilo to boot your machine, you should run eliloconfig to copy the
kernel and initrd to the EFI System Partition.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.c ... -2017-5715
(* Security fix *)

По теме (лучше поздно, чем еще позднее ;) ):
https://slackblogs.blogspot.ru/2018/02/ ... n-142.html