Re: [SECURITY] [DSA 4078-1] linux security update
On Fri, 12 Jan 2018, Moritz Mühlenhoff wrote:
> Frank Nord <frank.nord@mailbox.org> schrieb:
> > Peaking at ubuntu:
> > https://usn.ubuntu.com/usn/usn-3522-3/
> > "USN-3522-1 fixed a vulnerability in the Linux kernel to address
> > Meltdown (CVE-2017-5754). Unfortunately, that update introduced
> > a regression where a few systems failed to boot successfully. This
> > update fixes the problem."
> >
> > Do you know, if the regression mentioned in
> > USN-3522-3 exists in stretch's deb9u2 as of today?
>
> No, the Ubuntu 4.4 regression was an Ubuntu-specific broken hunk
> in the backported patch sets, it's unrelated to what you're seeing
> in stretch.
For the record, an issue with EFI was found on 4.4 upstream, as well as
another issue with EFI on both 4.4 and 4.9 upstream. I believe the
fixes will show up in the next -stable. They are related to the changes
done due to the meltdown mitigation, and they don't trigger on every
system.
--
Henrique Holschuh
Reply to: