Re: Question on CVE-2017-5754 on Debian 8.9

[Michael Fothergill <michael.fothergill@gmail.com>]

On 24 January 2018 at 12:58, Sven Hartge <sven@svenhartge.de> wrote:

Michael Fothergill <michael.fothergill@gmail.com> wrote:

> The link within the above one:
> https://gcc.gnu.org/ml/gcc/2018-01/msg00148.html
> also has a link to the ftp download for the release candidate version of
> gcc 7.3 ie 7.3.0rc1 which does actually work for spectre and retpoline.

Debian Sid got gcc-7.3.0rc2 last night, the package is still named gcc-7
(7.2.0-20) though.

​Does that mean that if you upgrade to sid and installed gcc 7.2.0 you would actually get 7.3.0rc2 in practice?

If so then you would then go ahead and manually compile kernel 4.14.14 and you would be straight.

Cheers

MF​

 

S°

--
Sigmentation fault. Core dumped.