Re: Question on CVE-2017-5754 on Debian 8.9
Michael Fothergill <michael.fothergill@gmail.com> wrote:
> On 24 January 2018 at 12:58, Sven Hartge <sven@svenhartge.de> wrote:
>> Michael Fothergill <michael.fothergill@gmail.com> wrote:
>> > The link within the above one:
>>> https://gcc.gnu.org/ml/gcc/2018-01/msg00148.html
>>> also has a link to the ftp download for the release candidate version of
>>> gcc 7.3 ie 7.3.0rc1 which does actually work for spectre and retpoline.
>> Debian Sid got gcc-7.3.0rc2 last night, the package is still named gcc-7
>> (7.2.0-20) though.
> Does that mean that if you upgrade to sid and installed gcc 7.2.0 you
> would actually get 7.3.0rc2 in practice?
Unless I interpret the changelog wrong: yes.
> If so then you would then go ahead and manually compile kernel 4.14.14
> and you would be straight.
Could be, yes.
Grüße,
Sven.
--
Sigmentation fault. Core dumped.
Reply to: