On Tue, Feb 20, 2018 at 04:52:45AM +0000, Andy Smith wrote: > Versions of gcc that have the retpoline feature backported into them > have already hit stable and oldstable (and maybe others; haven't > checked), Just oldstable, actually. Not stable yet. <https://www.debian.org/security/2018/dsa-4117> is for oldstable only.