Language Selection

English French German Italian Portuguese Spanish

Meltdown Patches and Problems

Filed under
Security
Ubuntu
  • [Ubuntu] Meltdown and Spectre Status Update

    On Tuesday, January 9, 2018 we released Ubuntu kernel updates for mitigation of CVE-2017-5754 (aka Meltdown / Variant 3) for the x86-64 architecture.

  • Lubuntu 17.10.1 (Artful Aardvark) released!

    Lubuntu 17.10.1 has been released to fix a major problem affecting many Lenovo laptops that causes the computer to have BIOS problems after installing. You can find more details about this problem here.

    Please note that the Meltdown and Spectre vulnerabilities have not been fixed in this ISO, so we advise that if you install this ISO, update directly after.

    This release is no different in terms of features from the 17.10 release, and is comparable to an LTS point release in that all updates since the 17.10 release have been rolled into this ISO. You can find the initial announcement here.

  • Check Linux for Spectre or Meltdown vulnerability

    Devices running Linux are affected by Spectre and Meltdown vulnerabilities as much as their Windows counterparts.

    Development teams work on updated kernels for the various distributions, and users need to update browsers and other software to protect data against potential attacks.

    We talked about identifying whether your Windows PC or web browser is vulnerable already. A recently published script does the same for Linux systems. You may use it to check whether your Linux distribution is vulnerable.

  • Meltdown Patch Is Causing Problems for Some Ubuntu Linux Users

    Many Ubuntu Linux users who installed the latest kernel updates to fix the Meltdown CPU vulnerability found themselves stuck in a boot loop and had to revert back to a previous version.

    The problem affected mostly Ubuntu 16.04 (Xenial Xerus), which is a long-term support (LTS) release. Soon after the 4.4.0-108 kernel update was released to fix the Meltdown vulnerability, users flooded the Ubuntu Forums and bug tracker to report booting problems.

  • Meltdown Update Kernel doesnt boot
  • Major Linux distros have Meltdown patches, but that's only part of the fix

    The Intel Meltdown security problem is the pain that just keeps hurting. Still, there is some good news. Ubuntu and Debian Linux have patched their distributions. The bad news? It's becoming clearer than ever that fixing Meltdown causes significant performance problems. Worst still, many older servers and appliances are running insecure, unpatchable Linux distributions.

More in Tux Machines

Nvidia unveils cheaper 4GB version of its Jetson TX2 and begins shipping its next-gen Xavier module

Nvidia announced a lower-cost 4GB version of its Linux-driven Jetson TX2 module with half the RAM and eMMC and has begun shipping its next-gen Jetson AGX Xavier. Nvidia will soon have three variants of its hexa-core Arm Jetson TX2 module: the original Jetson TX2, the more embedded, industrial temperature Jetson TX2i , and now a new Jetson TX2 4GB model. The chip designer also announced availability of its next-gen, robotics focused Jetson AGX Xavier module (see farther below). Read more

Stable kernels 4.19.9, 4.14.88, 4.9.145, 4.4.167, and 3.18.129

Software: Vivaldi, QEMU and Manpages

  • Vivaldi 2.2 adds tweakable toolbars and Netflix for Linux
    UPSTART WEB BROWSER Vivaldi has released version 2.2, with a number of new features which continue its aim to differentiate itself from other Chromium browsers. The privacy passionate progeny of Opera co-founder Jon Von Tetzchner boasts improved tab management, support for pop-out video windows, configurable toolbars and updates to acccessibility. [...] "Customizing a browser as per your needs is not only a thing for pros and geeks. The key is to create something that works for you," says Vivaldi CEO Jon von Tetzchner. "Features are what draw people to Vivaldi and details are what keep them there. That's why we are always striving to fit every use case and giving our users different ways to browse."
  • QEMU 3.1 Released For Advancing The Linux Open-Source Virtualization Stack
    The QEMU emulator that is widely used by the open-source Linux virtualization stack is out with its version 3.1 feature release. This is the QEMU update that is adding multi-threaded Tiny Code Generator support, display improvements, adds the Cortex-A72 model and other ARM improvements, and various other enhancements.
  • What are Linux man pages?
    Have you ever sought help on a technical issue, only to be told RTFM? What is that acronym? In a safe-for-work translation, it means Read The Freaking Manual. That's all fine and good when you working with something that has a downloadable PDF file containing all the necessary information you need. But what about a Linux command? There are no manuals to be had. Or are there?

OSS Leftovers

  • JFrog Empowers Millions of Open Source Go Developers, Announces Community's First Public Go Repository
    JFrog, the Universal DevOps technology leader known for enabling liquid software via continuous software update flows, is announcing the coming availability of JFrog GoCenter, the first-ever central repository for software modules developed in the popular Go programming language. GoCenter is a free, open source and public service that will be provided for the broad Go community in early 2019, and is being showcased at KubeCon Seattle.
  • Open Sesame
    Although it’s free for users, people invest time in making the technology better or creating it in the first place. [...] When a project is open-source, it means that the software, hardware or data are open for users to use, access, change or distribute for free. An open-source project can also make it easier to bring a team together to develop a project, Davis says.
  • Fuchsia SDK and ‘device’ now included in Android Open Source Project
    Fuchsia, Google’s future OS project, is getting more connected to Android. The search giant has added two Fuchsia items to its Android Open Source Project (AOSP) code. A new commit posted to the AOSP Gerrit — an online code collaboration and management tool — added two Fuchsia ‘repos’ to the primary ‘manifest’ of AOSP. In other words, developers added two Fuchsia files to the instructions that tell Google’s download tool ‘Repo’ what to include when a user downloads AOSP. Further, for those unfamiliar with AOSP, it’s a compilation of Android made available for anyone to use.
  • Fuchsia SDK & Test Device Appear In Android Open Source Project
    Google has taken substantial new steps toward the release of its long-awaited new operating system Fuchsia, based on recently noticed changes to the Android Open Source Project (AOSP) codebase. Although AOSP is most often connected to Android OS and development on that platform, Fuchsia OS has now appeared as both an SDK and test device in the repository. According to comments on the commits, the OS's repositories being included in the Android master manifest equates to an added 760MB. The Gerrit UI also shows changes to approximately 977 files in total with the addition of the Fuchsia software development kit (SDK) and a related test device. Interestingly, the test device SDK seems to be based on or at least tested with the configuration for 'Walleye' -- Google's codename for one of the Pixel 2 handsets.
  • ‘This is not a big boys club’: FINOS seeks to open up open source
    Attend an event about open source development and collaboration in financial technology, and you will see developers and executives from Capital One, Barclays, JPMorgan Chase, BlackRock and perhaps a handful of other financial institutions, along with open-source-focused vendors like Red Hat (now part of IBM).
  • The Autoware Foundation - An Open Alliance for Autonomous Driving Technology
  • What is Open Source & Why Should You Care?
    The term ‘open source’ is used with excitement throughout multiple industries, yet folks are still asking a lot of questions, chief among them: What is open source & why should I care? Well, for industrial and process manufacturing, open source is rapidly becoming a fundamental for the digitalization of these industries. Industrial automation users, system integrators, machine builders, and automation suppliers that understand how to embrace and leverage open source are dramatically improving their odds of being effective competitors in their respective industries.
  • QLC Chain to open source WinQ server router, focuses on multi-sig smart contracts
    QLC Chain has released its bi-weekly report, which highlights development progress of the public blockchain and VPN routers, adjustment of QLC Chain’s development plan, and updates to WinQ 2.0. Recently, an incentive program was announced for VPN operators and active community members to test the platform.