Meltdown and Spectre Linux Kernel fixes

[Proxygen]

better to use

wget https://meltdown.ovh -O spectre-meltdown-checker.sh

(https://raw.githubusercontent.com/s...wn-checker/master/spectre-meltdown-checker.sh) to check for SMT vulnerabilities unpatched. The Intel tool is very limited.

PS: If anyone would be kind enough to tell me if I pinned contrib and nonfree correctly? Thanks!

 

[Proxygen]

anyone?

 

[fabian]

@Gaia: I am not sure whether you might not want to pin both packages from Security and regular repository (so that you pick up stable point releases for intel-microcode, and security updates for iucode-tool). I am also not sure I would bother to additional complexity via pinning to avoid non-free and contrib - nothing from main is allowed to depend on those components anyway, so the only way to get stuff installed is by installing it explicitly.

 

[Proxygen]

@Gaia: I am not sure whether you might not want to pin both packages from Security and regular repository (so that you pick up stable point releases for intel-microcode, and security updates for iucode-tool). I am also not sure I would bother to additional complexity via pinning to avoid non-free and contrib - nothing from main is allowed to depend on those components anyway, so the only way to get stuff installed is by installing it explicitly.

Thanks! So I might as well remove all pinning and let apt decide by itself?

 

[fabian]

Thanks! So I might as well remove all pinning and let apt decide by itself?

it's what I would do - but the choice is of course yours