[cisco-voip] Spectre and Meltdown remediation as relevant to Cisco systems

[Lelio Fulgenzi]

Thanks James. 

I think you hit on another issue. The fixes available may not be the last ones. More may come. Requiring additional service impacting maintenance windows. 

I believe there was also rumour of a Microsoft patch that broke things and people needed to rush to fix that. 

I think with my limited understanding of the issues, we're going to focus on inventorying things first (makes sense) and wait a bit before applying to ensure we got them all. 

Thanks so much everyone. 

Sent from my iPhone

> On Jan 10, 2018, at 10:45 PM, James Andrewartha <jandrewartha at ccgs.wa.edu.au> wrote:
> 
> Hi Lelio,
> 
>> On 11/01/18 01:10, Lelio Fulgenzi wrote:
>> Ok. one last question (for now)
>>  
>> Why BIOS updates for C Series servers?
>>  
>> What do those updates address?
>>  
>> The CIMC application? Or more?
> 
> I believe (but haven't done heaps of research) is that the BIOS updates
> contain microcode (firmware for the CPU) updates, that with OS updates
> mitigate spectre: https://access.redhat.com/articles/3311301
> 
> There will be more microcode updates coming, which again might also need
> OS updates to be fully effective.
> 
> Thanks
> 
> -- 
> James Andrewartha
> Network & Projects Engineer
> Christ Church Grammar School
> Claremont, Western Australia
> Ph. (08) 9442 1757
> Mob. 0424 160 877