[cisco-voip] Spectre and Meltdown remediation as relevant to Cisco systems

[James Andrewartha]

Hi Lelio,

It’s not just Microsoft, now Intel’s saying that the microcode updates for some of their CPUs are faulty: https://kb.vmware.com/s/article/52345

Thanks,

-- 
James Andrewartha
Network & Projects Engineer
Christ Church Grammar School
Claremont, Western Australia
Ph. (08) 9442 1757
Mob. 0424 160 877

On 11/1/18, 11:45 pm, "Lelio Fulgenzi" <lelio at uoguelph.ca> wrote:

    Thanks James. 
    
    I think you hit on another issue. The fixes available may not be the last ones. More may come. Requiring additional service impacting maintenance windows. 
    
    I believe there was also rumour of a Microsoft patch that broke things and people needed to rush to fix that. 
    
    I think with my limited understanding of the issues, we're going to focus on inventorying things first (makes sense) and wait a bit before applying to ensure we got them all. 
    
    Thanks so much everyone. 
    
    Sent from my iPhone
    
    > On Jan 10, 2018, at 10:45 PM, James Andrewartha <jandrewartha at ccgs.wa.edu.au> wrote:
    > 
    > Hi Lelio,
    > 
    >> On 11/01/18 01:10, Lelio Fulgenzi wrote:
    >> Ok. one last question (for now)
    >>  
    >> Why BIOS updates for C Series servers?
    >>  
    >> What do those updates address?
    >>  
    >> The CIMC application? Or more?
    > 
    > I believe (but haven't done heaps of research) is that the BIOS updates
    > contain microcode (firmware for the CPU) updates, that with OS updates
    > mitigate spectre: https://access.redhat.com/articles/3311301
    > 
    > There will be more microcode updates coming, which again might also need
    > OS updates to be fully effective.
    > 
    > Thanks
    > 
    > -- 
    > James Andrewartha
    > Network & Projects Engineer
    > Christ Church Grammar School
    > Claremont, Western Australia
    > Ph. (08) 9442 1757
    > Mob. 0424 160 877