[cisco-voip] Spectre and Meltdown remediation as relevant to Cisco systems

[Lelio Fulgenzi]

Lovely. Just lovely. 



Sent from my iPhone

> On Jan 13, 2018, at 11:13 AM, James Andrewartha <jandrewartha at ccgs.wa.edu.au> wrote:
> 
> Hi Lelio,
> 
> It’s not just Microsoft, now Intel’s saying that the microcode updates for some of their CPUs are faulty: https://kb.vmware.com/s/article/52345
> 
> Thanks,
> 
> -- 
> James Andrewartha
> Network & Projects Engineer
> Christ Church Grammar School
> Claremont, Western Australia
> Ph. (08) 9442 1757
> Mob. 0424 160 877
> 
> On 11/1/18, 11:45 pm, "Lelio Fulgenzi" <lelio at uoguelph.ca> wrote:
> 
>    Thanks James. 
> 
>    I think you hit on another issue. The fixes available may not be the last ones. More may come. Requiring additional service impacting maintenance windows. 
> 
>    I believe there was also rumour of a Microsoft patch that broke things and people needed to rush to fix that. 
> 
>    I think with my limited understanding of the issues, we're going to focus on inventorying things first (makes sense) and wait a bit before applying to ensure we got them all. 
> 
>    Thanks so much everyone. 
> 
>    Sent from my iPhone
> 
>> On Jan 10, 2018, at 10:45 PM, James Andrewartha <jandrewartha at ccgs.wa.edu.au> wrote:
>> 
>> Hi Lelio,
>> 
>>> On 11/01/18 01:10, Lelio Fulgenzi wrote:
>>> Ok. one last question (for now)
>>> 
>>> Why BIOS updates for C Series servers?
>>> 
>>> What do those updates address?
>>> 
>>> The CIMC application? Or more?
>> 
>> I believe (but haven't done heaps of research) is that the BIOS updates
>> contain microcode (firmware for the CPU) updates, that with OS updates
>> mitigate spectre: https://access.redhat.com/articles/3311301
>> 
>> There will be more microcode updates coming, which again might also need
>> OS updates to be fully effective.
>> 
>> Thanks
>> 
>> -- 
>> James Andrewartha
>> Network & Projects Engineer
>> Christ Church Grammar School
>> Claremont, Western Australia
>> Ph. (08) 9442 1757
>> Mob. 0424 160 877
> 
>