Difference between revisions of "Xen Project Meltdown and Spectre Technical FAQ"

From Xen
(Where can I find the current patch series that fixes Spectre/SP2: Updated to v10)
 
Line 13: Line 13:
 
== Is there any practical advice about responding to XSA-254 (also known as the 'Meltdown' and 'Spectre' vulnerabilities)? ==
 
== Is there any practical advice about responding to XSA-254 (also known as the 'Meltdown' and 'Spectre' vulnerabilities)? ==
 
See [[Respond to Meltdown and Spectre]], [https://blog.xenproject.org/2018/01/22/xen-project-spectre-meltdown-faq-jan-22-update/ our FAQ] and [http://xenbits.xen.org/xsa/advisory-254.html XSA 254].
 
See [[Respond to Meltdown and Spectre]], [https://blog.xenproject.org/2018/01/22/xen-project-spectre-meltdown-faq-jan-22-update/ our FAQ] and [http://xenbits.xen.org/xsa/advisory-254.html XSA 254].
 +
 +
== What are some dependencies between Xen features, guest types and mitigations? ==
 +
 +
Please refer to the [https://openxt.atlassian.net/wiki/spaces/DC/pages/397967361/Meltdown+and+Spectre+mitigations+for+Xen+Linux+and+Windows OpenXT] spreadsheet, [https://docs.google.com/spreadsheets/d/1h9z98xW5COh2YuH7nOeTsjLGZ-k_Cl2FmLEiXOyeyZQ/htmlview Meltdown and Spectre Exposure Analysis: Xen, Linux & Windows].
  
 
[[Category:Security]]
 
[[Category:Security]]

Latest revision as of 14:42, 6 February 2018

Where can I find the current patch series that fixes Meltdown/SP3

Please refer to XSA-254 for more details.

Where can I find the current patch series that fixes Spectre/SP2

See

Is there any practical advice about responding to XSA-254 (also known as the 'Meltdown' and 'Spectre' vulnerabilities)?

See Respond to Meltdown and Spectre, our FAQ and XSA 254.

What are some dependencies between Xen features, guest types and mitigations?

Please refer to the OpenXT spreadsheet, Meltdown and Spectre Exposure Analysis: Xen, Linux & Windows.