Meltdown and Spectre Discussion Sticky

[deadflowr]

<snip>

Using 18.04 is rather problematic.

It is when running proposed...

Edit: also that ^^^^^^^ in the post above this one.

[linuxyogi]

Why are you on Bionic? It is in beta—i.e. for testers and other bleeding edge types. Of course it's problematic.

Under 16.04 I was facing issues with pulseaudio. I had to use

pulseaudio -k

a lot to recover from failed audio.

18.04 has no such issue.


I enabled proposed due to this https://ubuntuforums.org/showthread....5#post13723825

[galacticstone]

At the risk of repetitiveness, an easy way to see if the patch has been applied is as per deadflowr's post 68. An easier version of that command is:

lscpu

You can look for the pti flag by filtering the output through grep:

lscpu | grep pti

You can check what kernel you have installed by running:

uname -r

This may save you the trouble of parsing through long log reports (though it is useful to learn how to read logs ).

Thanks Duckhook. I put those on my cheat-sheet.

[djchandler]

It is my understanding that I am using Ubuntu 16.04.3 64 bit LTS and I have Linux kernel 4.10.0-42 AMD64 generic installed. I would have to download and install Linux kernel 4.13.x-y AMD64 generic from the pti ppa in order for this to be patched, right? In other words, I can wait for Ubuntu 16.04.4 64 bit LTS due on February 15th, 2018 or I can turn on Ubuntu proposed and do an update, correct?

4.13 is in the Xenial repository now. Just got upgraded from 4.10 to 4.13.0-28. I don't do unsupported backports. This is supported.

[deadflowr]

I see we are now on to the next phase of updates:
https://usn.ubuntu.com/usn/usn-3531-1/

[galacticstone]

Will these continue be served up automatically by the software center, or do we need to go out and get them?

[deadflowr]

Will these continue be served up automatically by the software center, or do we need to go out and get them?

They will be available as any normal update would be.
Just keep your system up-to-date as usual.

Once they post the Security notice for a package that package is available.
I would think that only the Software Updater might not show new packages right away, since it still uses the phased-updates implementation, which nothing else uses.
(apt-get, synaptic, unattended-upgrades, and Software Center do not use or have phased-updates configured. )

Phased updates is Ubuntu's method of rolling out updates to small groups of systems first, then expanding that to all users depending on whether the systems report back problems or not.
But thus far as I can tell only update-manager (software updater) has ever been configured to use it.

Note that Software Updater is a different thing than Software Center, which has it's own builtin updater. fwiw

[galacticstone]

They will be available as any normal update would be.
Just keep your system up-to-date as usual.

Once they post the Security notice for a package that package is available.
I would think that only the Software Updater might not show new packages right away, since it still uses the phased-updates implementation, which nothing else uses.
(apt-get, synaptic, unattended-upgrades, and Software Center do not use or have phased-updates configured. )

Phased updates is Ubuntu's method of rolling out updates to small groups of systems first, then expanding that to all users depending on whether the systems report back problems or not.
But thus far as I can tell only update-manager (software updater) has ever been configured to use it.

Note that Software Updater is a different thing than Software Center, which has it's own builtin updater. fwiw

Is there a preferred method? I've actually never used the Software Updater and usually update through the Software Center.\

Thanks!

[Frogs Hair]

I see we are now on to the next phase of updates:
https://usn.ubuntu.com/usn/usn-3531-1/

Thanks and done !

[mc4man]

I see we are now on to the next phase of updates:
https://usn.ubuntu.com/usn/usn-3531-1/

I believe intel-microcode is not default installed so users would need to either have already enabled it in > Software & Updates > Additional Drivers or install it manually, (sudo apt install intel-microcode) to either have it installed or receive updates to it
Obviously not for amd users.. (there is a amd-microcode, amd users should read changelog, no clue if involved in this spectre stuff