FreeBSD 11.2 Ready For Release With Spectre Mitigation, Various Enhancements

[phoronix]

Phoronix: FreeBSD 11.2 Ready For Release With Spectre Mitigation, Various Enhancements

FreeBSD 11.2 is ready to set sail as the first significant FreeBSD update since last July's 11.1 release...

http://www.phoronix.com/scan.php?page=news_item&px=FreeBSD-11.2-RELEASE-Ready

[xiando]

Anyone looked at this for clues to the still undisclosed Spectre vulnerabilities? Heise story was that there's a total of 8 total scandals coming. We know of one because based Theo of OpenBSD's talk and OpenBSD figuring out one of them. That leaves seven unknown. As I understand it the SJW-freeBSD has signed NDA's so this sjwBSD 11.2 release could hold clues.

[drSeehas]

... That leaves seven unknown. ...

No, there are 5 unknown left (8 - 2 -1 = 5).
You missed Variant 3a (CVE-2018-3640) and Variant 4 (CVE-2018-3639).
https://www.phoronix.com/scan.php?pa...ulnerabilities

[Bsdisbetter]

No, there are 5 unknown left.
You missed Spectre Variant 3a (CVE-2018-3640) and Variant 4 (CVE-2018-3639).
https://www.phoronix.com/scan.php?pa...ulnerabilities

A new one fixed is CVE-2018-3665. That seems to be the latest security patch:
https://security.FreeBSD.org/patches/SA-18:07 Others like CVE-2017-5715, CVE-2017-5754 are roll-ups into release 2, but were previously available from 11-1p8 release but only fix amd64 not i386.

Refer to this for the outstanding vulnerabilities:

https://wiki.freebsd.org/SpeculativeExecutionVulnerabilities