In the spirit of a new year, Mageians have been very busy.
Meltdown and Spectre mitigation
If you’ve been anywhere near a news channel in the last few days, you’ll have heard of these two CPU flaws – there’s an overview at arstechnica for those who haven’t seen it yet. It’s important to note that not only Intel CPUs are vulnerable!
Mageia kernel updates to mitigate these two flaws are already being worked on. Mageia 6 kernel updates released in the last 24 hours don’t as yet solve all the problems, but kernel-4.14.12-2.mga6 is in updates/testing (as is the .mga7 kernel for Cauldron). Expect updates very shortly. Our thanks to our tireless kernel devs and our ever busy QA team!
Mageia 5 is at end of life, people – to avoid issues with Meltdown and Spectre, it’s time to update to Mageia 6. Before you begin, please read “Upgrading from Mageia 5” and the associated links. That said, we have decided to apply specific updates to the kernel and to Firefox, just to deal with the Spectre and Meltdown vulnerabilities. Subsequent updates of the kernel to minimise the performance impact of the security updates will not be applied in Mageia 5, similar for other security fixes. So you have a little time to prepare to upgrade, but do get on it!
While all that has been going on, there has been a constant stream of updates into Cauldron, updates for Mageia 6 and the last few for Mageia 5, and plenty of packages going into testing. Check out the usual suspects: Mageia Advisories, the Mageia AppDB, PkgSubmit to see the last 48 hours, and Bugzilla.
Have a great week!