Meltdown and Spectre protection for Ubuntu 14.04.5 (Kernel 4.4)?

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP








up vote
0
down vote

favorite












Does an installation running on 14.04.5 (Kernel 4.4) need to be patched according to USN-3540-2?



I received contradictory informations. Some saying that as it is a LTS version, it already includes protection to meltdown and spectre vulnerabilities and it does not have to be patched. Is that right?



Thank you










share|improve this question

























    up vote
    0
    down vote

    favorite












    Does an installation running on 14.04.5 (Kernel 4.4) need to be patched according to USN-3540-2?



    I received contradictory informations. Some saying that as it is a LTS version, it already includes protection to meltdown and spectre vulnerabilities and it does not have to be patched. Is that right?



    Thank you










    share|improve this question























      up vote
      0
      down vote

      favorite









      up vote
      0
      down vote

      favorite











      Does an installation running on 14.04.5 (Kernel 4.4) need to be patched according to USN-3540-2?



      I received contradictory informations. Some saying that as it is a LTS version, it already includes protection to meltdown and spectre vulnerabilities and it does not have to be patched. Is that right?



      Thank you










      share|improve this question













      Does an installation running on 14.04.5 (Kernel 4.4) need to be patched according to USN-3540-2?



      I received contradictory informations. Some saying that as it is a LTS version, it already includes protection to meltdown and spectre vulnerabilities and it does not have to be patched. Is that right?



      Thank you







      14.04 security lts vulnerability






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Feb 8 at 22:10









      Santi Tintoré

      11




      11




















          1 Answer
          1






          active

          oldest

          votes

















          up vote
          3
          down vote













          The mitigation fixes for these two specific sets of attacks are not limited to the kernel, however if you are up to date with security patches from Ubuntu, then yes, you already have the patches. You also need updated intel-microcode package for example, for some of the fix. There was also a Firefox update for mitigation of Spectre attacks in the browser.



          You can see the publishing history for 4.4 kernel updates on launchpad.net as well.






          share|improve this answer




















            Your Answer







            StackExchange.ready(function()
            var channelOptions =
            tags: "".split(" "),
            id: "89"
            ;
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function()
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled)
            StackExchange.using("snippets", function()
            createEditor();
            );

            else
            createEditor();

            );

            function createEditor()
            StackExchange.prepareEditor(
            heartbeatType: 'answer',
            convertImagesToLinks: true,
            noModals: false,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: 10,
            bindNavPrevention: true,
            postfix: "",
            onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            );



            );













             

            draft saved


            draft discarded


















            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1004372%2fmeltdown-and-spectre-protection-for-ubuntu-14-04-5-kernel-4-4%23new-answer', 'question_page');

            );

            Post as a guest






























            1 Answer
            1






            active

            oldest

            votes








            1 Answer
            1






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes








            up vote
            3
            down vote













            The mitigation fixes for these two specific sets of attacks are not limited to the kernel, however if you are up to date with security patches from Ubuntu, then yes, you already have the patches. You also need updated intel-microcode package for example, for some of the fix. There was also a Firefox update for mitigation of Spectre attacks in the browser.



            You can see the publishing history for 4.4 kernel updates on launchpad.net as well.






            share|improve this answer
























              up vote
              3
              down vote













              The mitigation fixes for these two specific sets of attacks are not limited to the kernel, however if you are up to date with security patches from Ubuntu, then yes, you already have the patches. You also need updated intel-microcode package for example, for some of the fix. There was also a Firefox update for mitigation of Spectre attacks in the browser.



              You can see the publishing history for 4.4 kernel updates on launchpad.net as well.






              share|improve this answer






















                up vote
                3
                down vote










                up vote
                3
                down vote









                The mitigation fixes for these two specific sets of attacks are not limited to the kernel, however if you are up to date with security patches from Ubuntu, then yes, you already have the patches. You also need updated intel-microcode package for example, for some of the fix. There was also a Firefox update for mitigation of Spectre attacks in the browser.



                You can see the publishing history for 4.4 kernel updates on launchpad.net as well.






                share|improve this answer












                The mitigation fixes for these two specific sets of attacks are not limited to the kernel, however if you are up to date with security patches from Ubuntu, then yes, you already have the patches. You also need updated intel-microcode package for example, for some of the fix. There was also a Firefox update for mitigation of Spectre attacks in the browser.



                You can see the publishing history for 4.4 kernel updates on launchpad.net as well.







                share|improve this answer












                share|improve this answer



                share|improve this answer










                answered Feb 8 at 22:17









                dobey

                32k33585




                32k33585



























                     

                    draft saved


                    draft discarded















































                     


                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function ()
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1004372%2fmeltdown-and-spectre-protection-for-ubuntu-14-04-5-kernel-4-4%23new-answer', 'question_page');

                    );

                    Post as a guest













































































                    Popular posts from this blog

                    pylint3 and pip3 broken

                    Missing snmpget and snmpwalk

                    How to enroll fingerprints to Ubuntu 17.10 with VFS491