X-Original-To: alpine-user@lists.alpinelinux.org Received: from us-smtp-delivery-169.mimecast.com (us-smtp-delivery-169.mimecast.com [63.128.21.169]) by lists.alpinelinux.org (Postfix) with ESMTP id 56FD25C4DD9 for ; Thu, 4 Jan 2018 23:50:16 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Jenzabar.onmicrosoft.com; s=selector1-jenzabar-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=kYroCSY2w16zf3+w84CuXa/nl4XhbJSzU+jjGLi42YE=; b=kNPqEf3ciCEtUsXHKp5HOQ7wjWGUep9Z315wUsLTH8m71DiMNhMSMshGdiVkMCA61yU53KMU9L4dBKisW0EQGWPV0ZjgjIsr5V2/DIgdpTvDwi/F7HADII+WNCAkIvYYa5o2KpNHSFAou39ivQXac94Ve6xbCq6/uILeyVoF3ms= Received: from NAM03-BY2-obe.outbound.protection.outlook.com (mail-by2nam03lp0056.outbound.protection.outlook.com [216.32.180.56]) (Using TLS) by us-smtp-1.mimecast.com with ESMTP id us-mta-18-N_-h5NxRNcC2n4gUP-fZug-1; Thu, 04 Jan 2018 18:50:13 -0500 Received: from DM5PR0601MB3592.namprd06.prod.outlook.com (10.167.108.142) by DM5PR0601MB3592.namprd06.prod.outlook.com (10.167.108.142) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.386.5; Thu, 4 Jan 2018 23:50:11 +0000 Received: from DM5PR0601MB3592.namprd06.prod.outlook.com ([fe80::8184:6719:458:7896]) by DM5PR0601MB3592.namprd06.prod.outlook.com ([fe80::8184:6719:458:7896%13]) with mapi id 15.20.0386.006; Thu, 4 Jan 2018 23:50:11 +0000 From: "Piskule, Robert" To: Jakub Jirutka CC: "alpine-user@lists.alpinelinux.org" Subject: RE: [alpine-user] MELTDOWN + SPECTRE Thread-Topic: [alpine-user] MELTDOWN + SPECTRE Thread-Index: AdOFpWt4LHUTxK2cRSObBnIZdgZjgQADdysAAADVETA= Date: Thu, 4 Jan 2018 23:50:11 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [38.111.50.97] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1;DM5PR0601MB3592;20:tq7zE4SxuMJMqCkiWuJ1HAX84Rkkp6xQR9wPe48/uOuJBuOZ3fo0UAjv6JvSeFJ+c+Q/6RzIggcqY+vvG7IMP+40puu5xbU6qFdVpIC6tKcvmDSKvQYwMT4J5d3NS2xHcS7ftbgOaWKoGOxYeDWDZRq3qakRwyJh5jJF4u0e9UM= x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-correlation-id: f8fd06e1-70a1-4fa1-4673-08d553cde4ab x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(4534020)(4602075)(4627115)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7153060);SRVR:DM5PR0601MB3592; x-ms-traffictypediagnostic: DM5PR0601MB3592: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(21748063052155)(17755550239193); x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(6040470)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3002001)(3231023)(944501075)(6041268)(20161123564045)(20161123562045)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(6072148)(201708071742011);SRVR:DM5PR0601MB3592;BCL:0;PCL:0;RULEID:(100000803101)(100110400095);SRVR:DM5PR0601MB3592; x-forefront-prvs: 054231DC40 x-forefront-antispam-report: SFV:NSPM;SFS:(10019020)(396003)(39380400002)(346002)(366004)(376002)(39850400004)(24454002)(199004)(189003)(102836004)(53936002)(99286004)(25786009)(4326008)(229853002)(6246003)(236005)(6116002)(790700001)(478600001)(8936002)(9686003)(2906002)(3846002)(6436002)(72206003)(68736007)(6506007)(53546011)(97736004)(2900100001)(14454004)(7696005)(86362001)(8676002)(81166006)(81156014)(76176011)(2950100002)(66066001)(6916009)(316002)(55016002)(106356001)(33656002)(105586002)(5250100002)(19609705001)(5660300001)(7736002)(6306002)(3660700001)(54896002)(3280700002)(74316002);DIR:OUT;SFP:1102;SCL:1;SRVR:DM5PR0601MB3592;H:DM5PR0601MB3592.namprd06.prod.outlook.com;FPR:;SPF:None;PTR:InfoNoRecords;A:1;MX:1;LANG:en; x-microsoft-antispam-message-info: ja2psJn2GpJZeerayKGgQPKFFBFsTXl5nXGEEFO++1G6dDxmiFkdIazWzQiWL4ERq+C3lXpo1yRP8t2M5nO38w== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM X-Mailinglist: alpine-user Precedence: list List-Id: Alpine Development List-Unsubscribe: List-Post: List-Help: List-Subscribe: MIME-Version: 1.0 X-OriginatorOrg: jenzabar.com X-MS-Exchange-CrossTenant-Network-Message-Id: f8fd06e1-70a1-4fa1-4673-08d553cde4ab X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Jan 2018 23:50:11.1374 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: de9fe3d6-a83e-496f-a503-acd092c97cd8 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR0601MB3592 X-MC-Unique: N_-h5NxRNcC2n4gUP-fZug-1 Content-Type: multipart/alternative; boundary="_000_DM5PR0601MB3592BBA11CC53DA767B75B67F11F0DM5PR0601MB3592_" --_000_DM5PR0601MB3592BBA11CC53DA767B75B67F11F0DM5PR0601MB3592_ Content-Type: text/plain; charset=WINDOWS-1252 Content-Transfer-Encoding: quoted-printable Jakub, thanks for getting back to me. Yes, that is correct. Do you personally work for Alpine? Is this an officia= l answer from Alpine? Thanks, -Rob From: Jakub Jirutka [mailto:jakub@jirutka.cz] Sent: Thursday, January 4, 2018 6:25 PM To: Piskule, Robert Cc: alpine-user@lists.alpinelinux.org Subject: Re: [alpine-user] MELTDOWN + SPECTRE Hi, did I understand correctly that you run Alpine only inside a Docker contain= er, not a host system? If so, then there's nothing Alpine can do against Me= ltdown or Spectre. The host system (its kernel) must be patched. Jakub On 4. Jan 2018, at 22:47, Piskule, Robert > wrote: I wanted to know if Alpine Linux is vulnerable to the recent Meltdown or Sp= ectre attacks. Are there any patches? If running from within Docker, is the= re anything I need to do? Thanks, -Rob --_000_DM5PR0601MB3592BBA11CC53DA767B75B67F11F0DM5PR0601MB3592_ Content-Type: text/html; charset=WINDOWS-1252 Content-Transfer-Encoding: quoted-printable

Jakub, thanks for getting back to me.=

 

Yes, that is correct. Do you personal= ly work for Alpine? Is this an official answer from Alpine?

 

Thanks,

-Rob

 

From: Jakub Jirutka [mailto:jakub@ji= rutka.cz]
Sent: Thursday, January 4, 2018 6:25 PM
To: Piskule, Robert <Robert.Piskule@jenzabar.com>
Cc: alpine-user@lists.alpinelinux.org
Subject: Re: [alpine-user] MELTDOWN + SPECTRE<= /p>

 

Hi,

 

did I understand correctly that you run Alpine only = inside a Docker container, not a host system? If so, then there’s not= hing Alpine can do against Meltdown or Spectre. The host system (its kernel= ) must be patched.

 

Jakub

 

On 4. Jan 2018, at 22:47, Piskule, Robert <Robert.Piskule@jenzabar.com>= ; wrote:

 

I wanted to know if Alpine Linux is vulnerable to t= he recent Meltdown or Spectre attacks. Are there any patches? If running fr= om within Docker, is there anything I need to do?

 

Thanks,

-Rob

 

--_000_DM5PR0601MB3592BBA11CC53DA767B75B67F11F0DM5PR0601MB3592_-- --- Unsubscribe: alpine-user+unsubscribe@lists.alpinelinux.org Help: alpine-user+help@lists.alpinelinux.org ---