Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Why would Ubuntu need to be notified? Fixes for this are going to be at the Linux Kernel level or (at most) Debian upstream. Canonical shouldn't need to do anything?


If some fixes can be applied via microcode, then the distros will have to be provided the updated microcode. The kernel (mostly) does not handle CPU microcode distribution.


Ubuntu kernel don't rely on Debian. Have you seen how Debian lags behind the rest in terms of versions.


Lags behind? Linux kernel version 4.14 is available for Debian Stretch:

https://packages.debian.org/stretch-backports/linux-image-am...


Ubuntu certainly used to rely on Debian. When did it change?


Pretty sure Ubuntu are the largest Linux vendor right now, and have their distro on the largest number of servers worldwide.


From TFA

>To address the issue, updates to the Ubuntu kernel and processor microcode will be needed. These updates will be announced in future Ubuntu Security Notices once they are available.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: