OpenBSD Errata: August 24th, 2018 (vmml1tf)

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

OpenBSD Errata: August 24th, 2018 (vmml1tf)

T.J. Townsend
Errata patches for the kernel have been released for OpenBSD 6.3 and 6.2.

The Intel L1TF bug allows a vmm guest to read host memory.

Binary updates for the amd64 platform are available via the syspatch utility.
Source code patches can be found on the respective errata pages:

  https://www.openbsd.org/errata62.html
  https://www.openbsd.org/errata63.html

Run the fw_update command to get updated CPU microcode before rebooting.
If your machine has SMT ("hyper-threading") capability, it must be disabled
in the BIOS.

The CPU microcode update is not available for OpenBSD 6.2, so a BIOS update
is required to receive the accelerated L1 cache solution there.