Debian yakaburitsa matsva ekuchengetedza maringe neSpecter V4 uye V3a

Como Specter-zvine chekuita nenyaya dzekuchengetedza dzakazozivikanwa kare kare iyo yakapa zvakawanda zvekutaura nezvazvo mukati memwedzi iyi.

Kunyange mazhinji ehutachiona anodzivirira anotungamira kuSpecter akagadziriswa MuLinux, matsva matsva uye kunyanya misiyano mitsva yakagadzirwa.

Kune avo vaverengi vasingazive nezve njodzi iyi, ndinogona kukuudza izvozvo Specter kunetseka kunokanganisa microprocessors yemazuva ano iyo inoshandisa kufanotaura hop.

Mune mazhinji ma processor, kufungidzira kuuraya kunobva mukufungidzira kutadza kunogona kusiya zvinoonekwa makorari anogona kuzivisa zvakavanzika ruzivo kune anorwisa.

Semuenzaniso, kana iwo maratidziro ekupinda ndangariro akaitwa neakambotaurwa ekufungidzira kuuraya kunoenderana nedata rakavanzika, iyo inoguma mamiriro e data cache inoumba padivi chiteshi kuburikidza neanorwisa anogona kukwanisa kuwana ruzivo nezve yakavanzika data. .

Panzvimbo pekushomeka kamwe chete, kuri nyore kugadzirisa, gwaro raSpecter rinotsanangura kirasi yese yekukanganisa.

Kwese kusagadzikana uku zvakavakirwa pakushandisa mhedzisiro yemhedzisiro yekufungidzira kuuraya, hunyanzvi hunowanzo shandiswa kurwisa memory latency uye nekudaro kumhanyisa mashandiro pane emazuva ano microprocessors.

Kunyanya Specter inotarisa pane fungidziro yekusvetuka, yakakosha kesi yekufungidzira kuuraya.

Kusiyana nedambudziko reMeltdown rakaburitswa nezuva rimwe chete, Specter haina kutsamira pane chakarongeka manejimendi chinhu chaiyo processor kana kuti inodzivirira sei kuwana kune iyo ndangariro, asi ine nzira yakajairika.

Debian yakaburitsa gadziriso dzekuchengetedza

Munguva pfupi yapfuura iro rekuvandudza boka rinotarisira iyo Debian Project rakaburitsa firmware Intel micro kodhi Yakagadziridzwa yeDebian OS akateedzana vashandisi GNU / Linux 9 "Tambanudza" kudzikamisa maviri ezvekupedzisira Specter kushomeka pane mamwe maIntel CPU.

Mwedzi wapera, zvakanyanyisa muna Nyamavhuvhu 16, Moritz Muehlenhoff akazivisa kuwanikwa kweyekuvandudzwa kuIntel's microcode iyo inopa rutsigiro rweSSBD (Speculative Store Bypass Disable (SSBD) inodiwa kugadzirisa Specter Variant 4 chengetedzo uye Specter Variant 3a.

Nekudaro, iyo Intel microcode yekuvandudza yakaburitswa mwedzi wapfuura yaingowanikwa chete kune mamwe marudzi eIntel processor.

Nekuda kweizvi, Iyo Debian Project yakaburitsa yakagadziridzwa Intel microcode firmware iyo inoshandisa rutsigiro rwekuwedzera Intel CPU SSBD mamodheru yevashandisi vevatsva vhezheni yesystem inova Debian 9 Tambanudza kugadzirisa maviri eachangoburwa Specter kusagadzikana kwakawanikwa mune mamwe maIntel CPU.

Pamusoro peyekuzivisa tsamba yekutumira, Moritz Muehlenhoff akati:

«Iyi yekuvandudza inouya neyakavandudzwa cpu microcode yemamwe ma Intel cpus mamodheru ayo asati avharwa neiyo Intel microcode yekuvandudza, yakaburitswa sa dsa-4273-1 (uye nekudaro inopa rutsigiro rwessbd (inodikanwa kunongedza 'specter v4' uye inogadzirisa ku 'tarisa v3a') «.

Kune iyo Debian 9 Tambanudza kugadzikana kugadzikana aya matambudziko akagadziriswa mukati

mhando 3.20180807a.1 ~ deb9u1.

Isu tinokurudzira kuti iwe uvandudze yako Intel-microcode package.

Iyo Debian Project koka vese veDebian OS Stretch vashandisi vanoteedzera vachishandisa Intel CPUs kugadzirisa microcode firmware kune vhezheni 3.20180807a.1 ~ deb9u1, iyo inogona kutorwa pasi pakarepo kubva kumahombe ezvinyorwa.

Uyewo, kugadzirisa zvizere kushushikana kweSpecter, vashandisi vanodawo kuisa yazvino kernel kugadzirisa.

Inonyanya kuzivikanwa seSpecter musiyano 3A (CVE-2018-3640) "Rogue Sisitimu Rejista Verenga" uye Specter musiyano 4 CVE-2018-3639 "Inofungidzirwa Chitoro Bypass", ese ari maviri Side-Chiteshi kudzvinyirira iyo inogona kubvumidza vapambi kuwana mukana kune ruzivo zvakavanzika pamusoro penjodzi masisitimu. Iwo zvikanganiso zvakakomba uye anofanirwa kugadziriswa nekukurumidza sezvazvinogona.

Chekupedzisira, zvakaringana kuita yedu system kunyatso kuvandudzwa neshanduro dzazvino dzezvinhu zvacho.