Re: Meltdown and spectre

From: Kenny Payton <k3nnyp_at_gmail.com>
Date: Thu, 4 Jan 2018 19:24:21 -0500
Message-Id: <B369D370-4FA1-433F-8811-B555280C11A6_at_gmail.com>



https://linux.oracle.com/errata/ELSA-2018-0007.html <https://linux.oracle.com/errata/ELSA-2018-0007.html> ( OL 6 )

https://linux.oracle.com/errata/ELSA-2018-0008.html <https://linux.oracle.com/errata/ELSA-2018-0008.html> ( OL 7 )

Covers

CVE-2017-5754 
CVE-2017-5753 
CVE-2017-5715 


Kenny

> On Jan 4, 2018, at 10:57 AM, Niall Litchfield <niall.litchfield_at_gmail.com> wrote:
>
> There absolutely should be an OEL patch for this - for the RH kernel they'll probably take upstream - for UEK I'd expect an Oracle patch. I'd expect Oracle shops to be regression testing to determine the likely impact on RDBMS (and java app for that matter) performance.
>
> On Thu, Jan 4, 2018 at 3:40 PM, Andrew Kerber <andrew.kerber_at_gmail.com <mailto:andrew.kerber_at_gmail.com>> wrote:
> I was wondering the same thing. But I dont think its up to Oracle to patch this, its going to be at the OS and firmware level. But everything I read says that its going be a huge performance hit, anywhere from 10-50%, and the higher end will be on IO bound systems.
>
> On Thu, Jan 4, 2018 at 9:33 AM, Fred Habash <fmhabash_at_gmail.com <mailto:fmhabash_at_gmail.com>> wrote:
> Checked Oracle security bulletins but didn't find anything related. Did Oracle release an official statement for these vulnerabilities at least for the RDBMS and OEL.
>
> Thanks
>
>
>
> --
> Andrew W. Kerber
>
> 'If at first you dont succeed, dont take up skydiving.'
>
>
>
> --
> Niall Litchfield
> Oracle DBA
> http://www.orawin.info <http://www.orawin.info/>

--
http://www.freelists.org/webpage/oracle-l
Received on Fri Jan 05 2018 - 01:24:21 CET

Original text of this message