IPFire 2.23 - Core Update 138 released

IPFire 2.23 - Core Update 138 released

[The IPFire Project]

[-- Attachment #1: Type: text/plain, Size: 1304 bytes --]

https://blog.ipfire.org/post/ipfire-2-23-core-update-138-released

Just days after the last one, we are releasing IPFire 2.23 - Core Update 137. It addresses and mitigates recently announced vulnerabilities in Intel processors.


Intel Vulnerabilities

Intel has blessed us again with a variety of hardware vulnerabilities which need to be mitigated in software. Unfortunately those will further decrease the performance of your IPFire systems due to changes in Intel's microcodes which are also shipped with this Core Update.

If you would like to learn more about these vulnerabilities, please look here [1], here [2], here [3], and here [4].

We recommend to install this update as quickly as possible to prevent your system from being exploited through these vulnerabilities. A reboot is required to activate the changes.

[1] https://mdsattacks.com/#ridl-ng
[2] https://software.intel.com/security-software-guidance/software-guidance/intel-transactional-synchronization-extensions-intel-tsx-asynchronous-abort
[3] https://software.intel.com/security-software-guidance/insights/deep-dive-intel-transactional-synchronization-extensions-intel-tsx-asynchronous-abort
[4] https://www.intel.com/content/dam/support/us/en/documents/processors/mitigations-jump-conditional-code-erratum.pdf