Useful links related to the Meltdown & Spectre CPU bugs.

MeltdownSpectre.md

Offical website

• https://meltdownattack.com/

Patch Guide

• https://thehackernews.com/2018/01/meltdown-spectre-patches.html

German FAQ

• https://heise.de/-3938146

German news article about the bug being found:

• https://www.golem.de/news/spectre-und-meltdown-cpu-bugs-sind-laut-google-schon-seit-juni-2017-bekannt-1801-131958.html

Technical explanation

• https://www.youtube.com/watch?v=I5mRwzVvFGE

Patch-Test for Windows

• https://support.microsoft.com/en-us/help/4073119/protect-against-speculative-execution-side-channel-vulnerabilities-in

Overviews

• https://support.lenovo.com/de/de/solutions/len-18282
• https://nvd.nist.gov/vuln/detail/CVE-2017-5754
• https://nvd.nist.gov/vuln/detail/CVE-2017-5753
• https://nvd.nist.gov/vuln/detail/CVE-2017-5715
• https://www.golem.de/news/updates-wie-man-spectre-und-meltdown-loswird-1801-132125.html (german)
• http://stadt-bremerhaven.de/meltdown-und-spectre-die-letzten-tage-zusammengefasst/ (german)

Wiki Articles

• https://en.wikipedia.org/wiki/Meltdown_(security_vulnerability)
• https://en.wikipedia.org/wiki/Spectre_(security_vulnerability)

CERT Notice

• http://www.kb.cert.org/vuls/id/584653

"Fix" Firefox by updating to 57.0.4

• http://stadt-bremerhaven.de/mozilla-firefox-57-0-4-bugfix-release-gegen-meltdown-und-spectre/ (german)

Chrome will be "fixed" on Jan 23, 2018. Here is a work-around till then:

• http://stadt-bremerhaven.de/google-chrome-vor-meltdown-und-spectre-absichern/ (german)

Ubuntu advisory (including patched kernel versions)

• https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdown

Windows Updates

• Info article in german: http://stadt-bremerhaven.de/meltdown-spectre-microsoft-auch-mit-update-und-informationen-zu-windows-7-und-8-1/
• Windows Update: https://www.catalog.update.microsoft.com/Search.aspx?q=KB4056892%20

manufacturer response overview

• https://heise.de/-3936141

QEMU blog post

• https://www.qemu.org/2018/01/04/spectre/

Intel promises updates for CPUs since 2013 (german)

• https://heise.de/-3936956

Microsoft stops AMD updates due to problems (german)

• https://www.golem.de/news/spectre-und-meltdown-microsoft-stoppt-update-auslieferung-fuer-amd-systeme-1801-132056.html

Anti-Virus registry key list

• https://docs.google.com/spreadsheets/u/1/d/184wcDt9I9TUNFFbsAVLpzAtckQxYiuirADzf3cL42FQ/htmlview?usp=sharing&sle=true

Google fixed their Cloud last year:

• https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html
• https://blog.google/topics/google-cloud/answering-your-questions-about-meltdown-and-spectre/
• https://blog.google/topics/google-cloud/protecting-our-google-cloud-customers-new-vulnerabilities-without-impacting-performance/