Please note that patching browsers only mitigates exploitation from one possible vector, and would do nothing against other possible vectors and exploit chains.Security researchers have recently uncovered security issues known by two names, Meltdown and Spectre. If operating system patches cannot be applied, vendor-issued patches to browsers (Google Chrome, Mozilla Firefox, Internet Explorer) should be installed.
#SPECTRE MELTDOWN APPLE UPDATE#
#SPECTRE MELTDOWN APPLE SOFTWARE#
Because this vulnerability has a wide impact, if your platform or software isn't listed in this bulletin, please check with the vendor for guidance. This list only represents widely used platforms. Please see Apple's security updates for systems running macOS or iOS Platforms affectedĪny untested device should be considered vulnerable. 1, work is still being done to develop mitigation strategy for Spectre. Please see the meltdown website linked below for information about the official security advisories of involved/affected companies (Intel, Microsoft, Ubuntu, etc.) As of Jan. Both Meltdown and Spectre can be exploited through Javascript (securing your web browser is recommended). Also, cloud providers that use Intel CPUs and Xen PV, Docker, LXC, and OpenVZ for virtualization are vulnerable. This includes passwords, any documents that contain sensitive or personal data, personal photos, emails, etc. ImpactĪny data processed on a computer could be compromised. This class of vulnerability can impact an extremely wide variety of devices and is difficult to detect on a system. These are part of a new class of vulnerability that exists at the level of a computer processor's architecture, as opposed to existing in software or in the physical central processing unit itself. 3, details were released about two major vulnerabilities called "Spectre" and "Meltdown". Apple stated that they will release updates for Safari on macOS and iOS soon.Microsoft released updates for Microsoft Edge and Internet Explorer to mitigate Spectre.In the meantime, site isolation can be used.
Google will release updates for Chrome 64 on Jan.Mozilla released Firefox version 57.0.4, which mitigates Spectre.
If your browser isn't listed, please check with the vendor for guidance. Below is a list of some widely used browsers and information regarding patches.
However companies have released patches to reduce the likelihood of exploitation through a web browser. UPDATE Ī complete mitigation strategy for Spectre is still in progress. Apple has released updates to address the Meltdown vulnerability and a link to Apple's security update page has been added. Please see the updated UISO recommendations section. Vulnerabilities affecting all personal computers, mobile devices, cloud servers and providers UPDATE Sharing institutional data with third parties.Information systems acquisition, development, and maintenance.Protecting data in copiers and multifunction devices.Copyright infringement incident resolution.Contesting copyright infringement notices.
0 kommentar(er)
