OK. Thanks. This helps. --- Lelio Fulgenzi, B.A. | Senior Analyst Computing and Communications Services | University of Guelph Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1 519-824-4120 Ext. 56354 | [email protected]<mailto:[email protected]>
www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, Twitter and Facebook [University of Guelph Cornerstone with Improve Life tagline] From: Ryan Ratliff (rratliff) [mailto:[email protected]] Sent: Wednesday, January 10, 2018 9:11 AM To: Lelio Fulgenzi <[email protected]> Cc: voip puck <[email protected]> Subject: Re: [cisco-voip] Spectre and Meltdown remediation as relevant to Cisco systems The only baremetal versions of those products that would require a patch are the ones that ran on Windows. Since we moved to linux root has been locked down and you can’t run custom code on the box, which is a requirement for exploitation of this vulnerability. -Ryan On Jan 9, 2018, at 9:58 PM, Lelio Fulgenzi <[email protected]<mailto:[email protected]>> wrote: I'm wondering if products like CUCM v9 and UCCx v9 will be investigated/patched for vulnerabilities? Especially since they're bare metal compatible. If Linux is affected, then wouldn't these be as well? We're in the process of migrating but it would be good to know. Sent from my iPhone On Jan 9, 2018, at 8:32 PM, Lelio Fulgenzi <[email protected]<mailto:[email protected]>> wrote: To be honest, I'm a little worried about the rumoured slowdown the fixes are gonna have. Will this impact the supported status of certain CPUs in collab suite? Sent from my iPhone On Jan 9, 2018, at 9:47 AM, Lelio Fulgenzi <[email protected]<mailto:[email protected]>> wrote: Good question. I’m not sure of the impact either. I _suspect_ that because ESXi abstracts the CPU that the intel CPU bug would affect ESXi only, not the underlying applications. Because you can’t run the software on baremetal any longer, there shouldn’t be a need to update the voice applications. I’m also guessing that CIMC would likely need some updates too. But yes, interesting to see how this plays out. --- Lelio Fulgenzi, B.A. | Senior Analyst Computing and Communications Services | University of Guelph Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1 519-824-4120 Ext. 56354 | [email protected]<mailto:[email protected]> www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, Twitter and Facebook <image001.png> From: cisco-voip [mailto:[email protected]] On Behalf Of Ben Amick Sent: Monday, January 8, 2018 4:27 PM To: voip puck <[email protected]<mailto:[email protected]>> Subject: [cisco-voip] Spectre and Meltdown remediation as relevant to Cisco systems So I haven’t had much time to look into this, but has anyone else compiled a list of or needs for remediation for cisco systems for the Spectre and Meltdown vulnerabilities? I know the one only affects Intel and some ARM processors, whereas the other is more OS level, if I understand properly? So being that all the cisco telephony products are on virtualized product now, I assume that we would go to VMWare for any patching relevant to those, but I would imagine that we would also need a security patch for the redhat/centos OS the Unified Communications products run on (and doubly so for those of us using old MCS physical chassis?) It looks like routers and switches, as well as ASAs are all potentially vulnerable as well. I’ve found the following articles on their website: https://tools.cisco.com/security/center/viewAlert.x?alertId=56354 and https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel that details the issues a bit, but it looks like Cisco hasn’t found anything yet nor delivered any patches? Ben Amick Unified Communications Analyst Confidentiality Note: This message is intended for use only by the individual or entity to which it is addressed and may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please contact the sender immediately and destroy the material in its entirety, whether electronic or hard copy. Thank you _______________________________________________ cisco-voip mailing list [email protected]<mailto:[email protected]> https://puck.nether.net/mailman/listinfo/cisco-voip _______________________________________________ cisco-voip mailing list [email protected]<mailto:[email protected]> https://puck.nether.net/mailman/listinfo/cisco-voip _______________________________________________ cisco-voip mailing list [email protected]<mailto:[email protected]> https://puck.nether.net/mailman/listinfo/cisco-voip
_______________________________________________ cisco-voip mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-voip
