I've upgraded Xen and the Gentoo base OS ("Dom0") of the Xen machines, as well as all Gentoo and Debian guest systems. In some cases, this should protect the systemes against the recent major security flaws (Spectres and Meltdown).
Where available, I've flashed BIOS too, which in some cases should change branch prediction behaviour (to handle Spectre). The colo system (servus/martin which one reaches first at login to shell or gshell) is not yet upgraded as it is really complex to do that remotely. In addition to the other security flaws, it also has active buggy Intel ME firmware for Intel's hidden-computer-in-the-CPU. I haven't ran any timing tests after the upgrades (but timing tests are these days run automatically and appended to the tuneup result files). It is possible that these fixes cause significant GMP slowdown. We need to tune our files for bug fixed systems, so we need to adapt our tables as per any new measurements. The colo system runs a minimal set of guests now and will continue to do so until I've patched the system to the latest level. -- Torbjörn Please encrypt, key id 0xC8601622 _______________________________________________ gmp-devel mailing list gmp-devel@gmplib.org https://gmplib.org/mailman/listinfo/gmp-devel