3 ms·
Since posting this 18 hours ago, Apple has changed the text yet again[0] to apparently indicate that the fix was NOT included in El Capitan and Sierra Security
by miles 9y ago
Since posting this 18 hours ago, Apple has changed the text yet again[0] to apparently indicate that the fix was NOT included in El Capitan and Sierra Security Updates:
> Kernel
> Available for: macOS High Sierra 10.13.1
> Impact: An application may be able to read kernel memory
> Description: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.
> CVE-2017-5754: Jann Horn of Google Project Zero, Werner Haas and Thomas Prescher of Cyberus Technology GmbH, and Daniel Gruss, Moritz Lipp, Stefan Mangard and Michael Schwarz from Graz University of Technology
> Entry updated January 5, 2018
[0] https://news.ycombinator.com/item?id=16081146 https://news.ycombinator.com/item?id=16081146