News for hackers. Stuff that matters.
Re:About speculative execution vulnerabilities in ARM-based ... by tischler on Thursday January 04, 2018 @07:29PM (#16075442)
> Apple has already released mitigations in iOS 11.2, macOS 10.13.2, and tvOS 11.2 to help defend against Meltdown.

What about macOS 10.12 and earlier versions?

Re:About speculative execution vulnerabilities in ARM-based ... by dylz on Thursday January 04, 2018 @07:54PM (#16075570)
My work machine is 10.12 and patched today.

Sierra and El Capitan is covered too.

https://support.apple.com/en-us/HT208331 - see Kernel entries.

Re:About speculative execution vulnerabilities in ARM-based ... by tischler on Thursday January 04, 2018 @08:24PM (#16075720)
10.12 is Sierra. I cannot see any security update in the updates tab of the App Store app, nor in the list of updates that were installed in the last 30 days.
Re:About speculative execution vulnerabilities in ARM-based ... by om2 on Thursday January 04, 2018 @08:31PM (#16075749)
This update shipped to 10.12 on Dec 6 as 10.12.7.
Re:About speculative execution vulnerabilities in ARM-based ... by notadoc on Thursday January 04, 2018 @09:42PM (#16076077)
No, there is no macOS 10.12.7 release

https://support.apple.com/downloads/macos

Perhaps you're referring to a release on Dec 6 labeled as "Security Update 2017-002 10.12.6," which does not appear to include the Meltdown patch for Sierra.

Re:About speculative execution vulnerabilities in ARM-based ... by om2 on Friday January 05, 2018 @12:11AM (#16076712)
I might be super confused about versions, but security update 2017-002 Sierra claims to include the patch according to this page: https://support.apple.com/en-us/HT208331
Re:About speculative execution vulnerabilities in ARM-based ... by tischler on Thursday January 04, 2018 @08:40PM (#16075803)
I'm on 10.12.6 on a Mid 2011 MacBook Air 13": "No Updates Available"

Edit: I see, there is a confusing typo in om2's comment (it should be 10.12.6 not 10.12.7). I am wondering why this update does not show up in my list of installed updates. What a mess.

Re:About speculative execution vulnerabilities in ARM-based ... by thelibrarian on Thursday January 04, 2018 @09:59PM (#16076136)
It was released as Security Update 2017-002 and 2017-005 for Sierra 10.12.6 and El Capitan 10.11.6 respectively, not as point version updates.
Re:About speculative execution vulnerabilities in ARM-based ... by om2 on Thursday January 04, 2018 @09:34PM (#16076036)
No, 10.12.7 is the right version. It's "available for" 10.12.6, which means that is the version that will be offered the update. I am not sure why it's not showing up for you. Consider contacting Apple support.
Re:About speculative execution vulnerabilities in ARM-based ... by hesk on Thursday January 04, 2018 @08:40PM (#16075801)
Only fixes Meltdown but not Spectre.
Re:About speculative execution vulnerabilities in ARM-based ... by jonny_eh on Thursday January 04, 2018 @08:50PM (#16075845)
They said that they've only patched Meltdown so far.