News for hackers. Stuff that matters.
Re:About speculative execution vulnerabilities in ARM-based ... by tischler on Thursday January 04, 2018 @09:22PM (#16075980)
Except they forgot to tell us about older versions of macOS which probably 75%[1] of Apple users still use.

[1] http://gs.statcounter.com/macos-version-market-share/desktop...

Re:About speculative execution vulnerabilities in ARM-based ... by thelibrarian on Thursday January 04, 2018 @10:00PM (#16076147)
Security Updates were released for 10.6 and 10.5 (2017-002 and 2017-005 respectively).
Re:About speculative execution vulnerabilities in ARM-based ... by 0x0 on Friday January 05, 2018 @08:32AM (#16078402)
Where do you see updates for 10.6 and 10.5? According to https://support.apple.com/en-us/HT208331 - there was a 2017-002 for 10.12 and a 2017-005 for 10.11.
Re:About speculative execution vulnerabilities in ARM-based ... by thelibrarian on Friday January 05, 2018 @08:09PM (#16083186)
Yes, I did mean 10.12.6 and 10.11.6.
Re:About speculative execution vulnerabilities in ARM-based ... by tischler on Thursday January 04, 2018 @11:33PM (#16076563)
The patch for Meltdown (CVE-2017-5754) for High Sierra, Sierra and El Capitan was contained in these security updates from December 6: https://support.apple.com/en-us/HT208331
Re:About speculative execution vulnerabilities in ARM-based ... by notadoc on Thursday January 04, 2018 @09:35PM (#16076043)
Hopefully Sierra and El Capitan will get patched soon.
Re:About speculative execution vulnerabilities in ARM-based ... by om2 on Thursday January 04, 2018 @10:39PM (#16076313)
This statement doesn’t make it clear, but they have been patched (same fixes as High Sierra)
Re:About speculative execution vulnerabilities in ARM-based ... by EasyTiger_ on Friday January 05, 2018 @04:09AM (#16077485)
How were we meant to figure this out, through necromancy or something. There is no information indicating Sierra has been patched or is due to be patched.
Re:About speculative execution vulnerabilities in ARM-based ... by 0x0 on Friday January 05, 2018 @08:34AM (#16078414)
On https://support.apple.com/en-us/HT208331 there is a reference to CVE-2017-5754 with a footnote saying "Entry added January 4, 2018" (interesting to see this "changelog" being revised as the embargo has been lifted). It says the fix is "Available for: macOS High Sierra 10.13.1, macOS Sierra 10.12.6, OS X El Capitan 10.11.6"
Re:About speculative execution vulnerabilities in ARM-based ... by notadoc on Friday January 05, 2018 @04:18PM (#16081728)
They edited the same page to remove those references. Best to assume Sierra and El Capitan are not patched until proven otherwise.

Clear as mud.