Re: Compiler with Spectre mitigation retpoline/-mindirect-branch=thunk
- Date: Wed, 31 Jan 2018 10:57:51 +0800
- From: Paul Wise <pabs@xxxxxxxxxx>
- Subject: Re: Compiler with Spectre mitigation retpoline/-mindirect-branch=thunk
On Tue, Jan 30, 2018 at 3:43 PM, Robin Geuze wrote:
> I was wondering, are the debian maintainers planning on backporting the
> -mindirect-branch=thunk support introduced in GCC 7.3 and 8.1 to the
> compilers available on Jessie and Stretch? While this is not necessarily a
> security fix for the compiler it does provide that fix to at least kernels
> compiled using it.
This sounds like a question for the Debian security team:
That said, I believe they are testing these CPU security issue mitigations.