12472 2018-01-10 17:31:55 +0000 webkitgtk is vulnerable to Meltdown and Spectre defects 2018-01-15 10:26:55 +0000 1 1 7 Build System, Metadata & Runtime OE-Core graphics 2.5 x86 Multiple RESOLVED FIXED High normal 2.5 M2 1 randy.macleod alex.kanavin meta.mr.watcher meta.watcher --- --- Don't know oldest_to_newest 78996 0 randy.macleod 2018-01-10 17:31:55 +0000 webkit[gtk], is vulnerable to some new CVEs as explained here: https://webkit.org/blog/8048/what-spectre-and-meltdown-mean-for-webkit/ "WebKit is affected because in order to render modern web sites, any web JavaScript engine must allow untrusted JavaScript code to run on the user’s processor." and here: https://webkitgtk.org/security/WSA-2018-0001.html There has been an update to webkitgtk: https://webkitgtk.org/2018/01/10/webkitgtk2.18.5-released.html so the master branch should pick that up and see if the high res timer resolution degradations and other changes have any impact on our tests. We should decide what to do for previous releases since webkit does not appear to provide a git repo and simply recommends upgrading to the latest release to fix CVEs. 78998 1 randy.macleod 2018-01-10 17:34:40 +0000 *** Bug 12471 has been marked as a duplicate of this bug. *** 79056 2 alex.kanavin 2018-01-12 16:22:45 +0000 Patches for master, rocko, pyro and morty all sent to oe-core list.