Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
FS#61492 - [wireguard-lts] Module not compiled with retpoline compiler
Attached to Project:
Community Packages
Opened by Annonym (Hasbeen) - Monday, 21 January 2019, 15:24 GMT
Last edited by Doug Newgard (Scimmia) - Sunday, 27 January 2019, 17:43 GMT
Opened by Annonym (Hasbeen) - Monday, 21 January 2019, 15:24 GMT
Last edited by Doug Newgard (Scimmia) - Sunday, 27 January 2019, 17:43 GMT
|
DetailsDescription:
The wireguard module for LTS kernel is not compiled with retpoline compiler, which degrades system security. Additional info: * package version: 0.0.20181218-3 * config and/or log files etc: [ 13.745422] Spectre V2 : System may be vulnerable to spectre v2 [ 13.745425] wireguard: loading module not compiled with retpoline compiler. Steps to reproduce: - Install wireguard-lts on system running LTS kernel - Run # modprobe wireguard |
This task depends upon
Closed by Doug Newgard (Scimmia)
Sunday, 27 January 2019, 17:43 GMT
Reason for closing: Fixed
Additional comments about closing: wireguard-lts 0.0.20190123-2
Sunday, 27 January 2019, 17:43 GMT
Reason for closing: Fixed
Additional comments about closing: wireguard-lts 0.0.20190123-2
Comment by loqs (loqs) -
Sunday, 27 January 2019, 17:27 GMT
Please check if the issue has been resolved for you with wireguard-lts 0.0.20190123-2.
Comment by Annonym (Hasbeen) -
Sunday, 27 January 2019, 17:39 GMT
It indeed has. In any case, I haven't been sure if I'm allowed to close it myself; I usually leave it up to a package maintainer. I'm closing it right now.