<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jan 11, 2018 at 4:33 PM, Derek Atkins <span dir="ltr"><<a href="mailto:derek@ihtfp.com" target="_blank">derek@ihtfp.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">Yaniv Kaul <<a href="mailto:ykaul@redhat.com">ykaul@redhat.com</a>> writes:<br>
<br>
> On Mon, Jan 8, 2018 at 7:32 PM, Derek Atkins <<a href="mailto:warlord@mit.edu">warlord@mit.edu</a>> wrote:<br>
><br>
> Michal Skrivanek <<a href="mailto:michal.skrivanek@redhat.com">michal.skrivanek@redhat.com</a>> writes:<br>
><br>
> > > If there are Patches nessessary will there also be updates<br>
> for<br>
> > ovirt 4.1 or<br>
> > > only 4.2?<br>
> ><br>
> > 4.1 will be covered<br>
><br>
> What about 4.0? Or will that not be covered because it depends on 7.3,<br>
> which also isn't covered??<br>
><br>
> It will not be covered because we have 4.1 and 4.2 out, both of which we take<br>
> care of.<br>
<br>
</span>I was afraid of that. So I will need to upgrade to at least 7.4/4.1 to<br>
get this fixed. I'll need to find some time to do that. :(<br>
<br>
My users don't like having downtime.. and this is a single-host system.<br></blockquote><div><br></div><div>No one likes downtime but I suspect this is one of those serious vulnerabilities that you really really must be protected against.</div><div>That being said, before planning downtime, check your HW vendor for firmware or Intel for microcode for the host first.</div><div>Without it, there's not a lot of protection anyway. </div><div>Note that there are 4 steps you need to take to be fully protected: CPU, hypervisor, guests and guest CPU type - plan ahead!</div><div>Y.</div><div><br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
> Y.<br>
<span class="HOEnZb"><font color="#888888"><br>
-derek<br>
<br>
--<br>
Derek Atkins <a href="tel:617-623-3745" value="+16176233745">617-623-3745</a><br>
<a href="mailto:derek@ihtfp.com">derek@ihtfp.com</a> <a href="http://www.ihtfp.com" rel="noreferrer" target="_blank">www.ihtfp.com</a><br>
Computer and Internet Security Consultant<br>
</font></span></blockquote></div><br></div></div>