[OE-core] Yocto Project, Spectre and Meltdown

[Khem Raj]

On Sat, Jan 27, 2018 at 8:59 AM, Manjukumar Harthikote Matha
<MANJUKUM at xilinx.com> wrote:
> Hi RP,
>
>> -----Original Message-----
>> From: openembedded-core-bounces at lists.openembedded.org
>> [mailto:openembedded-core-bounces at lists.openembedded.org] On Behalf Of
>> Richard Purdie
>> Sent: Saturday, January 27, 2018 8:36 AM
>> To: openembedded-core <openembedded-core at lists.openembedded.org>
>> Subject: Re: [OE-core] Yocto Project, Spectre and Meltdown
>>
>> On Tue, 2018-01-16 at 11:38 +0000, Richard Purdie wrote:
>> > I just wanted to give people an update on where the project stands
>> > with these issues.
>>
>> Master now contains gcc and kernel fixes (in linux-yocto). meta-yocto- bsp updates
>> are still pending.
>>
>> rocko-next also has those fixes and is undergoing testing which if it passes, will get
>> pushed to rocko.
>>
>
> I see that rocko-next branch is upgrading the GCC version to 7.3 from 7.2 , is there a reason to do so?
> I was under the impression that we would backport the security fixes to 7.2 version.
>

point releases are bugfix releases of gcc, I think you can look at it
as cumulative bugfixes backport.

If you are concerned about some of the fixes in this

https://gcc.gnu.org/bugzilla/buglist.cgi?bug_status=RESOLVED&resolution=FIXED&target_milestone=7.3

please let us know.

-Khem