Debian Patching for Spectre / Meltdown

[iron]

Can we get an official word on where 3CX stands with Debian OS patching for the 3CX managed installs?

Additionally, (and it may be too soon to tell) but I would be interested to know how this patch affects CPU performance.

 

[StefanW]

the CVEs in relations are:

https://security-tracker.debian.org/tracker/CVE-2017-5753
https://security-tracker.debian.org/tracker/CVE-2017-5754
https://security-tracker.debian.org/tracker/CVE-2017-5715

All state: to an attacker with local user access

the main benefit is that there is no local access to the platform and you dont share resources with others. ours is 100% yours. this removes the biggest issue already for your security. Once tested and proven solutions are provided by Debian, surly they will be applied via 3CX team, so nothing to do for you and as a managed service we will take care of it.

Side affects are currently a slower system due to the nature of the issue. As the issue in this case are not as urgent (dont get me wrong, they need to be dealt with as soon the time is right) as they might be for others, we have time to evaluate all cases with time & care before we role out.