Apple security updates - Apple Support is a list of updates available. EFI is common across all OSes installed on the Mac. There is no BIOS (simulation aka CSM-BIOS) on your specific model. Specifically, it recommends to "Install BIOS/Firmware update provided by your device OEM that enables hardware support for the branch target injection mitigation." Apple now bundles EFI updates as part of macOS updates. If you are concerned, use Windows judiciously till such a patch is available, while macOS may be a better choice. If Microsoft is specifically looking for a CPU instruction change/fix, it has to wait for Apple to certify and release this to the public. Windows can also do the same and patch their browsers as the first line of defense. If the issue can be mitigated, from the OS perspective, there is no specific need for a firmware patch. There is a lot of FUD in statements like A warning regarding explanations about processor internals in this blogpost: This blogpost contains a lot of speculation about hardware internals based on observed behavior, which might not necessarily correspond to what processors are actually doing.Ībout speculative execution vulnerabilities in ARM-based and Intel CPUs - Apple SupportĪbout the security content of macOS High Sierra 10.13.2 Supplemental Update - Apple Support Description: macOS High Sierra 10.13.2 Supplemental Update includes security improvements to Safari and WebKit to mitigate the effects of Spectre (CVE-2017-5753 and CVE-2017-5715).ĬVE-2017-5715 is specific for your BTI concern. This is probably not critical on a personal desktop machine, but I would still be interested in more background information. I still believe that the iMac is not fully patched yet. You will not get an answer from Apple, till a patch is available first.
Under normal circumstances, such updates need to be tested/verified by Apple, before being provided publicly.
According to the Microsoft script they are not present on my iMac, though. I looks like the microcode updates are in principle available from Intel.
0 kommentar(er)
