Fedora and the MDS CVEs
For those of you wondering the Fedora status of the MDS CVEs that went
public on Tuesday. Here is where we stand:
kernel-5.0.16 and microcode_ctl-2.1-29 contain the initial mitigations
for kernel/microcode, and are in stable updates for F29 and F30, The
kernel is still in updates-testing for F28 as it needs karma, but
should make it to regular updates soon.
libvirt and qemu have updates in updates-testing across all releases.
F29 and F30 updates will push to stable today, and F28 still needs
karma.
All updates, once they hit stable, may take a day or two to reach all
mirrors, so if you do not see it available, you can keep trying, or go
directly to the main mirror.
If you do not know what the MDS CVEs are, or would like more
infomation on them, there is a good write up at
https://access.redhat.com/security/vulnerabilities/mds
Thanks,
Justin