RancherOS Security Advisory: [CVE-2017-5754, CVE-2017-5753, and CVE-2017-5715]

Announcements
1

Meltdown and Spectre are two exploits that affect nearly all devices powered by modern processors. Meltdown can be exploited by an unprivileged attacker to maliciously obtain sensitive information stored in kernel memory. Meltdown is addressed in the linux kernel 4.9.75+. We are already in the process of releasing RancherOS 1.1.3 with the updated kernel and will ship the release as soon as it is ready. Currently, Spectre is still undergoing analysis for a fix. We’ll be monitoring the progress on Spectre and will provide a release as soon as a is available upstream.

Details on the vulnerabilities can be found here:

Related RancherOS github issue:

2

Is there some machine readable way how to see security release? Some tag in release notes on GitHub? Some RSS channel?

3

Please see here how to get notifications: Getting Notifications from Rancher Announcements