有关Azure中的L1TF/Forshadow缓解的信息 [英] Information regarding L1TF / Forshadow mitigation in Azure

问题描述

嗨！

我正在努力寻找有关如何在Azure服务中实施缓解L1TF/Forshadow攻击的任何官方信息.

I'm struggling to find any official information regarding how mitigation against L1TF/Forshadow attacks is implemented across Azure Services.

英特尔和合作伙伴昨天发布了有关L1TF的信息:
https://www.intel.com/content/www/us/zh/architecture-and-technology/l1tf.html

Information about L1TF was released by Intel and partners yesterday:
https://www.intel.com/content/www/us/en/architecture-and-technology/l1tf.html

我们正在使用多个Azure服务(SQL，应用程序服务，VM规模集，Redis，ASE，CosmosDB等)，最近还没有进行过任何维护工作(例如重新启动VMSS节点).

MS是否有有关L1TF的已实施和计划的安全补丁的详细信息?

We are using multiple Azure Services (SQL, App Services, VM Scale Sets, Redis, ASE, CosmosDB and many more) and have not experienced any maintanence work (such as reboots of our VMSS nodes) lately.

Does MS have any detailed information regarding already implemented and planned security patches regarding L1TF?

推荐答案

安全公告 描述 缺陷和包含技术细节.它已经发布了一些更新，这些更新应该可以减轻Foreshadow的影响. 在两种消费设备及其 Azure云服务.看看是否有帮助.

Microsoft has officially published both a security advisory describing the flaws and a blog post containing technical details. It has released several updates that should mitigate Foreshadow on both consumer devices and on its Azure cloud services. See if this helps.

--------------- -------------------------------------------------- ------------------------------

如果此答案有帮助，请单击标记为答案"或投票.要提供有关您的论坛体验的其他反馈，请单击

If this answer was helpful, click "Mark as Answer" or Up-Vote. To provide additional feedback on your forum experience, click here.

这篇关于有关Azure中的L1TF/Forshadow缓解的信息的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！