Quick update re: #debian mitigations for the CPU issues:

#meltdown

> Debian kernel team has worked to mitigate Meltdown in all suites. This mitigation is currently limited to kernels running in 64-bit mode (amd64 architecture)

> wheezy, jessie, jessie-backports, stretch and unstable/sid are fixed

#spectre

> Mozilla has started mitigating Spectre in Firefox and some of these changes are now in Debian unstable (version 57.0.4-1). Chromium has also started mitigating Spectre but no such changes have landed in Debian yet.

https://www.decadent.org.uk/ben/blog/meltdown-and-spectre-in-debian.html

/via https://identi.ca/valhalla/note/vw314uRLQEWJlv0VKoxoTA