Quick update re: #debian mitigations for the CPU issues:
#meltdown
> Debian kernel team has worked to mitigate Meltdown in all suites. This mitigation is currently limited to kernels running in 64-bit mode (amd64 architecture)
> wheezy, jessie, jessie-backports, stretch and unstable/sid are fixed
#spectre
> Mozilla has started mitigating Spectre in Firefox and some of these changes are now in Debian unstable (version 57.0.4-1). Chromium has also started mitigating Spectre but no such changes have landed in Debian yet.
https://www.decadent.org.uk/ben/blog/meltdown-and-spectre-in-debian.html
/via https://identi.ca/valhalla/note/vw314uRLQEWJlv0VKoxoTA