I wasnt able to find an official statement from UP on wether the Up Board is affected by the security breaches.
If there is a affected product, when will we get updated BIOS?
I second JD86.
According to this checker script my upboard (running Debian) is vulnerable, at least to Spectre (see screenshot).
As multiple UpBoards are probably affected by this (at least the Up Core shares the same vulnerable CPU) it would be nice to have a roadmap when a fix for which board is planned.
In the mean time, tricks/other ways to minimize the risk of those vulnerabilities (except for keeping the system updated) are welcome.