https://community.nxp.com/thread/467234 (2018-01-11) basically says NXP will work with customers privately and end users should contact their OEMs.
https://puri.sm/posts/purism-patches-meltdown-and-spectre-va... appears to only cover Intel CPUs.
i.MX8M will use Cortex-A53 cores so is not affected by spectre.
EDIT: Clarified that i.MX8M only has Cortex-A53 cores. Some i.MX8 parts will have Cortex-A72 cores which are affected by spectre. i.MX8M is the version discussed by Purism's post.
i.MX8M will use Cortex-A53 cores so is not affected by spectre.
EDIT: Clarified that i.MX8M only has Cortex-A53 cores. Some i.MX8 parts will have Cortex-A72 cores which are affected by spectre. i.MX8M is the version discussed by Purism's post.