Spectre and Meltdown

[HPSDMike]

Yes, my comment was going to be the same as Torsten. If you had 2.52 previously then you can simply use the backup ROM. Instructions for doing so can be found on page 119 of https://support.hpe.com/hpsc/doc/public/display?docId=c04398276

[PatrickLong]

Dell has not "pulled" any of their recent BIOS releases to mitigate these issues, including those for servers supporting Haswell and Broadwell procsessors.  What they did was leave the downloads available on their support site and add the following warning text on each download:

"Intel has communicated a potential issue with the microcode included in this BIOS update. This issue is currently under investigation by Intel. See Intel's statement at https://newsroom.intel.com/news/intel-security-issue-update-addressing-reboot-issues/ for more information. "

HPE has removed the option to download recent BIOS releases for Haswell/Broadwell servers from the support site; typically I have seen previous recalls implemented by changing the release date shown on the page to 1 Jan, 3000 so that they no longer appear in Support Site serach results - but in this case the updates still appear in the Support site search results with their original release date (i.e. 3 Jan 2018) but the following warning text has been added:

"REMOVED - This version of the System ROM is NO LONGER AVAILABLE for download. See Important Notes for more information."

and the download link now redirects to http://h22208.www2.hpe.com/eginfolib/securityalerts/SCAM/Side_Channel_Analysis_Method.html

[mikldk]

Perhaps you will be able to find it in a previous released HP SPP bundle?

http://h17007.www1.hpe.com/us/en/enterprise/servers/products/service_pack/spp/index.aspx

What about 2017.07.2 or 2017.04.0?

[testmado662]

Hello,

If I've alla understood, SPP to correct Spectre tghreat is not yet available ?

I don't find any download link in HPE dedicated to Spectre and Meltdown alert.

Thanks for your help

[Torsten.]

it is not yet and also no longer available. Intel stopped the published updates and is investigating.

[testmado662]

Thanks Torsten to confirm what I though after reading the post.

Regards

[Torsten.]

see

https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-a00039267en_us

http://h22208.www2.hpe.com/eginfolib/securityalerts/SCAM/Side_Channel_Analysis_Method.html

for latest information.

[Rob Leadbeater]

Has anyone seen any information yet as to whether HPE will be producing BIOS updates for retired servers, which are still supported ?

For example DL360 G7 and DL380 G7 have a retirement date of 2013-04-30 and are typically supported for 5 years after that date.

The documents linked to above, mention a mitigation section for the DL380 G7, that doesn't exist...

Obviously the answer will depend on whether Intel produce microcode updates for the particular CPU in use, but it would be useful to have a clear statement from HPE for older and retired products.

[Adrian Clint]

Its occurred to me that maybe HPE just dont know about G7 servers -because Intel are not doing them urgently.

Intel write the microcode that needs fixing - not HPE. And Intel is urgently trying to find a working fix for the CPUs that HPE use in the Gen9/Gen10 servers .. the ones that are selling or have just been sold. Then its CPUs before them (the ones in the Gen8).

Gen7 processors .... way down the list of things to spend time on, for a threat that doesnt yet exist to anyone's knowledge!

[Rob Leadbeater]

The Customer Bulletin below has now been updated to indicate which G6 and G7 ProLiants will get a BIOS update...

https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-a00039267en_us