HPE Helion OpenStack / (hlinux) update on Intel Meltdown

[JeroenKleen]

HPE Helion OpenStack  update in regards to the Intel Meltdown issue is described in 2 documents:

HPE Helion OpenStack - Information and update on Intel Meltdown/Spectre:
https://support.hpe.com/hpsc/doc/public/display?sp4ts.oid=null&docLocale=en_US&docId=mmr_sf-EN_US000020250

and

HPE Helion OpenStack – Side Channel Analysis Method Allows Improper Information Disclosure in Microprocessors (CVE-2017-5715, CVE-2017-5753, CVE-2017-5754):
https://support.hpe.com/hpsc/doc/public/display?sp4ts.oid=null&docLocale=en_US&docId=emr_na-a00039782en_us

Both documents describe our go forward planning on how to patch against it.
Customers operating at a minor release (4.0) within a major release (4.x) can upgrade (when available) directly to the latest patch release. As example: 4.0 to 4.0.5, 3.0 to 3.0.6, 5.0 to 5.0.2.

For customers with compute hypervisors from SUSE SLES or redhat: see the 1st URL above to get suggestions on how patching will be available.

Whenever any update is available this forum will be updated to reflect that.
Any other questions? Feel free to post them here!

[JeroenKleen]

This URL below contains an important updated statement that should be reviewed on this subject:

http://h22208.www2.hpe.com/eginfolib/securityalerts/SCAM/Side_Channel_Analysis_Method.html

Customers upgrading their HPE Helion Openstack or HPE Helion CloudSystem 10 (based on HPE Helion OpenStack 3.x) would be strongly suggested to wait until the new ROMBIOS version is released as well.

HPE is planning to release the HPE Helion OpenStack 4.0.5 patch in the next week(s) followed by the HOS 3.0.6 release followed by the HOS 5.0.1 release.
Customers can request to be kept updated by raising an HPE Support case using this procedure: www.hpe.com/helion/support to the HPE Pointnext cloud CoE for assisance.

Best regards, Jeroen