ProLiant Servers (ML,DL,SL)
1748166 Members
3754 Online
108758 Solutions
New Discussion юеВ

Re: DL360 Gen9 firmware update for meltdown/spectre?

 
Denis_Dordoigne
Occasional Visitor

Re: DL360 Gen9 firmware update for meltdown/spectre?

Last bulletin provide a solution for Gen8 servers, ┬л update to a System ROM version dated 12/12/2017 ┬╗, but the latest system ROM avaiable is dated 24 Oct 2016...

Torsten.
Acclaimed Contributor

Re: DL360 Gen9 firmware update for meltdown/spectre?

It alwas takes a few days until a published version appears on the web pages. The Gen9 and Gen10 updates are obviously already available.


Hope this helps!
Regards
Torsten.

__________________________________________________
There are only 10 types of people in the world -
those who understand binary, and those who don't.

__________________________________________________
No support by private messages. Please ask the forum!

If you feel this was helpful please click the KUDOS! thumb below!   
simonb
Occasional Visitor

Re: DL360 Gen9 firmware update for meltdown/spectre?

When adding this patch for vmware hosts to SUM - I just get component not signed and cannot progress further...any thoughts?

AlecKeeler
Advisor

Re: DL360 Gen9 firmware update for meltdown/spectre?

Seems a bit wrong for a security vulnerability to announce it as available then have a process where it takes days for it to be available to download from the support website. If its critical as described by HP in the bulletin it should be available as soon as possible

 

Alec Keeler, release engineer Nexor

AlecKeeler
Advisor

Re: DL360 Gen9 firmware update for meltdown/spectre?

From https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-a00039267en_us

"For ProLiant Gen8 series servers, update to a System ROM version dated 12/12/2017."

Is there a direct link available to be able to download this BIOS ?

Alec Keeler, release engineer, Nexor Ltd

tato386
Advisor

Re: DL360 Gen9 firmware update for meltdown/spectre?

Did they pull the 2.54 BIOS?  I can get to the page but there is no download button?

Thanks,
Diego
AlecKeeler
Advisor

Re: DL360 Gen9 firmware update for meltdown/spectre?

Yep apparently Intel changed some microcode

https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-a00039267en_us

Currently they are saying roll back to 2.52 if you did put 2.54 on

Alec

JeroenKleen
Frequent Advisor

Re: DL360 Gen9 firmware update for meltdown/spectre?

At this moment it might be good to wait as we might be releasing very soon a new ROMBIOS fix: http://h22208.www2.hpe.com/eginfolib/securityalerts/SCAM/Side_Channel_Analysis_Method.html


Best regards, Jeroen

Working at HPE Pointnext Cloud CoE as HPE OneSphere multi-cloud Evangelist
AlecKeeler
Advisor

Re: DL360 Gen9 firmware update for meltdown/spectre?

Thanks for the update, so still waiting for the new BIOS,

RedHat by the way have RHSA's available now for RHEL 6 and 7, the ones for the Extended Life Cycle Support for RHEL5 are still pending

https://access.redhat.com/security/vulnerabilities/speculativeexecution

Our products are RHEL appliances on DL360 platforms, we span from G5 to Gen9 on the hardware (mostly 8 &9) and RHEL5 and RHEL6 for the OS, hence our interest in resolving this

Alec