Unable to find system rom for HP DL360 Gen8, To mitigate CVE-2017-5715, CVE-2017-5753, CVE-2017-5754

[ChristianMe]

According to HPE's advisory, system rom should have been released for DL360 Gen8 models. Problem is, i can't find them?

Anyone found the bits?

Reference:
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-a00039267en_us
- "For ProLiant Gen8 series servers, update to a System ROM version dated 12/12/2017"

Searched phrase i've used on the site (https://support.hpe.com/hpesc/public/home)
"HP DL360 Gen8 System rom" (also tried without "System Rom" and selected Model name + filtered bios & System rom from the sub category.)

[HPSDMike]

I believe the date is incorrect in that bulletin. 

The BIOS update should show when searching the HPE Support Center for DL360 Gen8 software and having the "BIOS" checkbox checked

https://support.hpe.com/hpesc/public/home/driverHome?sp4ts.oid=5194968 

According to this bulletin, it appears the target release date is 1/12/2018; please keep checking 

[ChristianMe]

I see, not released yet even though the initial information page said it was.. :)

I'm guessing the product teams have their hands full theese days.

[Tech_1234]

I logged a support request to HPE as i also couldn't locate the System ROM download on the product page. They've confirmed their Spectre advisory states it's available, however it didn't seem like it was even available interally (unless it was released and pulled..) as he said he'll grab it and make it available via FTP. I'll update you if i recieve the download location.

[gr8Trogdor]

I have the same problem looking for DL580 Gen8 updates based on the same document.  Any update when these updates will be released for Gen8?

[WYSI]

Is there any progress on this? are my DL360P GEN8 servers going to get a rom update?

[Torsten.]

As soon as Intel deliveres ...

see

http://h22208.www2.hpe.com/eginfolib/securityalerts/SCAM/Side_Channel_Analysis_Method.html