Windows Client Guidance against speculative execution vulnerabilities

xips said:

I contacted Gigabyte regarding a MB for a system that showed no update available nor anything in the pipe. They privately linked me to the BIOS/UEFI update. Win 7 system and it is not slow...yet.

Attachment 187125

Lenovo made updates available for Sandy Bridge laptops ready a couple of months ago. Haven't patched them yet.

Gigabyte support sent me BIOS updates for two PCs I support. These do work vs. Spectre. However, Gigabyte have not yet posted updates on their support site.

Polo6RGTI said:

Exclusive: Spectre-NG - Multiple new Intel CPU flaws revealed, several serious | c't Magazin

It sounds like next week's Patch Tuesday has more to do with this than fixes for 1803.

Hi,

Ground Sloth said:

It sounds like next week's Patch Tuesday has more to do with this than fixes for 1803.

Seems like way too fast to have a patch ready by then.

Cheers,

fdegrove said:

Hi,



Seems like way too fast to have a patch ready by then.

Cheers,

According to reports, Intel and Microsoft (and probably other companies) have known about these new speculative execution exploits since at least early February.

Intel has confirmed the reports, but they aren't saying much.

Addressing Questions Regarding Additional Security Issues

Protecting our customers’ data and ensuring the security of our products are critical priorities for us. We routinely work closely with customers, partners, other chipmakers and researchers to understand and mitigate any issues that are identified, and part of this process involves reserving blocks of CVE numbers. We believe strongly in the value of coordinated disclosure and will share additional details on any potential issues as we finalize mitigations. As a best practice, we continue to encourage everyone to keep their systems up-to-date.

https://newsroom.intel.com/articles/...curity-issues/

tomseys said:

@IronZorg89

I was a little bored so I asked about your model on the HP Forum.
An assistant there said that any model listed on this page as pending can expect to receive a bios update:

HPSBHF03573 rev. 13 - Side-Channel Analysis Method | HP® Customer Support

Your model should be one of these depending on the ROM Family SSID:



You can find the ROM Family SSID in the bios under system information.
Look for System Board ID (SSID).

Added: Actually, based on the info here and here, under Motherboard description, it appears your SSID is 2AF7. Might want to double check.

So you may want to keep an eye on that page for the update.

HP forum thread:

Solved: Bios update that addresses "Spectre" for HP Envy 700-329? - HP Support Forum - 6679694

Solved: Bios update that addresses "Spectre" for HP Envy 700-329? - Page 2 - HP Support Forum - 6679694

Thanks so much for providing this info with regard to my SSID. You guessed it right, it is 2AF7 for my HP Envy 700-329. As per your suggestion, I will keep an eye on the page you have referred to.