Meltdown/Spectre Intel bug

[89u2]

I have downloaded and installed:

https://www.catalog.update.microsoft.com/Search.aspx?q=KB4056897

I have applied the registry I am using Avast:

https://forum.avast.com/index.php?topic=212648.msg1439270#msg1439270

please i would like to know do we microupdate have for my PC?

[89u2]

bump still waiting for reply

[SDH]

Are you aware this is a user's group?  We're users here, not HP staff.

Agree with you that it would be great to hear officially from HP on the issue.  Meanwhile, thanks for the link to the MS KB patch update.  Sounds like for W10 that will come automatically and for W7 it will come with the Patch Tuesday coming up.  Or, one can download it from Microsoft via your link and install now (which is what I did).

While this is not the path to officially communicate with HP, they sometimes do look in here to see what trouble we're up to.

🙂

[RichAnt]

NOTE TO WIN XP, 8.1 and 10 USERS

89U2's link is for Windows 7 and AVAST, so don't use them.

Windows 10 automatically updates (user has no choice).

Google search finds the following items:

-MS issued Win 10 release dated 01-03-18:  January 3, 2018—KB4056892 (OS Build 16299.192)

-My HP Pavilion Desktop and Laptop use AMD processors, which apparently are not exposed to the meltdown/spectre vulnerabilities.

-My Webroot prevents the patch  from downloading.

[SDH]

We use a corporate version of Sophos for antivirus protection here......

89U2's link for the Windows update is not just for Avast.  It is for any workstation that will accept it, and if you read the information from Avast carefully the key thing is whether the registry setting in an Avast install is proper or not.

This specifically does not mean that the Windows KB updater will not work on a workstation OS running with a non-Avast antivirus install.  It worked fine on all my W7Pro64 installs running with Sophos antivirus.  I never have installed Avast, and KB405687 shows up as a successful update now in my "Review Your Update History" listing.

My advice: 

1.  Thank you, again, to 89U2

2.  Update your antivirus program, whatever it is, so the necessary registry entry has the highest liklihood of being triggered to a proper value.  This registry setting has to do with letting the OS know that antivirus protection is actually being provided by a non-MS source.

3.  Download from the link provided by 89U2 from Microsoft (you'll have to choose the proper download from that link).

4.  Or, wait for this upcoming Patch Tuesday from Microsoft.  That will be more automated.

Note that the MS link provides a software patch, and if there is also a firmware patch it will come out later.  FYI, HP has released microcode-only updates in the past, but generally these are integrated in to a BIOS update.

[89u2]

i mean do we have BIOS firmware update available to download?

i have ROM Firmware for HP Compaq dc7800 (786F1) v01.35 Rev.A

[SDH]

You have the latest BIOS version (1.35) but there is a "Microcode update for HP 786F BIOS family computers with Intel processors" version 1.14 to apply if you have not done so.

Yours is listed in the hardware list as "HP Compaq dc7800 Small Form Factor PC: All Models".

It was released 12/21/10 via SP51245, so it has nothing to do with this current issue.  I'd run that if you have not already.

[89u2]

sorry for delay

where i can find and download "Microcode update for HP 786F BIOS family computers with Intel processors" version 1.14?

[SDH]

Use google to search for "HP Compaq dc7800 small form factor PC - software and drivers" or go  HERE.

The HP method detects your current OS and defaults to that, but you could change from that OS to another one by using Change.  For BIOS/Microcode updates you can update from within BIOS and the Softpaq tells you how.

The HP method defaults to Software and Drivers.... click on Go.

Go down to BIOS section.  Note that the Microcode update is 12/21/10 while the "ROM Firmware...." is dated 11/27/15.  The microcode updates from HP only rarely have come as an independent Softpaq from HP.  They usually have been integrated into the BIOS updates (the ROM Firmware).  Microcode updates have been small compared to the full BIOS update (0.4 MB versus 6.3 MB in this case).

Thus I believe you already are updated to both the latest BIOS and the latest Microcode if you have BIOS version 1.35.  A microcode update updates the firmware on your Intel processor.

I wonder..... because a microcode firmware updater that is built into a BIOS updater updates the firmware physically on the processor and the other parts of the BIOS updater updates the firmware of the BIOS on the motherboard would it be wise to rerun the latest BIOS updater whenever we upgrade the processor(s) in our workstations?  This would ensure that the firmware both places gets upgraded.

I think so.......

[89u2]

https://support.hp.com/us-en/document/c05869091