Why BIOS v02.62 for Z840 is recalled?

[Keelung]

Hi,

About several weeks or months ago, I downloaded and updated BIOS v02.62 for Z840.

But now the latest BIOS for Z840 is v02.61. I also check OS Independent, Win10, Win11 and Linux, no v02.62 available.

So, what's happened to  v02.62 BIOS and why it's recalled ? Should I rollback to v02.61 ?

Thanks !

[DGroves]

the bios ver can also be found under the

 "system Information" tab in the bios

some people seem to have had issues with 2.62 causing a no boot problem

my advice is that if 2.62 is working fine leave it as is

downgrading it may cause major problems for you

according to HP the only major change from 2,61 to 2.62

was a security related issue

specifically: 

HP Workstation BIOS Arbitrary Write Security Update

CVE ID: CVE-2023-6138

https://support.hp.com/us-en/document/ish_10167884-10167908-16/hpsbhf03915

[Keelung]

---

@DGroves wrote:

some people seem to have had issues with 2.62 causing a no boot problem

---

Thus the boot issues should be fixed and then release a new version.

Since it's recalled, then leaving CVE-2023-6138 no fix ?

Just recalling and no releasing is not a responsible behavior.

[SDH]

Carefully read the links DGroves provided. Lots of us are still using 2.62 and it works fine. You can still find it from HP and install it, links below. I do that my way, from within BIOS (PDF provided in my top link):

https://h30434.www3.hp.com/t5/Business-PCs-Workstations-and-Point-of-Sale-Systems/Should-I-update-th...

The ReadMe from HP:

https://ftp.hp.com/pub/softpaq/sp151001-151500/sp151054.html

The SoftPaq from HP:

https://ftp.hp.com/pub/softpaq/sp151001-151500/sp151054.exe

[Keelung]

---

@SDH wrote:

Carefully read the links DGroves provided. Lots of us are still using 2.62 and it works fine. You can still find it from HP and install it, links below. I do that my way, from within BIOS (PDF provided in my top link):

DGroves links are about the CVE and HP's response.

The point is about releasing updated BIOS in the production driver download page:

https://support.hp.com/us-en/drivers/hp-z840-workstation/6978842

It still now shown in above page. If it isn't shown, it's not released for most of users.

As described by DGroves, v2.62 brings some boot issues.

So, please HP fix them and then release it in the production driver download page. 

It takes too long time to release, more then one year. 

Since v2.62 released, and then recalled, please re-release a new one in the production driver download page.

Or most of users, Z840 users at least, are influenced by that CVE.

[SDH]

Keelung,

I do agree that HP could do a better job of clarifying what is going on with that.  This is one of those situations where we need to make our own decisions on how to proceed. I prefer the latest 2.62 BIOS, which HP still provides via their FTP servers via the links I posted above (same SoftPaq for the Z440/Z640/Z840).

Similar, I prefer to install Windows 11 24H2 on these fine workstations even though they are not officially Microsoft-certified for that. The Microsoft engineers could cut that off, but they don't. I'll let others do what they wish, and let HP catch up with us later. I understand that HP has to move on from these older workstations and appreciate any help they still can provide.