Choosing the right BIOS update

[Steve-T88]

According to the HP Customer Support Software and Driver Downloads page there are a number of BIOS updates available for my desktop that look critical given that they relate to the Intel processor security issues. But:

a. The 'ROM Family' currently installed (A0.14A) is 2B52 but all the later versions have a different ROM number - does that simply reflect their different version and therefore, as they are shown as available for my PC, they are all appropriate for download?

b.  Their are three later versions available (A0.17, A0.18 and A0.20) but the first two have release dates that are after that for what I assumed is the latest revision (A0.20) - so which is the most up-to-date?

Thanks!

S

[mdklassen · Accepted solution]

From: HP Consumer Desktop PC BIOS Update (ROM Family SSID 2B52)

VERSION: A0.14 REV: A PASS: 1

DESCRIPTION: This package provides an update to the HP Consumer Desktop PC BIOS (ROM Family 2B52) for supported models running a supported operating system

SOFTPAQ FILE NAME: SP79255.exe
SUPERSEDES: SP77776,sp73358
EFFECTIVE DATE: March 07, 2017
CATEGORY: BIOS

PRODUCT TYPE(S):  Desktops;Workstations;Consumer Desktops

HARDWARE PRODUCT MODEL(S): HP ENVY 750-0xx Desktop PC / HP Pavilion 550-0xx Desktop PC

OPERATING SYSTEM(S): Microsoft Windows 10 32 / Microsoft Windows 10 64

ENHANCEMENTS: Improved security of UEFI code and variables.

HP strongly recommends promptly transitioning to this updated BIOS version which supersedes all previous releases.

NOTE: Due to security changes, after this BIOS update is installed, previous versions cannot be reinstalled.

______________

I cannot find any HP document where "SUPERSEDES" and "SP79255" are referenced.

So, by that, I presume that this SoftPaq is the most-recent for your motherboard.

-----------
Welcome to this forum.

Please click the purple/white "Thumbs Up" icon for every response that is helpful.

Also, please click "Accept As Solution" for the best response.

[Steve-T88]

M

Thank you for this rapid and conclusive advice. I'm surprised that there isn't an update, given how widespread the processor security problems were but maybe it simply isn't needed for my m/b. I'm also surprised that having entered the specific details of my desktop into the Support page that I get offered 'updates' that are simply not relevant! 

Frustrating but this query is apparently resolved. I'll mark it as such.

 Thank you.

S

[mdklassen]

> I'm surprised that there isn't an update, given how widespread the processor security problems were but maybe it simply isn't needed for my m/b.

The "Meltdown" and "Spectre" vulnerabilities exploited the processor, not the motherboard.

It is my impression that Intel (and vendors like HP & Lenovo & ASUS) seem to be working "backwards" with remediation for those vulnerabilities:

* first, fixing their brand-new products,

* second, fixing their 2017 products,

* third, fixing their 2016 products,

* fourth, fixing their 2015 products,

* fifth, fixing their 2014 products.

What is the "vintage" of your computer?

Also, see: https://support.hp.com/us-en/document/c05869091

SUPPORT COMMUNICATION- SECURITY BULLETIN
Document ID: c05869091
Version: 13
HPSBHF03573 rev. 13 - Side-Channel Analysis Method
Notice:: The information in this security bulletin should be acted upon as soon as possible.
Release date : 04-Jan-2018
Last updated : 21-May-2018

for the latest list of remediated HP systems.

[mdklassen]

From: HP Pavilion Desktop - 550-100na (ENERGY STAR) PC Product Specifications

Product Number: P1J97EA
Release Date: 16-Jun-2016
Country/Region Sold In: United Kingdom

gives an idea of the "vintage".

[Steve-T88]

I purchased this desktop in January 2017 but I guess it being already 7 months old then explains why I got a good deal! So I shouldn't be expecting a BIOS update anytime soon.....

[mdklassen]

---

@Steve-T88 wrote:

I shouldn't be expecting a BIOS update anytime soon.....

---

That HP web-page lists:

HP Pavilion 500-xxx (ROM Family SSID 2AF7)
 Pending

HP Pavilion 500-xxx (ROM Family SSID 2B2C)
 A0.17
 Pending
 
HP Pavilion 550-xxx (ROM Family SSID 2B2C)
 A0.17
 Pending

Not a match for your SSID, but "evidence" that HP (and AMD) are in the process of remediating other models of the "Pavilion 500".