no fixes for Intel-SA-00233 vulnerability

[Stepa_ua]

Hello. I updated to the latest BIOS version 01.49 Rev.A and it looks like the old microcode is used for Haswell processors.

I would like to clarify - is this due to some problems (despite the fact that a fix was announced in BIOS version 01.48 Rev.A) or did the developers just forget to update the microcode?

The microcode version in the BIOS - (0x25)

A document from Intel indicated a newer version of the microcode (0x27)

https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode... 

[Stepa_ua]

I checked several older BIOS versions. Surprisingly, no one has yet sued HP for false update information.

Microcode for Haswell CPU (CPUID 306C3):

01.40 Rev.A - 0x16
01.43 Rev.A - 0x23 (Updates the Intel CPU microcode to provide improved stability)
01.42 Rev.A - 0x16 (Provides a rollback of the CPU microcode to the previous version to improve system stability)
01.44 Rev.A - 0x23 (Improves security for an Intel MEBx (Management Engine BIOS Extension) that is protected by an Administrator password) - instead of fixed version 0x24
01.45 Rev.A - 0x25 (Provides updated security with a new microcode version) - INTEL-SA-00161
01.46 Rev.A - 0x25
01.47 Rev.A - 0x25
01.48 Rev.A - 0x25 (Enhancement to address security vulnerabilities CVE-2018-12126, CVE-2018-12127, CVE-2018-12130.) - old microcode instead of 0x27
01.49 Rev.A - 0x25