Koozali.org: home of the SME Server

Contribs.org Forums => General Discussion => Topic started by: holck on January 20, 2018, 11:01:02 AM

Title: No firmware-updates for HP ProLiant MicroServer - should I worry?
Post by: holck on January 20, 2018, 11:01:02 AM: I have SME running on a HP ProLiant MicroServer and it works very well. But I haven't been able to find firmware-updates for it, ment to deal with the recent "Spectre" and "Meltdown" vulnerabilities. Should I worry?

/Jesper Holck, Denmark
Title: Re: No firmware-updates for HP ProLiant MicroServer - should I worry?
Post by: ReetP on January 22, 2018, 07:17:42 PM: More discussion in this thread

https://forums.contribs.org/index.php/topic,53476.0.html

Clearly the OS people are trying to wash their hands of it.

My biggest concern is whether HP will do patches only for 'supported' equipment (in warranty or paid for warranty as per their other updates)

Knowing those HP b*stards that will probably be the case.....
Title: Re: No firmware-updates for HP ProLiant MicroServer - should I worry?
Post by: ReetP on January 22, 2018, 07:24:26 PM: Thread

https://www.reddit.com/r/sysadmin/comments/7pxdg4/hps_reaction_to_the_meltdown_spectre_disqualifies/
Title: Re: No firmware-updates for HP ProLiant MicroServer - should I worry?
Post by: ReetP on January 22, 2018, 07:28:51 PM: You get the drift:

https://community.hpe.com/t5/ProLiant-Servers-ML-DL-SL/Spectre-and-Meltdown/td-p/6992985
Title: Re: No firmware-updates for HP ProLiant MicroServer - should I worry?
Post by: CharlieBrady on January 22, 2018, 09:45:36 PM: Quote from: holck on January 20, 2018, 11:01:02 AM
I have SME running on a HP ProLiant MicroServer and it works very well. But I haven't been able to find firmware-updates for it, ment to deal with the recent "Spectre" and "Meltdown" vulnerabilities. Should I worry?

You should only worry about Spectre and Meltdown if you allow attackers to run code on your CPU. If you do that already, you already have reasons to worry, beyond just Spectre and Meltdown.