Vic384
3 Zinc

XPS 8910 BIOS Update Re-posted

 XPS 8910 BIOS Version 1.1.5 has been re-posted. The version number did not change from the version that was pulled, The detail description does not describe what was changed from the pulled version, only that this version addresses the Intel ME Firmware security issue and CPU microcode to address Spectre (Variant 2).

Tags (2)
3 Replies
Caedric
1 Copper

Re: XPS 8910 BIOS Update Re-posted

Since the changelog and version number did not change, and since the size and digital signature (signed 12/13/2017) are the same as the old one, ...

... i assume they just made the old (and bugged) version available, including the (noyt fixed yet) buggy Intel microcode update on Spectre (Variant 2), CVE-2017-5715 that :

- Dell is still saying "URGENT do NOT deploy" on their own KB (see 01/22/2018 updates on both SLN308587 https://www.dell.com/support/article/us/en/19/sln308587/microprocessor-side-channel-vulnerabilities-... and SLN308237 on https://www.dell.com/support/article/us/en/19/sln308237/dell-client-statement-on-intel-me-txe-adviso... )

- and Intel says the same on website (see https://newsroom.intel.com/wp-content/uploads/sites/11/2018/01/microcode-update-guidance.pdf and https://newsroom.intel.com/news/root-cause-of-reboot-issue-identified-updated-guidance-for-customers...)

- and Microsoft did release an out of band critical update to disable any windows usage of the faulty microcode update pending a new intel patch, and Dell BIOS patch, with KB4078130 (from https://support.microsoft.com/en-us/help/4078130/update-to-disable-mitigation-against-spectre-varian... and https://www.catalog.update.microsoft.com/Search.aspx?q=KB4078130 ).

As owner of an XPS 8900 with faulty BIOS 2.2.1 that bricked my Motherboard and CPU, i cannot recommand to install this BIOS update, even if someone at Dell did push back the wrong publish button, it is NOT FIXED YET.

 

 

0 Kudos
Vic384
3 Zinc

Re: XPS 8910 BIOS Update Re-posted

First, I am in no hurry to do this update again, but the Dell's articles you linked to are old, dated shortly after Dell pulled the update around 1/22.

Second, Dell didn't indicate in their documents that the version number would change (in fact the document indicating the suspension of the update indicates the same version number for the updated BIOS) and I didn't save the digital signature so I don't know if this is a new file or not. The change log does show a new release date.

Intel mainly mentioned reboot issues with Broadwell and Haswell platforms and I only found a few mentions of newer processors but little details if the problem was as widespread.

I have an XPS 8910 that I updated prior to the BIOS being pulled and I have had no issues and have not had to install Microsoft's out of band critical update. I am disappointed that I can't determine for sure if this latest update is the same or different from the previous. Dell did state that "If you have already applied the BIOS update, please wait for further information and an updated BIOS release, no other action is recommended at this point."  I think Dell should have changed the version number, not just change the release date, but like I said in the beginning I am in no hurry to update the BIOS.

Finally, there have not been postings here of issues with BIOS version 1.1.5 for the XPS 8910 as there have been for BIOS version 2.2.1 for the XPS 8900.

0 Kudos
Vic384
3 Zinc

Re: XPS 8910 BIOS Update Re-posted

According to this article, https://www.extremetech.com/computing/263512-intel-releases-new-skylake-microcode-update-spectre-sti..., Intel released this week microcode updates for several Skylake-based platforms to OEMs. If this is true, then these BIOS updates will not be the last to address Spectre (Variant 2).