January 3, 2018 - KB4056897 (Security-only update) Windows 7

[michael diemer]

I have an AMD Athlon 64X2 6000+ CPU. Computer is a Gateway GT5656. 6150se chipset.

I'm doing my best to comprehend this situation. I have installed the Microsoft fix so that this update does not render my computer unbootable. However, I'm reluctant to install it. I have never updated my bios, never had a need to. Is this something I should do first (or at all?). I have made a system image. I have checked that I have the correct registry key. My only AV is MSE. Safe to proceed?

Edit: I also have the workaround if this renders my computer unbootable.

 

[Anak]

Hi,

I have an AMD Athlon 64X2 6000+ CPU. Computer is a Gateway GT5656. 6150se chipset.
I'm doing my best to comprehend this situation.

I have installed the Microsoft fix so that this update does not render my computer unbootable. However, I'm reluctant to install it.

I have never updated my bios, never had a need to. Is this something I should do first (or at all?). I have made a system image. I have checked that I have the correct registry key. My only AV is MSE. Safe to proceed?

Edit: I also have the workaround if this renders my computer unbootable.

• At the parts that I embolden did you mean you downloaded the fix and are reluctant to install, is this KB4073578?

• How old is your Gateway?

• Are you aware that Acer bought out Gateway?

• I didn't see your gt5656 on this list.

• I've never had to update my BIOS but I have a need now.

• Most if not all users are installing the Meltdown part first, the Spectre part is taking a bit longer to get around.

• It's good that you do have backups.

If Acer doesn't come up with a fix for my Gateway I'll find something from Intel, for now I'm using the Gateway Updater to check if there is. but I'm not holding my breath because it looks like both our machines are EOL (end of life) as far as Acer is concerned.

Here's two posts of mine that may help clear things up, they are from another thread, if you want to see the whole thread click on the orange dot next to my name; Anak.

Hi, montecarlo87,

I'm in the same boat as you. I have a 7year old Gateway DX4831-01e that is EOL and it to runs like a champ, all I can do for now is apply the recent patches that WU (windows update) sends me for the meltdown part of the Intel problem.

Here's what you need to understand:

• Meltdown and Spectre are the two labels applied to the Intel problem.

• Meltdown is being handled by MS (Microsoft) and WU.

• Spectre is being handled by the OEM of each individual user(s) machine(s) because it involves the Intel ME (management engine) and WU can't touch that.

How do you handle your windows updates, have you seen either KB4056894 or KB4056897? You can apply either one to harden your machine. Make sure your OS, AV and browser is up to date.

The one item that I haven't heard anything at all about is; What about all those brand new machines that are sitting in the big box stores that unsuspecting buyers will purchase, are they being alerted before they buy? I could just imagine the drop in sales.
In my opinion they should all be sent back to the OEM to apply the patches, but I'll bet you'll never see that happen.

I'm also waiting for those geek thinkers to come up with an answer, if I hear of anything I'll let you know.

You're welcome, thank you for the rep!

I'd like to add a caveat to one of my earlier statements:
I'm seeing grumblings that WU could do the spectre updates but, MS and WU would have to work together with Intel and their code to receive the patches, so far Intel is reluctant to reveal their code and don't forget the OEM's, and how they along with Intel massage the Intel code to suit the individual aims of the OEM's.

It would be: MS + Intel + OEM's working together to achieve a fix that wouldn't greatly impact the consumer, but I'm not going to hold my breath because corporate pride would invariably get in the way.

I ran the InSpectre tool and had the same results as you.

 

[antioch]

Hi Anak
Had a good weekend away - had a bit of snow - not as much locally as the last two times.
Nothing has been showing in the event log - so far.
However was greeted with lots of updates - the re-issue of 4055532[re-installed] & 4056894[hidden again]. 4056897 seems to have been OK.
Plus I got all hidden/unwanted updates back on offer[52 - they cover the last 12 months] so had to hide again - this is the fourth time I have had this happen in 12 months[used to happen with XP].
BIOS 3061 update is done. There will be others probably so will keep an eye on that.

Fingers crossed as the February black Tuesday will soon be here.

 

[michael diemer]

Hi,

• At the parts that I embolden did you mean you downloaded the fix and are reluctant to install, is this KB4073578?

• How old is your Gateway?

• Are you aware that Acer bought out Gateway?

• I didn't see your gt5656 on this list.

• I've never had to update my BIOS but I have a need now.

• Most if not all users are installing the Meltdown part first, the Spectre part is taking a bit longer to get around.

• It's good that you do have backups.

If Acer doesn't come up with a fix for my Gateway I'll find something from Intel, for now I'm using the Gateway Updater to check if there is. but I'm not holding my breath because it looks like both our machines are EOL (end of life) as far as Acer is concerned.

Thank you Anak for your reply. To answer your questions, yes I have installed the patch which supposedly fixes the makes the Meltdown update safe (KB4073578). I have not yet installed the actual Meltdown fix (KB4056897).

Yes I know Gateway was acquired by Acer. My computer is about 10 years old, but is a workhorse. I have three Linux OS's on it as well.

I have printed out the instructions to boot if the patch causes the BSOD.

In spite of all this, I remain hesitant. My gut just tells me to wait. I don't actually use this Windows much. In fact, I mainly use it to test Windows updates before putting them on my wife's computer (which has Intel, so this update shouldn't be a problem). Since my use of this computer is limited, I wonder if the fix is worth the trouble. I am on Linux 95% of the time, and they are providing their own patches.

 

[michael diemer]

I decided to give it a go, and - it worked! No problems at all.

So, at this point I have taken care of the Meltdown part, right? And I still need to do something about the Spectre part, right? And I would do that through Acer? (Except that Acer may have written computers this old off, if I read Anak's remarks correctly).

Edit: Actually, since my computer has an AMD CPU, the Spectre part may not even be an issue for me, right?

 

[Seffrid]

I would urge great caution in relation to installing any BIOS update. Unlike other updates they are generally not reversible so can cause major problems.

Bear in mind also that not all machines will need a BIOS update. For example, AMI have said that their motherboards generally don't need an update as they're not vulnerable to Spectre, unless there is an associated Intel component that does require an update in which case they are working closely with Intel and will provide any necessary update for those machines that need it.

It's also worth bearing in mind that there are currently no reported incidents of Meltdown or Spectre malware occurring "in the wild" i.e. outside theoretical testing so there really is no urgency in dealing with these issues. It's not clear whether this month's Windows Updates have yet been rendered fully reliable so, again, I would urge caution especially with AMD machines or Intel machines with AMD components e.g. graphics cards. Keep an eye on a couple of technical sites and follow their recommendations on which updates to install and when.

 

[michael diemer]

I also am leery of Bios updates. What I have seen on them does make me very hesitant. Since I have don't see a reason to do so, I will stay away from it.

 

[Anak]

antioch,
I had thought it was a moot point but I'll mention it now, there is one difference between 6894 and 6897 and it's about IE (Internet Explorer), MS's browser;

94 states that there are Security updates to Windows SMB Server, Windows Kernel, Microsoft Graphics Component, Internet Explorer, and Windows Graphics.

where 97 doesn't Security updates to Microsoft Graphics Component, Windows Graphics, Windows Kernel, and Windows SMB Server.

I saw on one site that I'd have to hunt down that even though 97 doesn't list it, it does harden IE, if anyone has noticed, FF and Chrome put out updates to that effect I received mine for FF on the 4th of January I'm now at v57.0.4 and there's talk of another for FF tomorrow the 23rd.

It's certainly your prerogative to hide 6894 and because of that I don't feel right in saying one way or another if you should install it, it's kind of like what Brink said about KB4073578

Hey Peter,

Correct, but it would be a good idea to install this update if you have an AMD processor no matted if you had the issue.

Just replace "if you have an AMD processor no matted if you had the issue." with "if you have an use IE or not." There has to be an underlying reason why it's being offered.


michael diemer,
So, yes, yes, yes, and yes, you have read them correctly...AMD CPU? Um maybe, you have to research it.


Seffrid,
Sound advice, One item about AMD GPU's this was back in post #75 by Nitesco:

I've tested my RX480 with some fairly demanding games, and it has been running as normal. I'll keep an eye on things, but nothing bad to report. And according to a quick search, AMD GPUs are not affected by Meltdown or Spectre.

From The Verge:

AMD is also revealing that its Radeon GPU architecture isn’t impacted by Meltdown or Spectre, simply because those GPUs “do not use speculative execution and thus are not susceptible to these threats.” AMD says it plans to issue further statements as it continues to develop security updates for its processors.

Also, from a post on AMD's own forums asking about the issue:

No GPUs are affected by Meltdown and Spectre, nVidia only patched their vulnerable software

michael diemer,
Anyone can correct me if I'm wrong, but as I understand it there are two updates for Spectre, one for the BIOS and one for the microcode that involves Intel's ME (Management Engine) as ME is a completely separate sub-system: Intel Management Engine, Explained: The Tiny Computer Inside Your CPU

 

[Seffrid]

Anak, just to clarify my position - I am not claiming that AMD graphics cards are affected by Meltdown or Spectre, rather that both AMD machines and Intel machines with AMD graphics cards are potentially affected (adversely) by Microsoft's Windows Updates.

 

[Anak]

Okay, and all I'm trying to point out is that AMD GPU's are not affected at all, no matter what their CPU's are.

 

[Seffrid]

Okay, and all I'm trying to point out is that AMD GPU's are not affected at all, no matter what their CPU's are.

Not from the original security flaws no, but they are affected by the fixes to those flaws when applied to an Intel machine with an AMD graphics card.

And on the separate issue of the desirability of holding back on all Meltdown/Spectre updates pending confirmation of their reliability:-

NB. Announcement just in from Intel: Do NOT install any of their updates at this time. They are causing a higher than expected number of reboots.

https://newsroom.intel.com/news/root-cause-of-reboot-issue-identified-updated-guidance-for-customers-and-partners/

 

[Nitesco]

@Anak,
Thanks for the links. But I do have something to report now.

The issue I mentioned before with my PC not restarting properly? It's been reoccurring. When restarting from Windows 7, the screen goes to the standard shutdown screen, screen goes black, then nothing happens, and the HDMI output isn't being detected. There isn't even any visible HDD activity.

But after using the Restart button on the front of my PC, everything is fine. Cold boot, everything is fine. Performance-wise, there have been no real issues.


I'll make another thread about this soon in the Graphics Cards forum as you mentioned, so I don't sidetrack the discussion. But I'm 90% sure this did only start occurring when I installed those Windows Updates. How related it is, I'm still not sure. It's possible I could just need to update my GPU drivers.


EDIT: And here's the thread I made for it. Maybe you could help out there?
Black screen on AMD GPU after restarting within Windows 7 - Windows 7 Help Forums

 

[Anak]

You're welcome,

Thanks for the pointer link to your other thread.

 

[Anak]

Not from the original security flaws no, but they are affected by the fixes to those flaws when applied to an Intel machine with an AMD graphics card.

And on the separate issue of the desirability of holding back on all Meltdown/Spectre updates pending confirmation of their reliability:-

NB. Announcement just in from Intel: Do NOT install any of their updates at this time. They are causing a higher than expected number of reboots.

https://newsroom.intel.com/news/roo...-updated-guidance-for-customers-and-partners/

Seffrid, do you have any links to

Not from the original security flaws no, but they are affected by the fixes to those flaws when applied to an Intel machine with an AMD graphics card.

 

[Seffrid]

Seffrid, do you have any links to

I'm pretty sure it's been raised on another technical site but unfortunately we're not permitted to link or refer to that site here. I may have seen it elsewhere as well, so if I can think of where I'll let you know.

 

[Anak]

Thanks.

 

[ThrashZone]

Hi,
Should I feel bad I have not loaded any of this years updates yet ?
Because I don't
I'm about to roll out of Decembers lol they stink

 

[Anak]

Naw, I don't think so TZ the last couple of months have been a nightmare and you're experienced enough to know how to stay out of trouble and when to forge ahead.

How's that song go?...Know when to hold 'em, know when to fold 'em.....

 

[Brds7t7]

Still haven't installed any Spectre/Meltdown patches or firmware updates and won't until Intel and MS get their sh** together. I'd rather stay vulnerable for a few weeks than have to deal with this mess!

Microsoft releases new emergency Windows update to deactivate Intels buggy security patches on your PC | On MSFT