The information in this Readme contains fix list and other package information about the Hardware Management Console.
This package represents the Recovery image that you can use to upgrade the HMC from HMC V6.1.3, HMC V7.3.1.0, HMC V7.3.2.0, HMC V7.3.3.0 or HMC V7.3.4.0 to HMC V7R3.5.0. You can also use this package to install a clean version of HMC V7R3.5.0. You can also reference this package by APAR MB03046.
NOTE: PTF MH01127 (APAR MB02828) is needed to upgrade from HMC V6R1.3 to HMC V7.3.5.0. PTF MH01135 (APAR MB02661) is needed for one to upgrade from HMC V7R3.1.0 to HMC V7.3.5.0. See the Special upgrade instructions for HMC V7 R3.5.0
Package Name | Size | Checksum | APAR# | PTF# |
---|---|---|---|---|
HMC_Recovery_V7R350_1.iso HMC_Recovery_V7R350_2.iso |
1713104896 1334089728 |
50800 35038 |
MB03046 | MH01194 |
Splash Panel information (or lshmc -V output) | ||||
Version: 7 Release: 3.5.0 Service Pack: 0 HMC Build level 20090916.1 ","base_version=V7.3.5.0 |
A fix has been released (PTF MH01127, APAR MB02828) for HMC 6.1.3 that enables you to upgrade directly from HMC 6.1.3 to HMC 7.3.5.0.
Follow these basic steps
A fix has been released (PTF MH01135, APAR MB02661) for HMC 7.3.1.0 that enables you to upgrade directly from HMC 7.3.1.0 to HMC 7.3.5.0.
Follow these basic steps
Upgrade to HMC 7.3.5.0 by means of the HMC V7R350 Recovery media.
Follow these basic steps
This package provides the following enhancements and fixes:
The following security fixes are included in the HMC V7.3.5.0 release.
Fix | Abstract |
---|---|
CVE-2007-5612 | Pegasus - Director DoS |
CVE-2007-3387 CVE-2007-3798 | findutils deleting random files |
CVE-2007-5137 CVE-2007-4851 | gif image library overflow |
CVE-2007-5707 2007-5708 | OpenLDap Remote DoS |
CVE-2008-0003 | Pam callback buffer overflow |
CVE-2007-4135 | NFS uid translation flaw |
CVE-2007-4752 | X11 Cookie and sigalrm fixes |
CVE-2006-7217 | Apache2 cross license scripting remote execution |
CVE-2008-1447 2007-2926 | Bind cache poisoning |
CVE-2006-5052 | openssh GSSAPI authentication abort |
CVE-2009-0590 | openssl remote attack DoS |
The following browsers have been tested.
Note: For Firefox 2.0 make sure the JavaScript options to raise or lower windows and move or resize existing windows are enabled. To enable these options, go to the Content tab in the browser's Options dialog, click Advanced? next to the Enable JavaScript option, then select Raise or lower windows option (a check mark appears) and Move or resize existing windows options (a check mark appears). These features allow you to switch easily between HMC tasks.
Session cookies need to be enabled in order for ASMI to work when connected to HMC remotely. The asm proxy code saves session information and uses it.
Installation instructions for HMC V7 R.3.5.0 updates and fixes can be found here:
Update corrective services instructions for HMC Version 7
Recovery media upgrade and installation instructions for HMC V7 R.3.5.0 can be found here: