Hardware Management Console Readme For use with Version 8 Release 8.5.0 SP2 Date: 20 April 2017 Contents <#ibm-content> The information in this Readme contains the fix list and other package information about the Hardware Management Console. * PTF MH01694 <#MH01694> * Package information <#package> * List of fixes <#fixes> * Installation <#install> * Additional information <#additional> PTF MH01694 This package includes fixes for HMC Version 8 Release 8.5.0 Service Pack 2. You can also reference this package by PTF MH01694 and APAR MB04082. This image must be installed on top of HMC Version 8 Release 8.5.0 Service Pack 2 (PTF MH01657) with or without additional fixes. *Note1*: This PTF supersedes MH01685. *Note2*: An HMC backup created after installing PTF MH01694 must only be restored on V8 R8.5.0 with Service Pack 2 (PTF MH01657) installed. /Package information/ Package name Size Checksum (sha1sum) APAR# PTF# MH01694.iso 1356619776 caf5fdc32787bceb525db1c3cb5a6f63345fe2e0 MB04082 MH01694 Splash Panel information (or lshmc -V output) "version= Version: 8 Release: 8.5.0 Service Pack: 1 HMC Build level 20170412.1 MH01694: Fix for HMC V8R8.5.0 SP2 (04-12-2017) ","base_version=V8R8.5.0 " List of fixes *Security fixes* * Fixed a security issue with the Firefox browser on the local HMC console. * Fixed an occurrence of a password specified on a command from being logged in clear text. *General fix* * Fixed a problem causing the HMC backup critical console data operation to fail with one of the following errors: "/HSCLA500 An internal error occurred. Try the operation again. If the operation continues to fail, contact your service representative/." or "/Backup of table data from database has failed. HSCP0108/". With this fix, the backup operation will continue and no error will be reported to the user if the performance monitoring data backup fails. * Fixed an issue that caused an exception during repair of the DCCA on bulk power systems. * Fixed a problem that prevented the Power enterprise pool sync operation and managed system rebuild operation from correcting the number of installed processors and memory shown in the Power enterprise pool data for a server. This problem only occurs after additional processors or memory is installed on a server in a Power enterprise pool. * Fixed an issue that caused the following error to be displayed when trying to open a vterm console window: "/Your security settings have blocked an application signed with an expired or not-yet-valid certificate from running/". With this fix, vterm console windows can continue to be opened after the vterm applet certificate has expired. *Previously released fixes also included in this PTF: * * MH01685* 04/21/17 * Fixed BIND vulnerability: CVE-2016-9147 * Fixed openSSH vulnerability: CVE-2015-8325 * Fixed multiple NTP vulnerabilities: CVE-2016-7426, CVE-2016-7429, CVE-2016-7433, CVE-2016-9310, and CVE-2016-9311 * Fixed openSSL vulnerabilities: CVE-2016-8610 and CVE-2017-3731 * Fixed a race condition to prevent the generation and call home of SRC E3551172. Installation Installation instructions for HMC Version 8 upgrades and corrective service can be found at these locations: Upgrading or restoring HMC Version 8 Installation methods for HMC Version 8 fixes Instructions and images for upgrading via a remote network install can be found here: HMC V8 network installation images and installation instructions Additional information Notes: 1. The Install Corrective Service task now allows you to install corrective service updates from the ISO image files of these updates. You can download these ISO image files for the HMC, and then use the ISO image file to install the corrective service update. You no longer need to burn CD-R or DVD-R media to use the ISO image file to install corrective service. 2. This image requires DVD -R media. 3. To install updates over the network, select the *.iso file on the "Select Service Package" panel of the Install Corrective Service task. The HMC application extracts the files needed to install the corrective service. If you are using USB flash media, copy the *.iso file to the flash media, and then select the file when prompted. 4. The *updhmc* command line command has also been modified to use the *.iso file. To use the command, follow the syntax in this example: updhmc -t s -h -f -u -i In all cases, the HMC application extracts the files needed to install the corrective service.