Hardware Management Console Readme For use with Version 8 Release 8.7.0 Service Pack 3 Date: 11 September 2019 (C) Copyright International Business Machines Corp., 2019 All rights reserved. Contents <#ibm-content> The information in this Readme contains the fix list and other package information about the Hardware Management Console. * PTF MH01834 <#MH01834> * PTF MH01835 <#MH01835> * List of fixes <#fixes> * Installation <#install> PTF MH01834 - for 7042 Machine Type This package includes an interim fix for HMC V8 R8.7.0 Service Pack 3. You can also reference this package by PTF MH01834 and APAR MB04222. This interim fix can be installed on an existing HMC Version 8 Release 8.7.0 Service Pack 3 installation with or without additional fix packs. *NOTE*: This PTF supersedes MH01823 and MH01829. /Package information/ Package name Size Checksum (sha1sum) APAR# PTF# MH01834_x86.iso 2644690944 d9b5904189cfa6c6accc367518829c9ecf524d7c MB04222 MH01834 Splash Panel information (or lshmc -V output) version= Version: 8 Release: 8.7.0 Service Pack: 3 HMC Build level 1908271103 MH01793 - HMC 870 Service Pack 3 Release MH01834 - iFix for HMC V8R8.7.0 SP3 ","base_version=V8R8.7.0 " PTF MH01835 - for 7063 Machine Type This package includes an interim fix for HMC V8 R8.7.0 Service Pack 3. You can also reference this package by PTF MH01835 and APAR MB04223. This interim fix can be installed on an existing HMC Version 8 Release 8.7.0 Service Pack 3 installation with or without additional fix packs. *NOTE:* This PTF supersedes MH01824 and MH01830. /Package information/ Package name Size Checksum (sha1sum) APAR# PTF# MH01835_ppc.iso 2601154560 ed7c8698679af389c1a2c3075ad2b7353619133c MB04223 MH01835 Splash Panel information (or lshmc -V output) "version= Version: 8 Release: 8.7.0 Service Pack: 2 HMC Build level 1908271103 MH01794 - HMC 870 Service Pack 3 Release MH01835 - iFix for HMC V8R8.7.0 SP3 ","base_version=V8R8.7.0 " * **General fixes* * Fix to cleanup the core files properly at system reboot to prevent repeated call homes of SRC E23D0503. * Fix to prevent call home SRC E212E134 due to btmp log rotate issue * Fixed an issue where a security scan of the HMC results in E3550046. Users are unable to log into the UI with error 502 Proxy error. The issue has been reported with the Tenable Nessus scan. * Fixed an issue where email notifications fail when the SMTP server sends a multi-line response. The test email task will appear to hang; service event notification will not reach the recipients. *Security fixes* * Addressed kernel vulnerabilities: CVE-2019-11479, CVE-2019-11477, and CVE-2019-11478 * Addressed libssh2 vulnerability: CVE-2019-3862 *Previously released fixes also included in this PTF: * * MH01829/MH01830* 07/31/19 * Added new option to *chsacfg *command to turn off attention LED for UAK expiration SRC. It checks to make sure there are no other open call home problems on that system before it turns off the attention LED. o To update the attentionledfilter : *chsacfg *-t attentionledfilter -o {enable | disable} o To view the attentionledfilter status : *lssacfg *-t attentionledfilter attentionledfilter=enabled * Fixed an issue where the hardware clock (the BMC time) on hmc model 7063's is not updated when the HMC is configured to use a NTP server. Best practice for the HMC model 7063 is to configure the HMC to use a NTP server, set the "Clock" to UTC (Timezone can be set as desired), and to not configure NTP in BMC. * Fixed an issue that can cause SRCs E35A0016/E35A0017. It occurs due to a deadlock when there are multiple login, logout sessions at the same time. Other SRCs not listed may also be reported until the HMC is rebooted or this fix is installed. * MH01823/MH01824* 06/28/19 * Fixed a GUI issue with USB key format, resulting in generation of SRCs E3033001 and E3550048. Symptoms included reports of a blank window, clicking refresh resulted in /"Error Rendering Task Panel"// //An unrecoverable error has occurred while rendering a task's graphical output. An attempt has been made to terminate the task. Any operation in progress may have been interrupted prematurely. An entry in the errorlog has been created so this problem can be reported automatically. / * Fixed an issue in data replication of user profile resource role data change to slave HMC(s) when the user profile on the slave has a resource role with no (null) resources. * Fixed the bug causing erroneous repeated notifications to the user of SRC E332FFFF when Java core dump compression fails. * Fixed an issue that left connections to port 13443 in a CLOSE_WAIT state, which lead to E35A000B and/or E212E161 SRCs. * Fixed the failing sftp updlic due to root permissions. Symptoms included receiving//"/No updates available/." * Fixed the unnecessary generation of the SRC E35A000D that was triggered when the number of open sockets is greater than open files. * Addressed the systemd vulnerability: CVE-2019-6454 * Addressed the Linux kernel vulnerability: CVE-2018-14633 * The total number of physical adapters value on the storage utilization panel of the PCM dashboard gets doubled each time an auto update happens of the panel. Refreshing the whole page will return the correct value. Installation Installation instructions for HMC Version 8 upgrades and corrective service can be found at these locations: Upgrading or restoring HMC Version 8 Installation methods for HMC Version 8 fixes Instructions and images for upgrading via a remote network install can be found here: HMC V8 network installation images and installation instructions