For use with HMC Version 10 Release 1 M1010

Contents

The information in this Readme contains the fix list and other package information about the Hardware Management Console.

• PTF MF68994
• PTF MF68970
• Package information
• General and Security fixes
• Known issues
• Installation

• Fixed a problem where the UI server firmware update task does not honor the checkbox selection to not auto accept' and commit the current FSP firmware level prior to installing the new one.
  
• Fixed scenario where a successful firmware update generates an error message "Job returned error: The following levels are not available <level>".  This occurs if multiple systems are targeted, as the process attempts to clean up the staging file for each system.  No recovery action is needed.
  
• Fixed an issue where the AIX Serviceable Events (SAEL) would not trigger a customer notification.
  
• Fixed an issue with the UI server firmware update task and IBM Web Site repository returning the error "Unable to access repository or no images available." even though the repository was successfully accessed and updates are available.
  
• Fixed an issue that cause call home SRC E23D040A due to hdwr_svr core dump.
  
• Fixed missing check for simplistic password while updating an expired password for BMC Console Inband credentials
  
• Fixed issue where fluxbox core dump file is created in root fs during reboot/shutdown of HMC. 
  
• Serviceability improvement to allow authorized service providers to clear inband credentials on the 7063-CR2 using a HMC user with hmcpe role. 
  Fixed an issue causing a Power enterprise pool create or update operation to fail with the error:
           "HSCL9085 An error occurred parsing the Power enterprise pool configuration file <file name>. The error is:
          cvc-pattern-valid: Value '<CoD code>' is not facet-valid with respect to pattern '[\w]{34}' for type 'ActivationCode'.
          Please verify that you specified the correct file.  If so, contact your CoD administrator."
          This error can only occur if a Power E1080 is in the pool XML file.
  

• Addressed the glib2 vulnerabilities: CVE-2021-27218 and CVE-2021-27219
  
• Addressed the krb5 vulnerability: CVE-2020-28196
  
• Addressed the httpd vulnerabilities: CVE-2018-17199 and CVE-2020-11993
  
• Addressed the bash vulnerability : CVE-2019-18276
  
• Addressed the bind vulnerability: CVE-2021-25215

Known Issues

• Following HMC backup restore, sometimes, HMC GUI fails to login with "invalid credentials". Some of the commands on the CLI also won't work. The workaround is to reboot the HMC.
  
• Login using kerberos user fails if the user id is different from the remote user id.
  
• After migration of save upgrade data from 942 to 1010 level, PCM operations result in exception failures.

Upgrading or restoring HMC Version 10

Updating, upgrading, and migrating your HMC machine code