Power7 High-End Power Subsystem Firmware

06/24/2014
 

• HIPER /Pervasive A security problem was fixed in the OpenSSL (Secure Socket Layer) protocol that allowed clients and servers, via a specially crafted handshake packet, to use weak keying material for communication. A man-in-the-middle attacker could use this flaw to decrypt and modify traffic between the management console and the service processor. The Common Vulnerabilities and Exposures issue number for this problem is CVE-2014-0224.
• HIPER /Pervasive A security problem was fixed in OpenSSL for a buffer overflow in the Datagram Transport Layer Security (DTLS) when handling invalid DTLS packet fragments. This could be used to execute arbitrary code on the service processor. The Common Vulnerabilities and Exposures issue number for this problem is CVE-2014-0195.
• HIPER /Pervasive Multiple security problems were fixed in the way that OpenSSL handled read and write buffers when the SSL_MODE_RELEASE_BUFFERS mode was enabled to prevent denial of service. These could cause the service processor to reset or unexpectedly drop connections to the management console when processing certain SSL commands. The Common Vulnerabilities and Exposures issue numbers for these problems are CVE-2010-5298 and CVE-2014-0198.
• HIPER /Pervasive A security problem was fixed in OpenSSL to prevent a denial of service when handling certain Datagram Transport Layer Security (DTLS) ServerHello requests. A specially crafted DTLS handshake packet could cause the service processor to reset. The Common Vulnerabilities and Exposures issue number for this problem is CVE-2014-0221.
• HIPER /Pervasive A security problem was fixed in OpenSSL to prevent a denial of service by using an exploit of a null pointer de-reference during anonymous Elliptic Curve Diffie Hellman (ECDH) key exchange. A specially crafted handshake packet could cause the service processor to reset. The Common Vulnerabilities and Exposures issue number for this problem is CVE-2014-3470.

01/20/2014
 

• Frame input power information is not correctly returned to the HMC for the second line cord when there are 3 BPRs per BPA
• Fix to no longer recover DCA power for internal hardware resets if CEC node is critical (powered off from fault). This allows normal SRC to be posted to improve servicability.
• Fix location codes used in part callouts for SRCs 1402328C and 1402328B
• Fix to allow servicing of a DCA in a CEC that is already in Low Power Mode if the HMC sends commands to BPA side B
• Fix to prevent erroneous posting of DCA to DCA communication faults during code updates
• Fix to prevent system level power off if a critical CEC node fault independently occurs before or during concurrent BPA service

06/24/2013
 

• Post error code if BPC bypass switch is left in bypass position after service
• Fix cross-power cable's circuit breaker not being opened as part of BPC service when mailbox cable is broken
• Detect and block service of power supplies that have been left in voltage biased down condition
• Allow service procedure to continue if CEC node being serviced for power supply repair is already in Low Power Mode from a prior repair
• Add tests to detect and report a dead voltage level 6 on 5797/5798 I/O drawers
• Fix to prevent erroneous defective planar error posted after power off of 5797/5798 I/O drawer
• Robustness added to various hardware recovery processes

02/26/2013
 

• When a BPA error condition is detected, BPA fan speeds will be raised to a lower setting than the previous firmware level.

11/23/2012
 

• GA Level