FIRMWARE CHANGE HISTORY
-----------------------
Lenovo RackSwitch G8264CS Version 8.3.4.0 (Released February 2016)
** Changes since the 8.3.3.0 release **

Enhancements:

none

Changes:

none

Fixes :

- VLAG ports would stay in err-disabled state despite  expiration of the Startup Delay Interval, 
  if they were members of  L2 failover group.
  (LV299952)

- When the reset button is pressed, it could interrupt an I2C transaction and lock up 
  the I2C bus leading to a hang in the desired switch reset. A fix was added to prevent 
  this sequence of events occurring.
  (43168)

- Switch could crash where no DCBX peer is detected on ports, when CEE was enabled 
  (42697)

- The hwMTM variable is added to the SNMP MIB to allow reading of the Machine Type Model 
  of the switch.
  (44107)

- Using Cisco ACS, version 5.5 and above, to authenticate users with TACACS protocol,
  could lead to the User Interface thread (SSHD,AGR,TNET,CONS) to be suspended forever,
  thereby denying any further authentication with the TACACS protocol.
  (LV307694/7383)

- Fixed OpenSSL vulnerabilities as reported in CVE Advisories CVE-2015-3194,CVE-2015-3195.
  (46801)

- Applying switch configuration having OSPF commands, could fail with the message 
  “Routed Port Interface <port #> corresponding area (index) 0 is not enabled”, 
  when pasting from a serial session.
  (7071) 


=======================================================================

Lenovo RackSwitch G8264CS Version 8.3.3.0 (Released October 2015)
** Changes since the 8.3.2.0 release **

Enhancements:

- The number of STP groups supported in the PVRST protocol has been increased to 256.
  (LV311048)

- Added vLAG Peer Gateway functionality which allows a  vLAG switch 
  to act as the active gateway for packets that are addressed to the router MAC 
  address of the vLAG peer.


- Extended the ability to support Dual Speed 1/10G MMF SFP+  Transceivers.
  (LV311542,LV311078,LV312616)

Changes:

- The Protocols,  SSH and SLP (Service Layer Protocol) is enabled by default on the switch. 
  (38987,10224)

- The output of “show tech-support” now includes the isCLI commands as headers 
  before their respective output.
  (38125)


- The command "show flash-dump-uuencode" in the isCLI menu and its equivalent "/maint/uudmp"
  from the IBMNOS-CLI menu have been deprecated. The reference to use this command has been
  removed from the help tip that is posted upon user login if a flash-dump exists on the
  switch.
  (XB282980)
Fixes:

- The user is incorrectly prompted for "setup configuration" upon login even though 
  configuration had been applied and saved, and the startup configuration block was set to active.
  (39158)

- In NPV Gateway mode, Enodes could fail to login through the switch when the 
  uplink FC switch had the persistent FCID feature enabled.
  (LV311670)

- FCOE connections would be lost when the /sbin/lldpnetmap script (utility from VMware vSphere) was run.
  The script was incorrectly causing the switch detect multiple peers causing DCBX to be out of sync.
  The connection would be restored after a shut/no shut of the affected ports.
  (XB300488,7400)

- When configuring “qos bandwidth min” on an UFP port, the switch would 
  incorrectly allow the sum of the minimum bandwidth to be less than 100%.
  (40181,40295)


- If the serial number of the switch was changed, the user was prevented from
  successfully installing a new image, and the message “image contains invalid signature”
  would be displayed.
  (40638)

- Multicast DA (Directory Agent) Advertisements received on the Management ports are accounted as 
  Unicast Advertisements.
  (41080)

- The switch would fail to send ICMP TTL Exceeded messages back to the source
  when the incoming ICMP packet had a TTL of 1 with a destination address of 
  the VRRP IP of the switch. As a side effect, Traceroute between devices would 
  fail if the VRRP IP of the switch were one of th hops in the path.
  (LV311922)

- Fixed OpenSSL vulnerabilities as reported in CVE Advisories CVE-2015-1788 (BN_GF2m_mod_inv),
  CVE-2015-1789 (X509_cmp_time) and CVE-2015-1792 (do_free_upto).
  (39415)

=======================================================================
Lenovo RackSwitch G8264CS Version 8.3.2.0 (Released May 2015)

Initial release.