Hardware Management Console Readme For use with Version 8 Release 8.3.0 Service Pack 2 Contents The information in this Readme contains fix list and other package information about the Hardware Management Console. * PTF MH01625 <#MH01625> * Package information <#package> * List of fixes <#fixes> * Installation (Please read special instructions.) <#install> * Additional information <#additional> PTF MH01625 This package includes a fix for HMC Version 8 Release 8.3.0 Service Pack 2. You can reference this package by APAR MB04011 and PTF MH01625. This image must be installed on top of HMC Version 8 Release 8.3.0 Service Pack 2 (PTF MH01584) with or without additional fixes. /Package information/ Package name Size Checksum (sha1sum) APAR# PTF# MH01625.iso 200669184 e217ce096cbf1d940fe5c1a6f83610718368b95b MB04011 MH01625 Splash Panel information (or lshmc -V output) "version= Version: 8 Release: 8.3.0 Service Pack: 2 HMC Build level 20160415.2 MH01625: Fix for HMC V8R8.3.0 SP2 (04-15-2016) ","base_version=V8R8.3.0 " Known Issues:* * 1*._Special Install Instructions_* Installing this PTF using the Enhanced+ interface may hang. Prior to installing this PTF using the web browser graphical interface perform the following: 1. Log in again selecting the Log In option of "Classic". 2. If already logged in to the HMC using Enhanced+ GUI, log off the HMC. 3. Install using the normal installation instructions. Alternatively, install this PTF using CLI. 2. The Console Window > Open Terminal Window task may fail with "/javax.net.ssl.SSLProtocolException: handshake alert: unrecognized_name/" in Java console output. The circumvention is to use ssh vtmenu/mkvterm command. A fix is planned for a future PTF. List of fixes *Security Fixes* * Fixed OpenSSL security vulnerabilities; CVE-2015-3197, CVE-2016-0702, CVE-2016-0705, CVE-2016-0797 * Fixed Tomcat vulnerabilities: CVE 2015-5174,CVE-2015-5345, CVE-2015-5346, CVE-2015-5351, CVE-2016-0706, CVE-2016-0714, CVE-2016-0763 * Fixed vulnerabilities in bind: CVE-2016-1285 and CVE-2016-1286 * Fixed security vulnerability with Strongswan: CVE-2015-8023 * Fixed the following Httpd security vulnerabilities: CVE-2013-5704 CVE-2015-3183 * Fixed libssh2 security vulnerability CVE-2016-0787 * Fixed ntp security vulnerabilities; CVE-2015-5300, CVE-2015-7704, CVE-2015-8138 * Fixed a security issue with HMC restricted shell. *General **Fixes* * Fixed issue where lshmc -r command returned incorrect results when displaying the altdiskboot setting. * Fixed a rare deadlock condition that can cause the HMC to hang within several days of encountering the deadlock. Symptoms include HMC no longer allowing GUI logins, CLI failing with "/command server failed/" errors. * Fixed a problem where serviceable event E3690102 may be incorrectly reported during the install of a HMC PTF. * Fixed a problem where attempting to restore a HMC backup from USB flash will fail with error "/The media device is not functioning correctly. Contact your service representative./" if the backup is less than 3GB in size. * Fixed a problem where attempting to deploy an AIX image using PowerVC to a HMC that manages multiple servers, some of which support only linux only, may fail due to the Linux only server being selected for deploy. * Fixed a rare issue where serviceable event E355092F may be incorrectly reported. Back to top <#ibm-content> Installation *_Special Install Instructions_* Installing this PTF using the Enhanced+ interface may hang. Prior to installing this PTF using the web browser graphical interface perform the following: 1. Log in again selecting the Log In option of "Classic". 2. If already logged in to the HMC using Enhanced+ GUI, log off the HMC. 3. Install using the normal installation instructions. Alternatively, install this PTF using CLI. Installation instructions for HMC Version 8 upgrades and corrective service can be found at these locations: Upgrading or restoring HMC Version 8 Installation methods for HMC Version 8 fixes Instructions and images for upgrading via a remote network install can be found here: HMC V8 network installation images and installation instructions Additional information Notes: 1. The Install Corrective Service task now allows you to install corrective service updates from the ISO image files of these updates. You can download these ISO image files for the HMC, and then use the ISO image file to install the corrective service update. You no longer need to burn CD-R or DVD-R media to use the ISO image file to install corrective service. 2. This image requires DVD -R media. 3. To install updates over the network, select the *.iso file on the "Select Service Package" panel of the Install Corrective Service task. The HMC application extracts the files needed to install the corrective service. If you are using USB flash media, copy the *.iso file to the flash media, and then select the file when prompted. 4. The *updhmc* command line command has also been modified to use the *.iso file. To use the command, follow the syntax in this example: updhmc -t s -h -f -u -i In all cases, the HMC application extracts the files needed to install the corrective service. Back to top <#ibm-content>