PTF MH01924 and MH01925 Readme

*Package information*
Package name	Size	Checksum (sha1sum)	APAR#	PTF#
MH01924_x86.iso	3713970176	b572a263b30345be18de85a35c159c2f764e2038	MB04330	MH01924
Splash Panel information (or lshmc -V output)
"version= Version: 9 Release: 2 Service Pack: 952 HMC Build level 2204242355 MH01904 - HMC V9R2 M952 MH01924 - iFix for HMC V9R2 M952 ","base_version=V9R2 "

PTF MH01925 - HMC V9 R2 952.4 for 7063 Machine Types or vHMC for PowerVM (5765-HMB)

This package represents an interim fix for the HMC V9 R2 M952 release on the 7063 machine type or vHMC for PowerVM. You can also reference this package by PTF MH01925 and APAR MB04331. This PTF can be installed on HMC Version 9 Release 2 M952.

Note: This PTF supersedes MH01913, MH01917, and MH01922.

*Package information*
Package name	Size	Checksum (sha1sum)	APAR#	PTF#
MH01925_ppc.iso	3696349184	75811cdf992171522540fcd5bb17c7bdcf2da1f7	MB04331	MH01925
Splash Panel information (or lshmc -V output)
"version= Version: 9 Release: 2 Service Pack: 952 HMC Build level 2204242355 MH01905 - HMC V9R2 M952 MH01925 - iFix for HMC V9R2 M952 ","base_version=V9R2 "

General fixes

Fixed an issue that causes the HMC to show high CPU utilization even when there are no activities on HMC. Another symptom of this issue are possible call home SRCs E23D0503 and E212E302.
Fixed an issue causing SRC E212E161 due to too many hmcType.properties files getting opened on the HMC.
Fixed the issue that causes SRC E35A0021 to be generated reporting "The Solid DB size has exceeded the threshold limit of 80%".
Fix to allow HMC kerberos username different from remote user id to be able to login to HMC.
Fixed a problem where chprimhmc may fail with one of the following errors:
"Unable to set this management console as primary. Please check if a repair or a code update operation is running on the managed server from another console." and
"Failed to get service operation information from peer."
Fixed an issue where E212E13A may be reported during a network upgrade installation.
Fixed some issues causing harmless error messages to be written to the HMC messages log during each restart of the HMC. These messages occur on model 7063 HMCs that are at V9R2M951 or higher.
Allow custom password policies to be retained across HMC updates.
Fixed an issue with the IBM service postgresql database rebuild tool when HMC language is non-English.
Fixed an issue where SNMP Trap Notifications are not sent when the SRC is missing from IBM docs.
Fixed the Kerberos client configuration issue that impacted the previous V9R2M952 iFixes: “Kerberos server requires to be reconfigured using below CLI after update from 950 SP1 and PTFs.
    Recommended CLI commands :
    chhmc -c kerberos -s remove –realm <kerberos_hostname> -a <kerberos_ip>
    chhmc -c kerberos -s add --realm <kerberos_hostname> -a <kerberos_ip”
There is no need to reconfigure kerberos after apply of this PTF.

Security fixes

Addressed openssl vulnerabilities: CVE-2021-3712, CVE-2021-23841, CVE-2021-23840 and CVE-2022-0778
Addressed the bind vulnerability: CVE-2021-25214
Addressed IBM JDK vulnerabilities: CVE-2022-21341, CVE-2022-21294, CVE-2022-21293 and CVE-2022-21248
Addressed httpd vulnerabilities: CVE-2022-22720, CVE-2021-34798 and CVE-2021-39275

Previously released fixes also included in this PTF:

MH01921/MH01922
03/11/22

Fix for migration vNIC Manual mappings selecting the incorrect VIOS Partitions when user specified only VIOS Partition names information.
Automatically clean up core files present under /usr/lib64/power9/ directory that can cause SRC E35F0020 to report.
Fixed the event reporting functionality to provide appropriate details of the failure of call home in generating PMH/Salesforce tickets.
Fixed a UI windows sizing issue with the Install Corrective Service window that would shrink down with a long scroll bar after clicking next to progress to the "Select Service Package" panel when run on the local console session.
Fixed an intermittent issue causing the selected LPAR Partition menu to not list any actions on the HMC GUI and requiring an HMC reboot to recover.
Convert E2FF4600 to informational SRC.
Fix an intermittent issue where the local console session boots to the "Initialization in Progress" page and does not present the login screen until a user closes the window.
Fixed an issue that caused the reporting of SRC E35A0063 repeatedly during the VIOS installation.
Fixed an issue that caused SRC E35A0074 and E35A0075 to report.
Fixed an issue where callhome may fail on the first HMC boot up after an upgrade. A restart of the HMC resolves the issue.
Fixed an issue that causes callhome of SRC E23D040C due to core dump of the actzzmon process.
Removed extraneous message "job returned error: No updates available" after performing a successful firmwre upgrade operation to a new release from the GUI.
Fixed an incorrect report of heap threshold exceeded resulting in reporting of SRC E35A0043.
Fixed an issue where the lslic output text would be missing from Call Home data.
Changed screen saver to a blank screen for 7063-CR2 HMCs to prevent locking the KVM function in BMC.
Fixed a rare issue that caused call home SRC E3321032 to be reported when many service events come into the HMC at the same time.
Fixed an issue that allowed root access by an HMC user profile.

MH01916/MH01917
01/11/22

Addressed log4j2 vulnerabilities: CVE-2021-45105, CVE-2021-45046 and CVE-2021-44832

MH01912/MH01913
12/14/22

Addressed the log4j2 vulnerability: CVE-2021-44228

Hardware Management Console Readme

Contents

Terminology

PTF MH01924 - HMC V9 R2 952.4 for 7042-CR9 Hardware or vHMC for x86_64 hypervisors (5765-HMW)

PTF MH01925 - HMC V9 R2 952.4 for 7063 Machine Types or vHMC for PowerVM (5765-HMB)

General fixes

Security fixes

Installation