Readme file for: IBM® Power Virtualization Center
Publication Date: 7th Jan 2022

It is recommended that you install this fix after installing IBM PowerVC 2.0.0.0

Note: Ensure that the name of the maintenance file was not changed when it was downloaded. This change might be intentional, or it might be an inadvertent change that is caused by certain web browsers or download utilities.

This fix contains fix for the following issues:

  IT39330- PSIRT ADV0036353 "Routes middleware memory leak for nonexistent controllers Openstack Neutron"(CVE-2021-40797)

Prerequisites and co-requisites:

1. You can install this fix on IBM Power Virtualization Center version 2.0.0.0

2. Need to install conntrack-tools package prior to applying the ifix which is a mandatory step.

 a) For RHEL based system
    
    yum install conntrack-tools

 b) For SLES based system 
    
    zypper install conntrack-tools

Installation information:

1) Copy the included IT39330-2.0.0.0.tgz file to your PowerVC system and extract it with the following command:

   tar -zxvf IT39330-2.0.0.0.tgz

	
2) In the directory where you extracted the file, run the following command to apply the fix on Powervc System:

	sh IT39330-2.0.0.0/install


--- End of list ---

Copyright and trademark information
http://www.ibm.com/legal/copytrade.shtml

Notices

INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some jurisdictions do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement may not apply to you.

This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the publication. IBM may make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time without notice.

Microsoft, Windows, and Windows Server are trademarks of Microsoft Corporation in the United States, other countries, or both.

Intel, Intel logo, Intel Inside, Intel Inside logo, Intel Centrino, Intel Centrino logo, Celeron, Intel Xeon, Intel SpeedStep, Itanium, and Pentium are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries.

Other company, product, or service names may be trademarks or service marks of others.

Third-Party License Terms and Conditions, Notices and Information

The license agreement for this product refers you to this file for details concerning terms and conditions applicable to third party software code included in this product, and for certain notices and other information IBM must provide to you under its license to certain software code. The relevant terms and conditions, notices and other information are provided or referenced below. Please note that any non-English version of the licenses below is unofficial and is provided to you for your convenience only. The English version of the licenses below, provided as part of the English version of this file, is the official version.

Notwithstanding the terms and conditions of any other agreement you may have with IBM or any of its related or affiliated entities (collectively "IBM"), the third party software code identified below are "Excluded Components" and are subject to the following terms and conditions: 
* the Excluded Components are provided on an "AS IS" basis
* IBM DISCLAIMS ANY AND ALL EXPRESS AND IMPLIED WARRANTIES AND CONDITIONS WITH RESPECT TO THE EXCLUDED COMPONENTS, INCLUDING, BUT NOT LIMITED TO, THE WARRANTY OF NON-INFRINGEMENT OR INTERFERENCE AND THE IMPLIED WARRANTIES AND CONDITIONS OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
* IBM will not be liable to you or indemnify you for any claims related to the Excluded Components
* IBM will not be liable for any direct, indirect, incidental, special, exemplary, punitive or consequential damages with respect to the Excluded Components.


Document change history