FIRMWARE CHANGE HISTORY ----------------------- Lenovo RackSwitch G8052, Stack Version 8.3.4.0 (Released February 2016) ** Changes since the 8.3.3.0 release ** Enhancements: - Extended the ability to support Dual Speed 1/10G MMF SFP+ Transceivers on Stacking. (LV311542,LV311078,LV312616) Changes: none Fixes: - When the reset button is pressed, it could interrupt an I2C transaction and lock up the I2C bus leading to a hang in the desired switch reset. A fix was added to prevent this sequence of events occurring. (43168) - Using Cisco ACS, version 5.5 and above, to authenticate users with TACACS protocol, could lead to the User Interface thread (SSHD,AGR,TNET,CONS) to be suspended forever, thereby denying any further authentication with the TACACS protocol. (LV307694/7383) - Fixed OpenSSL vulnerabilities as reported in CVE Advisories CVE-2015-3194,CVE-2015-3195. (46801) ===================================================================================== Lenovo RackSwitch G8052, Stack Version 8.3.3.0 (Released October 2015) ** Changes since the 8.3.2.0 release ** Enhancements: - Added support for Multiple Spanning Tree Protocol (802.1s) protocol in stacked configuration. (38431) - Added vLAG Peer Gateway functionality which allows a vLAG switch to act as the active gateway for packets that are addressed to the router MAC address of the vLAG peer. (7390) Changes: - The Protocols, SSH and SLP (Service Layer Protocol) is enabled by default on the switch. (38987,10224) - The output of “show tech-support” now includes the isCLI commands as headers before their respective output. (38125) - The command "show flash-dump-uuencode" in the isCLI menu and its equivalent "/maint/uudmp" from the IBMNOS-CLI menu have been deprecated. The reference to use this command has been removed from the help tip that is posted upon user login if a flash-dump exists on the switch. (XB282980) Fixes: - The user is incorrectly prompted for "setup configuration" upon login even though configuration had been applied and saved, and the startup configuration block was set to active. (39158) - If the serial number of the switch was changed, the user was prevented from successfully installing a new image, and the message “image contains invalid signature” would be displayed. (40638) - Multicast DA (Directory Agent) Advertisements received on the Management ports are accounted as Unicast Advertisements. (41080) - The switch would fail to send ICMP TTL Exceeded messages back to the source when the incoming ICMP packet had a TTL of 1 with a destination address of the VRRP IP of the switch. As a side effect, Traceroute between devices would fail if the VRRP IP of the switch were one of th hops in the path. (LV311922) - When using a stack, configuration changes such as enabling/disabling ‘ip routing,’ adding/removing an IP address could cause traffic to be CPU routed, instead of hardware routed. (LV312593) - A switch would hang upon watchdog timer expiry in a stacked setup, when the switch was either a member switch or a master switch with a backup configured. (XB300611) - Fixed OpenSSL vulnerabilities as reported in CVE Advisories CVE-2015-1788 (BN_GF2m_mod_inv), CVE-2015-1789 (X509_cmp_time) and CVE-2015-1792 (do_free_upto). (39415) ===================================================================================== Lenovo RackSwitch G8052 Stack Version 8.3.2.0 (Released July 2015) ** Changes since the 8.3.1.0 release ** Enhancements: none Changes: none Fixes: - Fixed OpenSSL vulnerabilities as reported in CVE Advisories CVE-2015-0286 (ASN1_TYPE_cmp). ===================================================================================== Lenovo RackSwitch G8052 Stack Version 8.3.1.0 Initial Release.