We would like to announce a staged upgrade of the version of Comware running on our HPE 5940 FroDos. This blog entry aims to answer the majority of questions that this work will raise. Please, feel free to contact the Networks team with any further questions at networks@it.ox.ac.uk<\/p>\n
As part of ongoing maintenance it is essential that we keep our FroDo software up to date. The new version of software being deployed addresses a number of vulnerabilities and bugs. For those interested this upgrade takes us from F2604H04 to R2612H01 and involves more than a dozen devices.<\/p>\n
Symptom: After the master of an IRF fabric is rebooted, SNMP obtains an incorrect value for the snmpEngineBoots node.<\/p>\n
Condition: This symptom might occur if SNMP is used to obtain the value of the snmpEngineBoots node after the master of an IRF fabric is rebooted.<\/p>\n
Effect: This stops management systems from connecting to the SNMP engine on the device. Noticeable and inconvenient because graphs of port throughput are no longer maintained.<\/p>\n
CVE-2014-9297<\/p>\n
CVE-2015-3405<\/p>\n
CVE-2015-9298<\/p>\n
CVE-2016-7427<\/p>\n
CVE-2016-7428<\/p>\n
CVE-2016-7431<\/p>\n
CVE-2016-9042<\/p>\n
CVE-2017-3731<\/p>\n
CVE-2017-3732<\/p>\n
CVE-2017-3735<\/p>\n
CVE-2017-3736<\/p>\n
CVE-2017-3737<\/p>\n
CVE-2017-3738<\/p>\n
CVE-2017-6458<\/p>\n
CVE-2017-12190<\/p>\n
CVE-2017-12192<\/p>\n
CVE-2017-15274<\/p>\n
CVE-2017-15299<\/p>\n
CVE-2017-15896<\/p>\n
CVE-2017-1000253<\/p>\n
Information about the detail of these vulnerabilities can be found at https:\/\/cve.mitre.org\/cve\/search_cve_list.html<\/a><\/p>\n The expected impact is ~5-10 minutes for Option 1 customers during which time the FroDo will reload and external services will not be available. For Option 2 customers the impact is expected to be minimal thanks to the In Service Software Upgrade (ISSU) capability.<\/p>\n We will be carrying out the upgrades between 06:00 and 07:30 to minimise impact.<\/p>\n We plan to upgrade\u00a0up to 2 FroDos, one option 1, and one option 2, on the each of the following days:<\/p>\n Odin 5940 FroDo Comware Upgrade We would like to announce a staged upgrade of the version of Comware running on our HPE 5940 FroDos. This blog entry aims to answer the majority of questions that this work will raise. Please, … Continue reading Impact<\/h3>\n
Timescale<\/h3>\n
Tuesday 4th September\r\n frodo-030809 dcdist-br (option 2) - completed\r\n Notes: Resilience of link to BSP-STORAGE in BRDC not functioning correctly causing interruption and some Left Hand storage entered read-only mode.\r\n AD DC behind ADFS for Nexus 365 coincidentally failed the night before ~23:00 causing failure of *some* user logins to Outlook. \r\n Not caused by Frodo upgrade but we were blamed for it by some before all the details were known.<\/pre>\n
Wednesday 5th September\r\n frodo-030811 dcdist-osney (option 2) - completed\r\n frodo-100907 wellcome-trust - completed\r\n frodo-100909 orcrb-2 - completed - upgraded 1 day early\r\n\r\nDue to an issue encountered on the morning of 5th with two of the upgrades \r\nwe will postpone the remaining ones until further notice pending the result \r\nof a support call with the vendor.<\/pre>\n
Thursday 6th September\r\n frodo-120809 dcdist-usdc (option 2) - cancelled<\/pre>\n
Tuesday 11th September\r\n frodo-100908 richard-doll (option 2) - cancelled\r\n frodo-120601 beach-2 - cancelled<\/pre>\n
Wednesday 12th September\r\n frodo-050909 begbroke-iat-1 (conversion to option 2 and dcdist-begbroke) - upgrade cancelled - conversion will still take place\r\n frodo-120810 molecular-medicine - cancelled<\/pre>\n
Thursday 13th September\r\n frodo-120811 big-data-institute (option 2) - cancelled\r\n frodo-120812 john-radcliffe-3 - cancelled<\/pre>\n","protected":false},"excerpt":{"rendered":"