{"id":2160,"date":"2018-09-07T09:19:20","date_gmt":"2018-09-07T08:19:20","guid":{"rendered":"http:\/\/blogs-new.it.ox.ac.uk\/networks\/?p=2160"},"modified":"2018-09-07T09:19:20","modified_gmt":"2018-09-07T08:19:20","slug":"september-2018-odin-frodo-upgrade","status":"publish","type":"post","link":"https:\/\/blogs-new.it.ox.ac.uk\/networks\/2018\/09\/07\/september-2018-odin-frodo-upgrade\/","title":{"rendered":"September 2018 Odin FroDo Upgrade"},"content":{"rendered":"<p><strong>FroDo Comware Upgrade<\/strong><\/p>\n<p>We would like to announce a staged upgrade of the version of Comware running on our HPE 5510 FroDos. This blog entry aims to answer the majority of questions that this work will raise. Please, however, \u00a0feel free to contact the Networks team with any further questions at\u00a0<a href=\"mailto:networks@it.ox.ac.uk\">networks@it.ox.ac.uk<\/a><\/p>\n<p><strong>Why?<\/strong><\/p>\n<p>As part of ongoing maintenance it is essential that we keep our FroDo software\u00a0up to date. The new version of software being deployed addresses a number of vulnerabilities and bugs. For those interested this upgrade takes us from R1309 to R1309 P06 and involves over 300 devices.<\/p>\n<p><strong>Relevant Bug Fixes<\/strong><\/p>\n<p>201806290399<br \/>\n\u2022 Symptom: The value of the snmpEngineboot node is incorrect.<br \/>\n\u2022 Condition: This symptom occurs if the whole IRF fabric is rebooted to cause a master\/subordinate switchover.<\/p>\n<p><strong>Addressed Vulnerabilities<\/strong><\/p>\n<p>This release addresses the following CVE<\/p>\n<p>CVE-2016-9586<br \/>\nCVE-2017-15896<br \/>\nCVE-2017-3737<br \/>\nCVE-2017-3738<br \/>\nCVE-2017-3736<br \/>\nCVE-2017-12190<br \/>\nCVE-2017-12192<br \/>\nCVE-2017-15274<br \/>\nCVE-2017-15299<br \/>\nCVE-2017-1000253<br \/>\nCVE-2017-3735<br \/>\nCVE-2017-6458<br \/>\nCVE-2016-9042<br \/>\nCVE-2014-9297<br \/>\nCVE-2015-9298<\/p>\n<p>Information about the detail of these vulnerabilities can be found at\u00a0<a href=\"https:\/\/cve.mitre.org\/cve\/search_cve_list.html\">https:\/\/cve.mitre.org\/cve\/search_cve_list.html<\/a><\/p>\n<p><strong>Impact<\/strong><\/p>\n<p>The expected impact is ~5-10 minutes for Option 1 customers during which time the FroDo will reload and external services will not be available. For Option 2 customers the impact is expected to be minimal thanks to the In Service Software Upgrade (ISSU) capability introduced in the firmware update applied in August 2017.<\/p>\n<p>We will be carrying out the upgrades between 06:00 and 07:30 to minimise impact.<\/p>\n<p><strong>Timescale<\/strong><\/p>\n<p>We plan to upgrade approximately\u00a080 FroDo\u2019s on the each of the following days:<\/p>\n<p>Group A: Tuesday\u00a018th September<br \/>\nGroup B: Thursday 20th September<br \/>\nGroup C: Tuesday\u00a025th September<br \/>\nGroup D: Thursday\u00a027th September<\/p>\n<p><strong>Schedule<\/strong><\/p>\n<p>We have attempted,where possible, to group devices around main sites and annexes so that those sites will only see one period of disruption. Detailed schedules listing devices and dates\u00a0can be found at\u00a0<a href=\"https:\/\/docs.ntg.ox.ac.uk\/pub\/reference\/FroDoUpgrade-Sep2018\">https:\/\/docs.ntg.ox.ac.uk\/pub\/reference\/FroDoUpgrade-Sep2018<\/a><\/p>\n<p>Once again, if you have any further queries then please contact us at\u00a0<a href=\"mailto:networks@it.ox.ac.uk\">networks@it.ox.ac.uk<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>FroDo Comware Upgrade We would like to announce a staged upgrade of the version of Comware running on our HPE 5510 FroDos. This blog entry aims to answer the majority of questions that this work will raise. Please, however, \u00a0feel &hellip; <a href=\"https:\/\/blogs-new.it.ox.ac.uk\/networks\/2018\/09\/07\/september-2018-odin-frodo-upgrade\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":388,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11,37756],"tags":[],"class_list":["post-2160","post","type-post","status-publish","format-standard","hentry","category-general-maintenance","category-odin"],"_links":{"self":[{"href":"https:\/\/blogs-new.it.ox.ac.uk\/networks\/wp-json\/wp\/v2\/posts\/2160","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs-new.it.ox.ac.uk\/networks\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs-new.it.ox.ac.uk\/networks\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs-new.it.ox.ac.uk\/networks\/wp-json\/wp\/v2\/users\/388"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs-new.it.ox.ac.uk\/networks\/wp-json\/wp\/v2\/comments?post=2160"}],"version-history":[{"count":1,"href":"https:\/\/blogs-new.it.ox.ac.uk\/networks\/wp-json\/wp\/v2\/posts\/2160\/revisions"}],"predecessor-version":[{"id":2161,"href":"https:\/\/blogs-new.it.ox.ac.uk\/networks\/wp-json\/wp\/v2\/posts\/2160\/revisions\/2161"}],"wp:attachment":[{"href":"https:\/\/blogs-new.it.ox.ac.uk\/networks\/wp-json\/wp\/v2\/media?parent=2160"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs-new.it.ox.ac.uk\/networks\/wp-json\/wp\/v2\/categories?post=2160"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs-new.it.ox.ac.uk\/networks\/wp-json\/wp\/v2\/tags?post=2160"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}