Anyone with info about Simplivity fw 2022_1021?

[KptH]

A bulletin saying critical fw update is available was sent out from HPE before the weekend, however no new interop-guide exists describing dependencies nor info about why it is crucial to update. The tiny release note ( https://support.hpe.com/connect/s/softwaredetails?softwareId=MTX_b7d3675e8ef94ad4b684c0f82f&tab=releaseNotes ) indicates that it is something in iLO(?) that is broken? Anyone here with info?

///L

[Kipp_Glover]

Good day KtpH!

Good observation noticing the new SVTSP-2022_1021.02 that was posted to the HPE Support Center last Friday.   I do apologize, but there is a slight delay in posting the Interoperability Guide that accompanies the SVTSP.   We do plan to post the Interop Guide this Wednesday, Oct 26th.  We will also publish a Customer Advisory announcing the new SVTSP and the Interop Guide.  

This new SVTSP has an extensive firmware update list that can be found in the release notes tab (BIOS, NIC FW, Drive FW ...)

Cheers!
/Kipp

[KptH]

Hi Kipp!

OK, no worries. Thanks for letting us know that the Interop Guide is on its way.!

Re. the release notes, yes I saw it is a lot of fw's in there listed as "recommended" but what about the iLO which is marked as "critical", where can we find info about what makes it "critical" to upgrade, any vulnerability/instability?

BR

L

[Kipp_Glover · Accepted solution]

Hi KptH!

You are correct.  The iLO firmware update is critical as it resolves a security vulnerability.   Here is a link to the security bulletin that provides the details on the vulnerability and update.   

https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04333en_us 

Please let me know if you have any follow-up questions. 

Cheers!
/Kipp

[KptH]

Hi again Kipp!

Thanks a lot for the clarification around this matter, we will then wait for the interop guide and plan for an update.

///L

[KptH]

Hi again @Kipp_Glover!

After reading the inteopguide (doc version rev 1.4.3 October 21:st) I realize that it says that the FW SVTSP-2022_1021.02 contains iLO 2.71 which was included already in SVTSP-2022_0802.01. And since the security bulletin (hpesbhf04333en_us) says that the critical vulnerabilities were fixed in iLO 2.71 and the latest firmware package not containing any other CRITICAL (only recommended) fw updates one doesn't have to rush into SVTSP-2022_1021.02 if running SVTSP-2022_0802.01. Correct?

///L

[Kipp_Glover]

Hi KptH!

I forgot it was already included in the previous SVTSP.   If you are already running iLO5 FW 2.71, then it is not critical to update.  You are correct.  

Cheers!
/Kipp