• Fixed an issue that caused a ParaVirtual VM to lose traffic after resuming from the suspend mode when SR-IOV was enabled in the system.
• Cleaned steering rule from FDB when VF is being quiesced.
• Fixed an issue that caused the driver to configure the incorrect SL value for RoCE with RDMACM.

• Fixed an issue that caused a ParaVirtual VM to lose traffic after resuming from the suspend mode when SR-IOV was enabled in the system.
• Cleaned steering rule from FDB when VF is being quiesced.
• Fixed an issue that caused the driver to configure the incorrect SL value for RoCE with RDMACM.

This version of the Server Platform Services (SPS) Firmware contains updates aligned with the Intel Product Update (IPU) version IPU.2023.1 guidance.

Firmware Dependencies:

None

Problems Fixed:

This revision of the Server Platform Services Firmware provides mitigations for security vulnerability documented as CVE-2022-36794. This issue is not unique to HPE servers.

Known Issues:

None

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.3 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-44611 and CVE-2022-40982. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.0.2zh update which provides mitigation for security vulnerabilities documented as CVE-2023-2650.

Addressed an issue where iLO embedded device health info would display blank content under RBSU when the Language was set to Japanese or Chinese.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.2 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-33894 and CVE-2022-38087. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Addressed an issue where the PCIe device serial number in OEM SMBIOS type 203 does not populate in some cases.

Addressed an issue where the power-on-password dialog popped up even though user did not set a password.

Addressed an issue where the TPM status between RBSU and iLO web pages was not synchronized.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.3 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-43505 and CVE-2022-40982. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.0.2zh update which provides mitigation for security vulnerabilities documented as CVE-2023-2650.

Addressed an issue where iLO embedded device health info would display blank content under RBSU when the Language was set to Japanese or Chinese.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.2 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-38087. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Addressed the issue where the system might hang due to invalid memory free and usage when TPM is enabled.

Addressed the issue where the PCIe device serial number in OEM SMBIOS type 203 does not populate in some cases.

Addressed the issue where the power-on-password dialog popped up even though user did not set the password.

Addressed the issue where the TPM status between RBSU and iLO web pages was not synchronized.

Addressed the issue where BIOS does not correctly log memory error data and memory health telemetry in AHS.

Known Issues:

None

Firmware Dependencies:

None

Problems Fixed:

Addressed a rare issue where CPU could become stuck at its lowest working frequency when dynamic power capping was enabled on AMD-based systems.

Known Issues:

None

None

Firmware Dependencies:

For HPE ProLiant Gen10 Plus servers, iLO5 version 2.55 or above is required to upgrade to this version.

Problems Fixed:

Fixed an issue where the CPU may not restore to original working frequency after turning off Power Capping.

Known Issues:

None

This version of the Server Platform Services (SPS) Firmware contains updates aligned with the Intel Product Update (IPU) version IPU.2023.1 guidance.

Firmware Dependencies:

None

Problems Fixed:

This revision of the Server Platform Services Firmware provides mitigations for security vulnerability documented as CVE-2022-36794. This issue is not unique to HPE servers.

Known Issues:

None

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.3 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-43505, CVE-2022-40982, CVE-2023-23908 and CVE-2022-41804. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Address an issue where an abnormal power-on-password dialog would pop up even though user did not set a password.

Address the issue where the RBSU "Storage Device Information" was empty when VROC is enabled.

This revision of the System ROM includes the revision of the OpenSSL library 1.1.1u update which provides mitigation for security vulnerabilities documented as CVE-2023-0286, CVE-2022-4304 and CVE-2023-2650.

Address the issue where the TPM status displayed in RBSU and iLO web page was not in sync.

Address the issue where Secure Boot would not be enabled when loading manufacturing default from iLO web.

Address an issue where RSOD would occur when entering System Information from RBSU under legacy mode.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Addressed an issue where the system would hang after uploading the Samsung 1733/1735 U.3 NVMe Drive firmware through FMP.

Addressed an issue where PMEM NUMA nodes were not continuous (3, 5) under 8 8 isolated NUMA nodes configuration.

Addressed an issue where a drive could not be unmounted when hot-plug interrupt was generated during the DPC recovery process, with the event going over the DPC threshold.

Addressed an issue where the TPM status between RBSU and iLO web pages was not synchronized.

Known Issues:

• Fixed an issue that caused the DCR (DC Resources) to be destroyed before the retry option managed to work when the retry timeout is too big. in this case, the DCR' time-to-live was increased, and the maximum retry timeout was decreased.
• Increased PHY power consumption limit to 1.5w.
• Fixed an issue that caused PortCounters.PortRcvErr / PPCNT.infiniband_counters.PortRcvErr not to report port icrc errors.

The following issues have been fixed in version 16.35.3006:

• Packet loss that occurred when restarting the transmit. 
• An issue that prevented RoCE malformed packets (UDP packet with dest_port equal to RoCE well known udp_dport (0x4791)) from being counted on the vport_counter when the function disables RoCE (through MODIFY_NIC_VPORT_CONTEXT command).
• A memory leakage that occurred when closing connected QPs (Type RC/UC/XRC/DC).
• Added a missing VLAN strip.

• Fixed an issue that caused the DCR (DC Resources) to be destroyed before the retry option managed to work when the retry timeout is too big. in this case, the DCR' time-to-live was increased, and the maximum retry timeout was decreased.
• Increased PHY power consumption limit to 1.5w.
• Fixed an issue that caused PortCounters.PortRcvErr / PPCNT.infiniband_counters.PortRcvErr not to report port icrc errors.

The following issues have been fixed in version 16.35.1012

• Rare lanes skew issue that caused CPU to timeout in Rec.idle.
• The card occasionally masked some PCIe AER reporting.
• Incorrect flow of credits blockage that prevented booting during DC cycle test.
• An issue with BMC medium migration from SMBUS to PCIe, and increased FIFOs to pass large packets in case of the migration.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.3 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-43505, CVE-2022-40982, CVE-2023-23908 and CVE-2022-41804. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Address an issue where an abnormal power-on-password dialog would pop up even though user did not set a password.

Address the issue where the RBSU "Storage Device Information" was empty when VROC is enabled.

This revision of the System ROM includes the revision of the OpenSSL library 1.1.1u update which provides mitigation for security vulnerabilities documented as CVE-2023-0286, CVE-2022-4304 and CVE-2023-2650.

Address the issue where the TPM status displayed in RBSU and iLO web page was not in sync.

Address the issue where Secure Boot would not be enabled when loading manufacturing default from iLO web.

Address an issue where RSOD would occur when entering System Information from RBSU under legacy mode.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Addressed an issue where the system would hang after uploading the Samsung 1733/1735 U.3 NVMe Drive firmware through FMP.

Addressed an issue where PMEM NUMA nodes were not continuous (3, 5) under 8 8 isolated NUMA nodes configuration.

Addressed an issue where a drive could not be unmounted when hot-plug interrupt was generated during the DPC recovery process, with the event going over the DPC threshold.

Addressed an issue where the TPM status between RBSU and iLO web pages was not synchronized.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision provides AMD's mitigation for security vulnerabilities for CVE-2022-23829 and CVE-2023-20593 for AMD 2nd Generation EPYC processors, and CVE-2022-23829 and CVE-2023-20569 for AMD 3rd Generation EPYC processor. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.1.1u update which provides mitigation for security vulnerabilities documented as CVE-2023-0286, CVE-2022-4304 and CVE-2023-2650.

Addressed an issue where Secure Boot would not be enabled when loading manufacturing default from iLO web.

Addressed an issue where RSOD would occur when entering System Information from RBSU under legacy mode.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Addressed an issue where the "Access Control Service" option under RBSU did not work.

Known Issues:

• Firmware got into an unresponsive state and caused unexpected behavior when connecting an optical transceiver that support RxLOS and the remote side port was down.
• The system could not create more than 128K QPs.
• On rare occasions, the system got into an unresponsive state when a peer port went down while using an Optical module.
• Packet Pacing rate was used if asymmetric VFs was enabled.
• Incorrect RNR timeout when trying to set it during the rts2rts_qp transition.
• Issue with RSS on IPSec flows in ConnectX-4 Lx led to performance degradation. In this scenario, the SPI optimization caused packets from a given host to hash to the same CPU core. The fix was to ignore SPI optimization according to l4_type in ConnectX-4 Lx adapter cards.
• The GetInventory NC-SI command reported leading 0xf in firmware version when it started with 0.
   

The following issues have been fixed in version 16.35.3006:

• Packet loss that occurred when restarting the transmit. 
• An issue that prevented RoCE malformed packets (UDP packet with dest_port equal to RoCE well known udp_dport (0x4791)) from being counted on the vport_counter when the function disables RoCE (through MODIFY_NIC_VPORT_CONTEXT command).
• A memory leakage that occurred when closing connected QPs (Type RC/UC/XRC/DC).
• Added a missing VLAN strip.

• Firmware got into an unresponsive state and caused unexpected behavior when connecting an optical transceiver that support RxLOS and the remote side port was down.
• The system could not create more than 128K QPs.
• On rare occasions, the system got into an unresponsive state when a peer port went down while using an Optical module.
• Packet Pacing rate was used if asymmetric VFs was enabled.
• Incorrect RNR timeout when trying to set it during the rts2rts_qp transition.
• Issue with RSS on IPSec flows in ConnectX-4 Lx led to performance degradation. In this scenario, the SPI optimization caused packets from a given host to hash to the same CPU core. The fix was to ignore SPI optimization according to l4_type in ConnectX-4 Lx adapter cards.
• The GetInventory NC-SI command reported leading 0xf in firmware version when it started with 0.
   

The following issues have been fixed in version 16.35.1012:

• RDE (Redfish) PATCH operation to LLDPTransmit properties "ManagementAddressIPv4", "ManagementAddressIPv6" and "ManagementAddressMAC" were applied only in the first attempt, but failed in the next.
• PLDM AEN event receiver media was changed unexpectedly and destination BDF was overridden with garbage when some PLDM packet were received from the SMBus layer.
• Bad configuration of number of VFs and SFs led to the consumption of too many functions and triggered a FW assert 0x888E. The reduction flows behavior was fixed to ensure the configuration does not exceed the total number of supported functions. 
• InfiniBand L2 QP could not receive RDMA traffic occasionally.
• Running with a debug firmware reduced security as if token was applied.

Firmware Dependencies:

Problems Fixed:

This revision provides AMD's mitigation for security vulnerabilities for CVE-2022-23829 and CVE-2023-20593 for AMD 2nd Generation EPYC processors, and CVE-2022-23829 and CVE-2023-20569 for AMD 3rd Generation EPYC processor. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.1.1u update which provides mitigation for security vulnerabilities documented as CVE-2023-0286, CVE-2022-4304 and CVE-2023-2650.

Addressed an issue where Secure Boot would not be enabled when loading manufacturing default from iLO web.

Addressed an issue where RSOD would occur when entering “System Information” from RBSU under legacy mode.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Addressed an issue where the "Access Control Service" option under RBSU did not work.

Known Issues:

Ver. 1.0.0.22(B) contains updates to the firmware packaging and is functionally equivalent to ver. 1.0.0.22. It is not necessary to upgrade with Revision B if a previous component revision was used to upgrade the firmware to version 1.0.0.22.

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where Innovation Engine (IE) may improperly reset every 24 hours.

Known Issues:

None

None

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where Innovation Engine (IE) may improperly reset every 24 hours.

Known Issues:

None

Temperature Misreading: the adapter was reading incorrect reading of the temperature on the HPE SN1610Q 32Gb Fibre Channel Host Bus adapter's Small Form-factor Pluggable. The symptom would result in a temperature spike and potentially reset the system

• Unsuccessful read of the SFP Temperature which will trigger a Server Shutdown. 
• Message related to a Mailbox 0x48 Firmware dump saved to buffer.

• PortRcvPkts counter was prevented from being cleared after resetting it.
• The system Timed Out on the configuration cycle of the Virtual Functions (VFs) when more than 10 Virtual Functions performed FLR and the completion Time Out value was configured to a range of less than 16 msec.
• The server hangs and results in NMI when running “mlxfwtop –d mt4103_pci_cr0” while restarting the driver in parallel (from a different thread). In this case, the downstream bridge over the device reported completion timeout error.
• In flow_steering, BMC could not receive a ping over IPV6 after running bmc_reboot.
• While closing the HCA, the RX packet caused bad access to resources that did not exist, and consequently caused the QPCGW or the irisc to get stuck.
• The master SMLID and the LID was either 0 or 0xFFFF when the port was neither active nor armed.
• ibdump could not capture all MADs packets.
• link did not go up after reboot.
• Fixed a rare issue that cause the PCIe configuration cycle that arrived during the time of sw_reset to generate 2 completions.
• Network Controller Sideband Interface (NC-SI) did not work when adding the disable_static_steering_ini field in the ini file, due to memory allocation issue for this field in the scratchpad.

Fixes in version 2.42.5056:

• Fixed an issue that resulted in reading from invalid I/O address on handover from UEFI boot to OS boot, when a port was configured as InfiniBand on a VPI adapter device.

This revision of the System ROM includes the revision of the OpenSSL library 1.0.2zh update which provides mitigation for security vulnerabilities documented as CVE-2023-2650.

Addressed an issue where iLO embedded device health info would display blank content under RBSU when the Language was set to Japanese or Chinese.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.2 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-38087. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Addressed the issue where the system might hang due to invalid memory free and usage when TPM is enabled.

Addressed the issue where the PCIe device serial number in OEM SMBIOS type 203 does not populate in some cases.

Addressed the issue where the power-on-password dialog popped up even though user did not set the password.

Addressed the issue where the TPM status between RBSU and iLO web pages was not synchronized.

Addressed the issue where BIOS does not correctly log memory error data and memory health telemetry in AHS.

Known Issues:

• No ping in NODNIC VF when VLAN stripping was enabled.
• vDPA application initialization failed due to virtual queue creation failure. The failure came with the "0x8f7a: ring address translate failed" assert which indicates incorrect permission supplied by QEMU for virtual ring memory.
• CNP received, handled, and ignored counters in the hardware counters could not work after moving to Programmable Congestion Control mode.

• RDE (Redfish) PATCH operation to LLDPTransmit properties "ManagementAddressIPv4", "ManagementAddressIPv6" and "ManagementAddressMAC" were applied only in the first attempt, but failed in the next.
• Commands sent by the MLNX_OFED driver to the NIC would fail when loading the VirtIO driver. 
• A firmware limitation caused enabling tx_port_ts to result in syndrome 0x5d2974.
• PLDM AEN event receiver media was changed unexpectedly and destination BDF was overridden with garbage when some PLDM packet were received from the SMBus layer.
• PCIe SKP OS generation interval for Gen1 and Gen2.
• CPU handling synchronization required separation (run ptp4l with taskset -c [cpu #] prefix) while running heavy traffic. 
   

This revision of the System ROM includes the revision of the OpenSSL library 1.0.2zh update which provides mitigation for security vulnerabilities documented as CVE-2023-2650.

Addressed an issue where iLO embedded device health info would display blank content under RBSU when the Language was set to Japanese or Chinese.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.2 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-38087. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Addressed the issue where the system might hang due to invalid memory free and usage when TPM is enabled.

Addressed the issue where the PCIe device serial number in OEM SMBIOS type 203 does not populate in some cases.

Addressed the issue where the power-on-password dialog popped up even though user did not set the password.

Addressed the issue where the TPM status between RBSU and iLO web pages was not synchronized.

Addressed the issue where BIOS does not correctly log memory error data and memory health telemetry in AHS.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.3 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-43505 and CVE-2022-40982. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.0.2zh update which provides mitigation for security vulnerabilities documented as CVE-2023-2650.

Addressed an issue where iLO embedded device health info would display blank content under RBSU when the Language was set to Japanese or Chinese.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.2 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-38087. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Addressed the issue where the system might hang due to invalid memory free and usage when TPM is enabled.

Addressed the issue where the PCIe device serial number in OEM SMBIOS type 203 does not populate in some cases.

Addressed the issue where the power-on-password dialog popped up even though user did not set the password.

Addressed the issue where the TPM status between RBSU and iLO web pages was not synchronized.

Addressed the issue where BIOS does not correctly log memory error data and memory health telemetry in AHS.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.3 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-43505 and CVE-2022-40982. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.0.2zh update which provides mitigation for security vulnerabilities documented as CVE-2023-2650.

Addressed an issue where iLO embedded device health info would display blank content under RBSU when the Language was set to Japanese or Chinese.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.2 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-38087. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Addressed the issue where the system might hang due to invalid memory free and usage when TPM is enabled.

Addressed the issue where the PCIe device serial number in OEM SMBIOS type 203 does not populate in some cases.

Addressed the issue where the power-on-password dialog popped up even though user did not set the password.

Addressed the issue where the TPM status between RBSU and iLO web pages was not synchronized.

Addressed the issue where BIOS does not correctly log memory error data and memory health telemetry in AHS.

Known Issues:

• Aligned RDE behavior to DSP0266 v1.15.0  table 23.

This version of the Server Platform Services (SPS) Firmware contains updates aligned with the Intel Product Update (IPU) version IPU.2023.1 guidance.

Firmware Dependencies:

None

Problems Fixed:

This revision of the Server Platform Services Firmware provides mitigations for security vulnerability documented as CVE-2022-36794. This issue is not unique to HPE servers.

Known Issues:

None

Firmware Dependencies:

Problems Fixed:

This revision provides AMD's mitigation for security vulnerabilities for CVE-2022-23829 and CVE-2023-20593 for AMD 2nd Generation EPYC processors, and CVE-2022-23829 and CVE-2023-20569 for AMD 3rd Generation EPYC processor. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.1.1u update which provides mitigation for security vulnerabilities documented as CVE-2023-0286, CVE-2022-4304 and CVE-2023-2650.

Addressed an issue where Secure Boot would not be enabled when loading manufacturing default from iLO web.

Addressed an issue where RSOD would occur when entering "System Information" from RBSU under legacy mode.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Addressed an issue where the "Access Control Service" option under RBSU did not work.

Known Issues:

• Installing "mlnx_tune" on Python3 did not work properly. "mlnx_tune" now supports Python3 in addition to Python2.
• Changing traffic class via the sysfs while modifying QPs in parallel caused a deadlock.
• Due to a bug in the emulation layer, performance degradation was experienced when running GPUDirect over Virtual Functions.
• "debugfs" directories could not be created for representors and sub-functions, thus the log showed error for both the scenarios.
• "knem" did not fully support RHEL8.7 and newer releases.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.3 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-44611 and CVE-2022-40982. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.1.1u update which provides mitigation for security vulnerabilities documented as CVE-2023-0286, CVE-2022-4304 and CVE-2023-2650.

Address an issue where an abnormal power-on-password dialog would pop up even though user did not set a password.

Address the issue where Secure Boot would not be enabled when loading manufacturing default from iLO web.

Address an issue where RSOD would occur when entering System Information from RBSU under legacy mode.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Addressed an issue where the field DIMM Map-Out Reason of OEM SMBIOS type 232 would update incorrectly per DIMM status.

Addressed an issue where the TPM status between RBSU and iLO web pages were not synchronized.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.3 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-43505 and CVE-2022-40982. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.0.2zh update which provides mitigation for security vulnerabilities documented as CVE-2023-2650.

Addressed an issue where iLO embedded device health info would display blank content under RBSU when the Language was set to Japanese or Chinese.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.2 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-38087. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Addressed the issue where the system might hang due to invalid memory free and usage when TPM is enabled.

Addressed the issue where the PCIe device serial number in OEM SMBIOS type 203 does not populate in some cases.

Addressed the issue where the power-on-password dialog popped up even though user did not set the password.

Addressed the issue where the TPM status between RBSU and iLO web pages was not synchronized.

Addressed the issue where BIOS does not correctly log memory error data and memory health telemetry in AHS.

Known Issues:

• Tailing space issue of SNMP MIB of cpqSePCIeDiskModel data has been resolved

• Firmware got into an unresponsive state and caused unexpected behavior when connecting an optical transceiver that support RxLOS and the remote side port was down.
• The system could not create more than 128K QPs.
• On rare occasions, the system got into an unresponsive state when a peer port went down while using an Optical module.
• Packet Pacing rate was used if asymmetric VFs was enabled.
• Incorrect RNR timeout when trying to set it during the rts2rts_qp transition.
• Issue with RSS on IPSec flows in ConnectX-4 Lx led to performance degradation. In this scenario, the SPI optimization caused packets from a given host to hash to the same CPU core. The fix was to ignore SPI optimization according to l4_type in ConnectX-4 Lx adapter cards.
• The GetInventory NC-SI command reported leading 0xf in firmware version when it started with 0.

• Fixes an issue that caused the DCR to be destroyed before the retry option managed to work when the retry timeout is too big. In this case the DCR' time-to-live was increased, and the maximum retry timeout was decreased.
• Increased PHY power consumption limit to 1.5w.
• Fixed an issue that caused PortCounters.PortRcvErr / PPCNT.infiniband_counters.PortRcvErr not to report port icrc errors.

The following issues have been fixed in version 16.35.3006:

• Packet loss that occurred when restarting the transmit. 
• An issue that prevented RoCE malformed packets (UDP packet with dest_port equal to RoCE well known udp_dport (0x4791)) from being counted on the vport_counter when the function disables RoCE (through MODIFY_NIC_VPORT_CONTEXT command).
• A memory leakage that occurred when closing connected QPs (Type RC/UC/XRC/DC).
• Added a missing VLAN strip.

• Fixes an issue that caused the DCR to be destroyed before the retry option managed to work when the retry timeout is too big. In this case the DCR' time-to-live was increased, and the maximum retry timeout was decreased.
• Increased PHY power consumption limit to 1.5w.
• Fixed an issue that caused PortCounters.PortRcvErr / PPCNT.infiniband_counters.PortRcvErr not to report port icrc errors.

The following issues have been fixed in version 16.35.1012:

• RDE (Redfish) PATCH operation to LLDPTransmit properties "ManagementAddressIPv4", "ManagementAddressIPv6" and "ManagementAddressMAC" were applied only in the first attempt, but failed in the next.
• PLDM AEN event receiver media was changed unexpectedly and destination BDF was overridden with garbage when some PLDM packet were received from the SMBus layer.
• Bad configuration of number of VFs and SFs led to the consumption of too many functions and triggered a FW assert 0x888E. The reduction flows behavior was fixed to ensure the configuration does not exceed the total number of supported functions. 
• InfiniBand L2 QP could not receive RDMA traffic occasionally.
• Running with a debug firmware reduced security as if token was applied.

Firmware Dependencies:

Problems Fixed:

This revision provides AMD's mitigation for security vulnerabilities for CVE-2022-23829 and CVE-2023-20593 for AMD 2nd Generation EPYC processors, and CVE-2022-23829 and CVE-2023-20569 for AMD 3rd Generation EPYC processor. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.1.1u update which provides mitigation for security vulnerabilities documented as CVE-2023-0286, CVE-2022-4304 and CVE-2023-2650.

Addressed an issue where Secure Boot would not be enabled when loading manufacturing default from iLO web.

Addressed an issue where RSOD would occur when entering "System Information" from RBSU under legacy mode.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Addressed an issue where the "Access Control Service" option under RBSU did not work.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision provides AMD's mitigation for security vulnerabilities for CVE-2022-23829 and CVE-2023-20593 for AMD 2nd Generation EPYC processors, and CVE-2022-23829 and CVE-2023-20569 for AMD 3rd Generation EPYC processor. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.1.1u update which provides mitigation for security vulnerabilities documented as CVE-2023-0286, CVE-2022-4304 and CVE-2023-2650.

Addressed an issue where Secure Boot would not be enabled when loading manufacturing default from iLO web.

Addressed an issue where RSOD would occur when entering “System Information” from RBSU under legacy mode.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Addressed an issue where the "Access Control Service" option under RBSU did not work.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.3 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-43505 and CVE-2022-40982. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.0.2zh update which provides mitigation for security vulnerabilities documented as CVE-2023-2650.

Addressed an issue where iLO embedded device health info would display blank content under RBSU when the Language was set to Japanese or Chinese.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.2 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-38087. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Addressed the issue where the system might hang due to invalid memory free and usage when TPM is enabled.

Addressed the issue where the PCIe device serial number in OEM SMBIOS type 203 does not populate in some cases.

Addressed the issue where the power-on-password dialog popped up even though user did not set the password.

Addressed the issue where the TPM status between RBSU and iLO web pages was not synchronized.

Addressed the issue where BIOS does not correctly log memory error data and memory health telemetry in AHS.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.3 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-43505 and CVE-2022-40982. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.0.2zh update which provides mitigation for security vulnerabilities documented as CVE-2023-2650.

Addressed an issue where iLO embedded device health info would display blank content under RBSU when the Language was set to Japanese or Chinese.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.2 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-38087. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Addressed the issue where the system might hang due to invalid memory free and usage when TPM is enabled.

Addressed the issue where the PCIe device serial number in OEM SMBIOS type 203 does not populate in some cases.

Addressed the issue where the power-on-password dialog popped up even though user did not set the password.

Addressed the issue where the TPM status between RBSU and iLO web pages was not synchronized.

Addressed the issue where BIOS does not correctly log memory error data and memory health telemetry in AHS.

Known Issues:

• Product rebuilt to have the new SHA 384 signature.

Fixes in version 2.42.5000:

• PortRcvPkts counter was prevented from being cleared after resetting it.
• The system Timed Out on the configuration cycle of the Virtual Functions (VFs) when more than 10 Virtual Functions performed FLR and the completion Time Out value was configured to a range of less than 16 msec.
• The server hangs and results in NMI when running “mlxfwtop –d mt4103_pci_cr0” while restarting the driver in parallel (from a different thread). In this case, the downstream bridge over the device reported completion timeout error.
• In flow_steering, BMC could not receive a ping over IPV6 after running bmc_reboot.
• While closing the HCA, the RX packet caused bad access to resources that did not exist, and consequently caused the QPCGW or the irisc to get stuck.
• The master SMLID and the LID was either 0 or 0xFFFF when the port was neither active nor armed.
• ibdump could not capture all MADs packets.
• link did not go up after reboot.
• Fixed a rare issue that cause the PCIe configuration cycle that arrived during the time of sw_reset to generate 2 completions.
• Network Controller Sideband Interface (NC-SI) did not work when adding the disable_static_steering_ini field in the ini file, due to memory allocation issue for this field in the scratchpad.

Fixes in version 2.42.5056:

• Fixed an issue that resulted in reading from invalid I/O address on handover from UEFI boot to OS boot, when a port was configured as InfiniBand on a VPI adapter device.

• PortRcvPkts counter was prevented from being cleared after resetting it.
• The system Timed Out on the configuration cycle of the Virtual Functions (VFs) when more than 10 Virtual Functions performed FLR and the completion Time Out value was configured to a range of less than 16 msec.
• The server hangs and results in NMI when running “mlxfwtop –d mt4103_pci_cr0” while restarting the driver in parallel (from a different thread). In this case, the downstream bridge over the device reported completion timeout error.
• In flow_steering, BMC could not receive a ping over IPV6 after running bmc_reboot.
• While closing the HCA, the RX packet caused bad access to resources that did not exist, and consequently caused the QPCGW or the irisc to get stuck.
• The master SMLID and the LID was either 0 or 0xFFFF when the port was neither active nor armed.
• ibdump could not capture all MADs packets.
• link did not go up after reboot.
• Fixed a rare issue that cause the PCIe configuration cycle that arrived during the time of sw_reset to generate 2 completions.
• Network Controller Sideband Interface (NC-SI) did not work when adding the disable_static_steering_ini field in the ini file, due to memory allocation issue for this field in the scratchpad.

Fixes in version 2.42.5056:

• Fixed an issue that resulted in reading from invalid I/O address on handover from UEFI boot to OS boot, when a port was configured as InfiniBand on a VPI adapter device.

• Temperature sensors logic inside gSEP model and SES database
• When an IOM is pulled the surviving IOM reports false critical temperatures

Please refer to the Release Notes for the complete listing of fixes, enhancements, known issues and work-arounds corresponding to this firmware.

• Temperature sensors logic inside gSEP model and SES database
• When an IOM is pulled the surviving IOM reports false critical temperatures

Please refer to the Release Notes for the complete listing of fixes, enhancements, known issues and work-arounds corresponding to this firmware.

• Tailing space issue of SNMP MIB of cpqSePCIeDiskModel data has been resolved

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.3 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-43505 and CVE-2022-40982. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.0.2zh update which provides mitigation for security vulnerabilities documented as CVE-2023-2650.

Addressed an issue where iLO embedded device health info would display blank content under RBSU when the Language was set to Japanese or Chinese.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.2 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-38087. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Addressed the issue where the system might hang due to invalid memory free and usage when TPM is enabled.

Addressed the issue where the PCIe device serial number in OEM SMBIOS type 203 does not populate in some cases.

Addressed the issue where the power-on-password dialog popped up even though user did not set the password.

Addressed the issue where the TPM status between RBSU and iLO web pages was not synchronized.

Addressed the issue where BIOS does not correctly log memory error data and memory health telemetry in AHS.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.3 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-44611 and CVE-2022-40982. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.0.2zh update which provides mitigation for security vulnerabilities documented as CVE-2023-2650.

Addressed an issue where iLO embedded device health info would display blank content under RBSU when the Language was set to Japanese or Chinese.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.2 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-33894 and CVE-2022-38087. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Addressed an issue where the PCIe device serial number in OEM SMBIOS type 203 does not populate in some cases.

Addressed an issue where the power-on-password dialog popped up even though user did not set a password.

Addressed an issue where the TPM status between RBSU and iLO web pages was not synchronized.

Known Issues:

• Smart Array reporting "Storage Enclosure FW upgrade Problem Detected".
• PSU version is showing as "No Ver" after inserted the New bel power PSU.
• GEM_5_2 Coverity defect fix.

Please refer to the Release Notes for the complete listing of fixes, enhancements, known issues and work-arounds corresponding to this firmware.

• Smart Array reporting "Storage Enclosure FW upgrade Problem Detected".
• PSU version is showing as "No Ver" after inserted the New bel power PSU.
• GEM_5_2 Coverity defect fix.

Please refer to the Release Notes for the complete listing of fixes, enhancements, known issues and work-arounds corresponding to this firmware.

• Product rebuilt to have the new SHA 384 signature.

The following issues have been fixed in version 14.32.1010:

• Firmware got into an unresponsive state and caused unexpected behavior when connecting an optical transceiver that support RxLOS and the remote side port was down.
• The system could not create more than 128K QPs.
• On rare occasions, the system got into an unresponsive state when a peer port went down while using an Optical module.
• Packet Pacing rate was used if asymmetric VFs was enabled.
• Incorrect RNR timeout when trying to set it during the rts2rts_qp transition.
• Issue with RSS on IPSec flows in ConnectX-4 Lx led to performance degradation. In this scenario, the SPI optimization caused packets from a given host to hash to the same CPU core. The fix was to ignore SPI optimization according to l4_type in ConnectX-4 Lx adapter cards.
• The GetInventory NC-SI command reported leading 0xf in firmware version when it started with 0.

• Firmware got into an unresponsive state and caused unexpected behavior when connecting an optical transceiver that support RxLOS and the remote side port was down.
• The system could not create more than 128K QPs.
• On rare occasions, the system got into an unresponsive state when a peer port went down while using an Optical module.
• Packet Pacing rate was used if asymmetric VFs was enabled.
• Incorrect RNR timeout when trying to set it during the rts2rts_qp transition.
• Issue with RSS on IPSec flows in ConnectX-4 Lx led to performance degradation. In this scenario, the SPI optimization caused packets from a given host to hash to the same CPU core. The fix was to ignore SPI optimization according to l4_type in ConnectX-4 Lx adapter cards.
• The GetInventory NC-SI command reported leading 0xf in firmware version when it started with 0.

Ver. 1.0.0.22(C) contains updates to the firmware packaging and is functionally equivalent to ver. 1.0.0.22. It is not necessary to upgrade with Revision C if a previous component revision was used to upgrade the firmware to version 1.0.0.22.

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where Innovation Engine (IE) may improperly reset every 24 hours.

Known Issues:

None

None

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where Innovation Engine (IE) may improperly reset every 24 hours.

Known Issues:

None

• Users may see the OS logical disk usage percentage difference is much between OS level and AHS. The fix refines the result to minor the difference between OS level and AHS.
• Users may not find correct NIC port status or IML record when NIC port link status changes from "Unknown" to "OK".  The SNMP Trap to make iLO/IML record that link port status changes has been updated. 

• Users may see the OS logical disk usage percentage difference is much between OS level and AHS. The fix refines the result to minor the difference between OS level and AHS.
• Users may not find correct NIC port status or IML record when NIC port link status changes from "Unknown" to "OK".  The SNMP Trap to make iLO/IML record that link port status changes has been updated. 

• An issue that prevented the firmware from detecting a link_down event thus preventing the IB bond interface from going to a failover mode.

The following issues have been fixed in version 14.32.1010:

• Firmware got into an unresponsive state and caused unexpected behavior when connecting an optical transceiver that support RxLOS and the remote side port was down.
• The system could not create more than 128K QPs.
• On rare occasions, the system got into an unresponsive state when a peer port went down while using an Optical module.
• Packet Pacing rate was used if asymmetric VFs was enabled.
• Incorrect RNR timeout when trying to set it during the rts2rts_qp transition.
• Issue with RSS on IPSec flows in ConnectX-4 Lx led to performance degradation. In this scenario, the SPI optimization caused packets from a given host to hash to the same CPU core. The fix was to ignore SPI optimization according to l4_type in ConnectX-4 Lx adapter cards.
• The GetInventory NC-SI command reported leading 0xf in firmware version when it started with 0.

The following issues have been fixed in version 16.35.3006:

• Packet loss that occurred when restarting the transmit. 
• An issue that prevented RoCE malformed packets (UDP packet with dest_port equal to RoCE well known udp_dport (0x4791)) from being counted on the vport_counter when the function disables RoCE (through MODIFY_NIC_VPORT_CONTEXT command).
• A memory leakage that occurred when closing connected QPs (Type RC/UC/XRC/DC).
• Added a missing VLAN strip.

• An issue that prevented the firmware from detecting a link_down event thus preventing the IB bond interface from going to a failover mode.

The following issues have been fixed in version 14.32.1010:

• Firmware got into an unresponsive state and caused unexpected behavior when connecting an optical transceiver that support RxLOS and the remote side port was down.
• The system could not create more than 128K QPs.
• On rare occasions, the system got into an unresponsive state when a peer port went down while using an Optical module.
• Packet Pacing rate was used if asymmetric VFs was enabled.
• Incorrect RNR timeout when trying to set it during the rts2rts_qp transition.
• Issue with RSS on IPSec flows in ConnectX-4 Lx led to performance degradation. In this scenario, the SPI optimization caused packets from a given host to hash to the same CPU core. The fix was to ignore SPI optimization according to l4_type in ConnectX-4 Lx adapter cards.
• The GetInventory NC-SI command reported leading 0xf in firmware version when it started with 0.

The following issues have been fixed in version 16.35.1012:

• RDE (Redfish) PATCH operation to LLDPTransmit properties "ManagementAddressIPv4", "ManagementAddressIPv6" and "ManagementAddressMAC" were applied only in the first attempt, but failed in the next.
• PLDM AEN event receiver media was changed unexpectedly and destination BDF was overridden with garbage when some PLDM packet were received from the SMBus layer.
• Bad configuration of number of VFs and SFs led to the consumption of too many functions and triggered a FW assert 0x888E. The reduction flows behavior was fixed to ensure the configuration does not exceed the total number of supported functions. 
• InfiniBand L2 QP could not receive RDMA traffic occasionally.
• Running with a debug firmware reduced security as if token was applied.

• Installing "mlnx_tune" on Python3 did not work properly. "mlnx_tune" now supports Python3 in addition to Python2.
• Changing traffic class via the sysfs while modifying QPs in parallel caused a deadlock.
• Due to a bug in the emulation layer, performance degradation was experienced when running GPUDirect over Virtual Functions.
• "debugfs" directories could not be created for representors and sub-functions, thus the log showed error for both the scenarios.
• "knem" did not fully support RHEL8.7 and newer releases.

• On Red Hat Enterprise Linux 8 Update 7 (x86_64) errata kernel version 4.18.0-425.10.1 and later the HPE Mellanox RoCE (RDMA over Converged Ethernet) Driver 5.8 fails to load correctly because of symbol mismatch in the kernel modules and weak-updates failure. The version 5.8(A) is built against the errata kernel version 4.18.0-425.10.1 and fixes the above issue on this and the later Red Hat Enterprise Linux 8 Update 7 errata kernel versions.

The following issues have been fixed in version 5.8:

• The redundant freeing of a list item could lead to memory corruption, potentially causing the application to crash or incorrect traffic handling.
• The host driver probe did not check whether there are existing SFs which are present in the device, causing the host driver to not recreate those SFs.
• The kernel went into panic mode if there were multiple encapsulations and not all neighbors were valid.

• RDE (Redfish) PATCH operation to LLDPTransmit properties "ManagementAddressIPv4", "ManagementAddressIPv6" and "ManagementAddressMAC" were applied only in the first attempt, but failed in the next.
• The RXT E2E inflight went into an unresponsive state occasionally.
• RDMA partition was reported even if NIC+RDMA mode was disabled.
• PLDM AEN event receiver media was changed unexpectedly and destination BDF was overridden with garbage when some PLDM packet were received from the SMBus layer.
• An incorrect address issue for XRQ Event Backend Controller Px Syndrome event in multi-host system during FLR.
• PCIe SKP OS generation interval issue for Gen1 and Gen2.
• InfiniBand L2 QP could not receive RDMA traffic occasionally.
• Running with a debug firmware reduced security as if token was applied.
• PLDM AEN event receiver was required to be cleared on PCIe reset in case the media type was MCTP over PCIe VDM.
• Asynchronous messages were sent over MTCP before endpoint discovery was done.

Firmware Dependencies:

Problems Fixed:

This revision provides AMD's mitigation for security vulnerabilities for CVE-2022-23829 and CVE-2023-20593 for AMD 2nd Generation EPYC processors, and CVE-2022-23829 and CVE-2023-20569 for AMD 3rd Generation EPYC processor. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.1.1u update which provides mitigation for security vulnerabilities documented as CVE-2023-0286, CVE-2022-4304 and CVE-2023-2650.

Addressed an issue where Secure Boot would not be enabled when loading manufacturing default from iLO web.

Addressed an issue where RSOD would occur when entering "System Information" from RBSU under legacy mode.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Addressed an issue where the "Access Control Service" option under RBSU did not work.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.3 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-44611 and CVE-2022-40982. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.0.2zh update which provides mitigation for security vulnerabilities documented as CVE-2023-2650.

Addressed an issue where iLO embedded device health info would display blank content under RBSU when the Language was set to Japanese or Chinese.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.2 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-33894 and CVE-2022-38087. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Addressed an issue where the PCIe device serial number in OEM SMBIOS type 203 does not populate in some cases.

Addressed an issue where the power-on-password dialog popped up even though user did not set a password.

Addressed an issue where the TPM status between RBSU and iLO web pages was not synchronized.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision provides AMD's mitigation for security vulnerabilities for CVE-2022-23829 for AMD 1st Generation EPYC processors, and CVE-2022-23829 and CVE-2023-20593 for AMD 2nd Generation EPYC processor. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.0.2zh update which provides mitigation for security vulnerabilities documented as CVE-2023-2650.

Addressed an issue where iLO embedded device health info would display blank content under RBSU when the Language was set to Japanese or Chinese.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Addressed an issue where an abnormal MR controller name would display when setting the system language to Japanese from RBSU, and then rebooting the system.

Addressed an issue where the TPM status between RBSU and iLO web pages was not synchronized.

Known Issues:

• Firmware crashed when setting large payload length values (more than ~1500) in NC-SI command's header.
• Interface type was shown as "unsupported" in CMIS modules.
• Fixed the configuration of the TS1s sent by the DownStream port (DSP) when moving to EQLZ.ph2.
• PLDM firmware update process failed in case 1304 bytes chunk size is chosen.
• An issue that occurred during secure firmware update when decrypting and authenticating each chunk of data using its authentication tag. The issue appeared when the main code chunk was split between the user chunks and any GCM operation (e.g., flash read with decryption). This GCM operation broke the GCM context for main chunk authentication and therefore failed. 
• CNP received, handled, and ignored counters in the hardware counters could not work after moving to Programmable Congestion Control mode.
• Hardware failed to handle an error flow that occurred when accessing the DPA cluster L2 cache from the firmware processor. In this case the firmware processor hardware requested a VA=>PA translation from the internal mmio, and the address translation was broken by the mmio on the 4K page boundary.
• Hardware failed to consume Port-VL and credits, which consequently blocked traffic from being transmitted due to a race condition between the firmware and the hardware when accessing the chip memory (CR space).

• Firmware crashed when setting large payload length values (more than ~1500) in NC-SI command's header.
• Interface type was shown as "unsupported" in CMIS modules.
• Fixed the configuration of the TS1s sent by the DownStream port (DSP) when moving to EQLZ.ph2.
• PLDM firmware update process failed in case 1304 bytes chunk size is chosen.
• An issue that occurred during secure firmware update when decrypting and authenticating each chunk of data using its authentication tag. The issue appeared when the main code chunk was split between the user chunks and any GCM operation (e.g., flash read with decryption). This GCM operation broke the GCM context for main chunk authentication and therefore failed. 
• CNP received, handled, and ignored counters in the hardware counters could not work after moving to Programmable Congestion Control mode.
• Hardware failed to handle an error flow that occurred when accessing the DPA cluster L2 cache from the firmware processor. In this case the firmware processor hardware requested a VA=>PA translation from the internal mmio, and the address translation was broken by the mmio on the 4K page boundary.
• Hardware failed to consume Port-VL and credits, which consequently blocked traffic from being transmitted due to a race condition between the firmware and the hardware when accessing the chip memory (CR space).

• Code optimization to save memory repo.

• TLB exception seen while doing esp reset when expander reset was in progress.

• Added the psoc 8.93 binary in peripheral images, updated the reveille version numbers.

• Added whole new Delta PS-pmbus code , Updated the ESP version number.

Please refer to the Release Notes for the complete listing of fixes, enhancements, known issues and work-arounds corresponding to this firmware.

• Smart Array reporting "Storage Enclosure FW upgrade Problem Detected".
• PSU version is showing as "No Ver" after inserted the New bel power PSU.
• GEM_5_2 Coverity defect fix.

Please refer to the Release Notes for the complete listing of fixes, enhancements, known issues and work-arounds corresponding to this firmware.

• Smart Array reporting "Storage Enclosure FW upgrade Problem Detected".
• PSU version is showing as "No Ver" after inserted the New bel power PSU.
• GEM_5_2 Coverity defect fix.

Please refer to the Release Notes for the complete listing of fixes, enhancements, known issues and work-arounds corresponding to this firmware.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.3 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-43505, CVE-2022-40982, CVE-2023-23908 and CVE-2022-41804. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Address an issue where an abnormal power-on-password dialog would pop up even though user did not set a password.

Address the issue where the RBSU "Storage Device Information" was empty when VROC is enabled.

This revision of the System ROM includes the revision of the OpenSSL library 1.1.1u update which provides mitigation for security vulnerabilities documented as CVE-2023-0286, CVE-2022-4304 and CVE-2023-2650.

Address the issue where the TPM status displayed in RBSU and iLO web page was not in sync.

Address the issue where Secure Boot would not be enabled when loading manufacturing default from iLO web.

Address an issue where RSOD would occur when entering System Information from RBSU under legacy mode.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Addressed an issue where the system would hang after uploading the Samsung 1733/1735 U.3 NVMe Drive firmware through FMP.

Addressed an issue where PMEM NUMA nodes were not continuous (3, 5) under 8 8 isolated NUMA nodes configuration.

Addressed an issue where a drive could not be unmounted when hot-plug interrupt was generated during the DPC recovery process, with the event going over the DPC threshold.

Addressed an issue where the TPM status between RBSU and iLO web pages was not synchronized.

Known Issues:

This version of the Server Platform Services (SPS) Firmware contains updates aligned with the Intel Product Update (IPU) version IPU.2023.1 guidance.

Firmware Dependencies:

None

Problems Fixed:

This revision of the Server Platform Services Firmware provides mitigations for security vulnerability documented as CVE-2022-36794. This issue is not unique to HPE servers.

Known Issues:

None

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.3 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-43505 and CVE-2022-40982. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.0.2zh update which provides mitigation for security vulnerabilities documented as CVE-2023-2650.

Addressed an issue where iLO embedded device health info would display blank content under RBSU when the Language was set to Japanese or Chinese.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.2 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-38087. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Addressed the issue where the system might hang due to invalid memory free and usage when TPM is enabled.

Addressed the issue where the PCIe device serial number in OEM SMBIOS type 203 does not populate in some cases.

Addressed the issue where the power-on-password dialog popped up even though user did not set the password.

Addressed the issue where the TPM status between RBSU and iLO web pages was not synchronized.

Addressed the issue where BIOS does not correctly log memory error data and memory health telemetry in AHS.

Known Issues:

This version of the Server Platform Services (SPS) Firmware contains updates aligned with the Intel Product Update (IPU) version IPU.2023.1 guidance.

Firmware Dependencies:

None

Problems Fixed:

This revision of the Server Platform Services Firmware provides mitigations for security vulnerability documented as CVE-2022-36794. This issue is not unique to HPE servers.

Known Issues:

None

Ver. 0.2.3.0(B) contains updates to the firmware packaging and is functionally equivalent to ver. 0.2.3.0. It is not necessary to upgrade with Revision B if a previous component revision was used to upgrade the firmware to version 0.2.3.0.

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where Innovation Engine (IE) may improperly reset every 24 hours. On some systems this could result in a brief drop in CPU utilization or network traffic lasting less than a second.

Known Issues:

None

None

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where Innovation Engine (IE) may improperly reset every 24 hours. On some systems this could result in a brief drop in CPU utilization or network traffic lasting less than a second.

Known Issues:

None

Ver. 0.2.3.0(C) contains updates to the firmware packaging and is functionally equivalent to ver. 0.2.3.0. It is not necessary to upgrade with Revision B if a previous component revision was used to upgrade the firmware to version 0.2.3.0.

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where Innovation Engine (IE) may improperly reset every 24 hours. On some systems this could result in a brief drop in CPU utilization or network traffic lasting less than a second.

Known Issues:

None

None

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where Innovation Engine (IE) may improperly reset every 24 hours. On some systems this could result in a brief drop in CPU utilization or network traffic lasting less than a second.

Known Issues:

None

• Temperature sensors logic inside gSEP model and SES database
• When an IOM is pulled the surviving IOM reports false critical temperatures

Please refer to the Release Notes for the complete listing of fixes, enhancements, known issues and work-arounds corresponding to this firmware.

• Temperature sensors logic inside gSEP model and SES database
• When an IOM is pulled the surviving IOM reports false critical temperatures

Please refer to the Release Notes for the complete listing of fixes, enhancements, known issues and work-arounds corresponding to this firmware.

• Packet loss that occurred when restarting the transmit. 
• An issue that prevented RoCE malformed packets (UDP packet with dest_port equal to RoCE well known udp_dport (0x4791)) from being counted on the vport_counter when the function disables RoCE (through MODIFY_NIC_VPORT_CONTEXT command).
• A memory leakage that occurred when closing connected QPs (Type RC/UC/XRC/DC).
• Added a missing VLAN strip.

• RDE (Redfish) PATCH operation to LLDPTransmit properties "ManagementAddressIPv4", "ManagementAddressIPv6" and "ManagementAddressMAC" were applied only in the first attempt, but failed in the next.
• PLDM AEN event receiver media was changed unexpectedly and destination BDF was overridden with garbage when some PLDM packet were received from the SMBus layer.
• Bad configuration of number of VFs and SFs led to the consumption of too many functions and triggered a FW assert 0x888E. The reduction flows behavior was fixed to ensure the configuration does not exceed the total number of supported functions. 
• InfiniBand L2 QP could not receive RDMA traffic occasionally.
• Running with a debug firmware reduced security as if token was applied.

• Aligned RDE behavior to DSP0266 v1.15.0  table 23.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.3 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-44611 and CVE-2022-40982. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.0.2zh update which provides mitigation for security vulnerabilities documented as CVE-2023-2650.

Addressed an issue where iLO embedded device health info would display blank content under RBSU when the Language was set to Japanese or Chinese.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.2 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-33894 and CVE-2022-38087. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Addressed an issue where the PCIe device serial number in OEM SMBIOS type 203 does not populate in some cases.

Addressed an issue where the power-on-password dialog popped up even though user did not set a password.

Addressed an issue where the TPM status between RBSU and iLO web pages was not synchronized.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.3 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-44611 and CVE-2022-40982. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.1.1u update which provides mitigation for security vulnerabilities documented as CVE-2023-0286, CVE-2022-4304 and CVE-2023-2650.

Address an issue where an abnormal power-on-password dialog would pop up even though user did not set a password.

Address the issue where Secure Boot would not be enabled when loading manufacturing default from iLO web.

Address an issue where RSOD would occur when entering “System Information” from RBSU under legacy mode.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Addressed an issue where the field “DIMM Map-Out Reason” of OEM SMBIOS type 232 would update incorrectly per DIMM status.

Addressed an issue where the TPM status between RBSU and iLO web pages were not synchronized.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.3 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-43505 and CVE-2022-40982. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.0.2zh update which provides mitigation for security vulnerabilities documented as CVE-2023-2650.

Addressed an issue where iLO embedded device health info would display blank content under RBSU when the Language was set to Japanese or Chinese.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.2 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2022-38087. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Addressed the issue where the system might hang due to invalid memory free and usage when TPM is enabled.

Addressed the issue where the PCIe device serial number in OEM SMBIOS type 203 does not populate in some cases.

Addressed the issue where the power-on-password dialog popped up even though user did not set the password.

Addressed the issue where the TPM status between RBSU and iLO web pages was not synchronized.

Addressed the issue where BIOS does not correctly log memory error data and memory health telemetry in AHS.

Known Issues:

• The Enabled-ClusterS2D command now completes successfully when executed on a SATA drive within a D3610 disk enclosure for a NonStop solution.

• The smart carrier, which is the drive case for SAS drives, now authenticates in the D3610/D3710 drive enclosure.

• Added new 7-segment error codes E0 and E1 to report issues with Fan modules A and B, respectively. These new codes only apply to the D3610/D3710 and only display when running firmware 5.04.

• If the storage enclosure processor within the I/O module fails, a hard reset (power down and then power up) is executed to ensure the processor comes back online.

Please refer to the Release Notes for the complete listing of fixes, enhancements, known issues and work-arounds corresponding to this firmware.

• The Enabled-ClusterS2D command now completes successfully when executed on a SATA drive within a D3610 disk enclosure for a NonStop solution.

• The smart carrier, which is the drive case for SAS drives, now authenticates in the D3610/D3710 drive enclosure.

• Added new 7-segment error codes E0 and E1 to report issues with Fan modules A and B, respectively. These new codes only apply to the D3610/D3710 and only display when running firmware 5.04.

• If the storage enclosure processor within the I/O module fails, a hard reset (power down and then power up) is executed to ensure the processor comes back online.

Please refer to the Release Notes for the complete listing of fixes, enhancements, known issues and work-arounds corresponding to this firmware.

Firmware Dependencies:

Problems Fixed:

This revision provides AMD's mitigation for security vulnerabilities for CVE-2022-23829 and CVE-2023-20593 for AMD 2nd Generation EPYC processors, and CVE-2022-23829 and CVE-2023-20569 for AMD 3rd Generation EPYC processor. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.1.1u update which provides mitigation for security vulnerabilities documented as CVE-2023-0286, CVE-2022-4304 and CVE-2023-2650.

Addressed an issue where Secure Boot would not be enabled when loading manufacturing default from iLO web.

Addressed an issue where RSOD would occur when entering "System Information" from RBSU under legacy mode.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Addressed an issue where the "Access Control Service" option under RBSU did not work.

Known Issues:

None

Firmware Dependencies:

None

Problems Fixed:

Addressed a rare issue where CPU could become stuck at its lowest working frequency when dynamic power capping was enabled on AMD-based systems.

Known Issues:

None

None

Firmware Dependencies:

For HPE ProLiant Gen10 Plus servers, iLO5 version 2.55 or above is required to upgrade to this version.

Problems Fixed:

Fixed an issue where the CPU may not restore to original working frequency after turning off Power Capping.

Known Issues:

None