This version of the System ROM should be paired with Server Platform Services (SPS) Firmware 04.04.04.603 (2.00_12_18_2023).

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where the PCI VPD data would be written unconditionally while system is accessing to PCI VPD.
This revision of the System ROM includes the latest revision of the Intel IPU 2024.1 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2021-38575, CVE-2022-36763, CVE-2022-36764, CVE-2023-45229 and CVE-2023-45853. This security vulnerability is documented in the CVE report site.  This issue is not unique to HPE servers.
Addressed an issue where the UBM version between RBSU and iLO web pages was not synchronized.
Addressed an issue where NVME hot plug when installing fully loaded NVME drives.
Addressed a potential security vulnerability in some 3rd and 4th Generation Intel® Xeon® Processors when using Intel® Software Guard Extensions (SGX) or Intel® Trust Domain Extensions (TDX) may allow escalation of privilege, as documented in CVE-2023-22655.
Addressed an issue vulnerabilities in network IP stack documented as from CVE-2023-45230 to CVE-2023-45237.
Addressed an issue where the PCIE slot control would disappear in RBSU when the PCIE switchboard is installed in the system.
Addressed an issue where the iSCSI SW ipv6 HDD could not be found under OS when iSCSI IP Address Type option is set to Auto in RBSU Network Options / iSCSI Configuration / Add an iSCSI Attempt > select Network device > IP Address Type.
Addressed an issue where setup options of the BIOS Configuration (RBSU) utility may not be synchronized to the latest state when a server is idle in RBSU for more than 30 minutes.

Known Issues:

None

Firmware Dependencies:

Problems Fixed:

Addressed an issue where the PCI VPD data would be written unconditionally while system is accessing to PCI VPD.

This revision of the System ROM includes the latest revision of the Intel IPU 2024.1 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2021-38575, CVE-2022-36763, CVE-2022-36764, CVE-2023-45229 and CVE-2023-45853. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Addressed an issue where the UBM version between RBSU and iLO web pages was not synchronized.

Addressed an issue where NVME hot plug when installing fully loaded NVME drives.

Addressed an issue vulnerabilities in network IP stack documented as from CVE-2023-45230 to CVE-2023-45237.

Addressed an issue where the PCIE slot control would disappear in RBSU when the PCIE switchboard is installed in the system.

Addressed an issue where the iSCSI SW ipv6 HDD can't be found under OS when iSCSI IP Address Type option is set to Auto in RBSU Network Options / iSCSI Configuration / Add an iSCSI Attempt > select Network device > IP Address Type.

Known Issues:

• The Enabled-ClusterS2D command now completes successfully when executed on a SATA drive within a D3610 disk enclosure for a NonStop solution.

• The smart carrier, which is the drive case for SAS drives, now authenticates in the D3610/D3710 drive enclosure.

• Added new 7-segment error codes E0 and E1 to report issues with Fan modules A and B, respectively. These new codes only apply to the D3610/D3710 and only display when running firmware 5.04.

• If the storage enclosure processor within the I/O module fails, a hard reset (power down and then power up) is executed to ensure the processor comes back online.

Please refer to the Release Notes for the complete listing of fixes, enhancements, known issues and work-arounds corresponding to this firmware.

• The Enabled-ClusterS2D command now completes successfully when executed on a SATA drive within a D3610 disk enclosure for a NonStop solution.

• The smart carrier, which is the drive case for SAS drives, now authenticates in the D3610/D3710 drive enclosure.

• Added new 7-segment error codes E0 and E1 to report issues with Fan modules A and B, respectively. These new codes only apply to the D3610/D3710 and only display when running firmware 5.04.

• If the storage enclosure processor within the I/O module fails, a hard reset (power down and then power up) is executed to ensure the processor comes back online.

Please refer to the Release Notes for the complete listing of fixes, enhancements, known issues and work-arounds corresponding to this firmware.

This version of the System ROM should be paired with Server Platform Services (SPS) Firmware 04.04.04.603 (2.00_12_18_2023).

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where the PCI VPD data would be written unconditionally while system is accessing to PCI VPD.
This revision of the System ROM includes the latest revision of the Intel IPU 2024.1 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2021-38575, CVE-2022-36763, CVE-2022-36764, CVE-2023-45229 and CVE-2023-45853. This security vulnerability is documented in the CVE report site.  This issue is not unique to HPE servers.
Addressed an issue where the UBM version between RBSU and iLO web pages was not synchronized.
Addressed an issue where NVME hot plug when installing fully loaded NVME drives.
Addressed a potential security vulnerability in some 3rd and 4th Generation Intel® Xeon® Processors when using Intel® Software Guard Extensions (SGX) or Intel® Trust Domain Extensions (TDX) may allow escalation of privilege, as documented in CVE-2023-22655.
Addressed an issue vulnerabilities in network IP stack documented as from CVE-2023-45230 to CVE-2023-45237.
Addressed an issue where the PCIE slot control would disappear in RBSU when the PCIE switchboard is installed in the system.
Addressed an issue where the iSCSI SW ipv6 HDD could not be found under OS when iSCSI IP Address Type option is set to Auto in RBSU Network Options / iSCSI Configuration / Add an iSCSI Attempt > select Network device > IP Address Type.
Addressed an issue where setup options of the BIOS Configuration (RBSU) utility may not be synchronized to the latest state when a server is idle in RBSU for more than 30 minutes.

Known Issues:

None

Firmware Dependencies:

Problems Fixed:

Addressed an issue where the PCI VPD data would be written unconditionally while system is accessing to PCI VPD.

This revision of the System ROM includes the latest revision of the Intel IPU 2024.1 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2021-38575, CVE-2022-36763, CVE-2022-36764, CVE-2023-45229 and CVE-2023-45853. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Addressed an issue where the UBM version between RBSU and iLO web pages was not synchronized.

Addressed an issue where NVME hot plug when installing fully loaded NVME drives.

Addressed an issue vulnerabilities in network IP stack documented as from CVE-2023-45230 to CVE-2023-45237.

Addressed an issue where the PCIE slot control would disappear in RBSU when the PCIE switchboard is installed in the system.

Addressed an issue where the iSCSI SW ipv6 HDD can't be found under OS when iSCSI IP Address Type option is set to “Auto” in RBSU Network Options / iSCSI Configuration / Add an iSCSI Attempt > select Network device > IP Address Type.

Known Issues:

Ver. 3.00_01-26-2024(B) contains updates to the firmware packaging and is functionally equivalent to ver. 3.00_01-26-2024. It is not necessary to upgrade with Revision B if a previous component revision was used to upgrade the firmware to version 3.00_01-26-2024.

This revision of the System ROM includes AMD reference code MilanPI 1.0.0.C for AMD 3rd Generation EPYC processors. This revision of the System ROM includes AMD reference code RomePI 1.0.0.H for AMD 2nd Generation EPYC processors. This revision of the System ROM includes the mitigation for security vulnerabilities CVE-2023-31346 and CVE-2023-31347 for AMD 3rd Generation EPYC processors. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers. This revision of the System ROM includes the mitigation for NetworkPkg iSCSI Dxe driver vulnerability documented as CVE-2021-38575. This revision of the System ROM includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented as CVE-2023-45229, CVE-2023-45230, CVE-2023-45231, CVE-2023-45232, CVE-2023-45233, CVE-2023-45234, CVE-2023-45235, CVE-2023-45236, and CVE-2023-45237.

Firmware Dependencies:

None

Problems Fixed:

This revision of the System ROM includes the mitigation for security vulnerabilities CVE-2023-31346 and CVE-2023-31347 for AMD 3rd Generation EPYC processors. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the mitigation for NetworkPkg iSCSI Dxe driver vulnerability documented as CVE-2021-38575.

This revision of the System ROM includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented as CVE-2023-45229 CVE-2023-45230 CVE-2023-45231 CVE-2023-45232 CVE-2023-45233 CVE-2023-45234 CVE-2023-45235 CVE-2023-45236 CVE-2023-45237.

Known Issues:

None

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the mitigation for security vulnerabilities CVE-2023-31346 and CVE-2023-31347 for AMD 3rd Generation EPYC processors. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the mitigation for NetworkPkg iSCSI Dxe driver vulnerability documented as CVE-2021-38575.

This revision of the System ROM includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented as CVE-2023-45229 CVE-2023-45230 CVE-2023-45231 CVE-2023-45232 CVE-2023-45233 CVE-2023-45234 CVE-2023-45235 CVE-2023-45236 CVE-2023-45237.

Known Issues:

• RDE LLDPTransmit ChassisID was occassionally not represented correctly.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM contains updates aligned with the Intel Product Update (IPU) version IPU.2024.1 guidance.

This revision of the System ROM includes the mitigation for vulnerabilities documented as CVE-2021-38575, CVE-2023-45853, CVE-2022-36763 and CVE-2022-36764.

This revision of the System ROM includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented as CVE-2023-45229, CVE-2023-45230, CVE-2023-45231, CVE-2023-45232, CVE-2023-45233, CVE-2023-45234, CVE-2023-45235, CVE-2023-45236, and CVE-2023-45237.

Addressed an issue where the operating system cannot detect the iSCSI hard drive through IPv6 installation if the iSCSI IpAddressType is set to auto.

Addressed an issue where DmiAspmCtrl was not set accordingly when setting DMI ASPM to Disabled/L1 Enabled.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.4 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2023-23583. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.1.1v update which provides mitigation for security vulnerabilities documented as CVE-2023-3817.

Addressed an issue where system might hang while accessing IML logs from RBSU.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the mitigation for security vulnerabilities CVE-2023-31346 and CVE-2023-31347 for AMD 3rd Generation EPYC processors. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the mitigation for NetworkPkg iSCSI Dxe driver vulnerability documented as CVE-2021-38575.

This revision of the System ROM includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented as CVE-2023-45229 CVE-2023-45230 CVE-2023-45231 CVE-2023-45232 CVE-2023-45233 CVE-2023-45234 CVE-2023-45235 CVE-2023-45236 CVE-2023-45237.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision provides AMD's mitigation for security vulnerabilities for CVE-2023-20592 for both AMD 2nd and 3rd Generation EPYC processors. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Replaced "AC power" with "external power" in the help text of "Automatic power-on" option. This is due to ProLiant servers also provide the DC power supply option.

Addressed an issue where system might hang while accessing IML logs from RBSU.

Known Issues:

• Component rebuilt to set the 'ResetRequired', 'SysPowerON' parameter values to 'true' in the included payload.json file. This will help SUM categorize the component appropriately for deployment in SPP, and display the correct user prompt after firmware component execution.

The following issues have been fixed in version 16.35.3006:

• Packet loss that occurred when restarting the transmit. 
• An issue that prevented RoCE malformed packets (UDP packet with dest_port equal to RoCE well known udp_dport (0x4791)) from being counted on the vport_counter when the function disables RoCE (through MODIFY_NIC_VPORT_CONTEXT command).
• A memory leakage that occurred when closing connected QPs (Type RC/UC/XRC/DC).
• Added a missing VLAN strip.

• Packet loss that occurred when restarting the transmit. 
• An issue that prevented RoCE malformed packets (UDP packet with dest_port equal to RoCE well known udp_dport (0x4791)) from being counted on the vport_counter when the function disables RoCE (through MODIFY_NIC_VPORT_CONTEXT command).
• A memory leakage that occurred when closing connected QPs (Type RC/UC/XRC/DC).
• Added a missing VLAN strip.

• Fixed an issue that caused the DCR (DC Resources) to be destroyed before the retry option managed to work when the retry timeout is too big. in this case, the DCR' time-to-live was increased, and the maximum retry timeout was decreased.
• Increased PHY power consumption limit to 1.5w.
• Fixed an issue that caused PortCounters.PortRcvErr / PPCNT.infiniband_counters.PortRcvErr not to report port icrc errors.

The following issues have been fixed in version 16.35.3006:

• Packet loss that occurred when restarting the transmit. 
• An issue that prevented RoCE malformed packets (UDP packet with dest_port equal to RoCE well known udp_dport (0x4791)) from being counted on the vport_counter when the function disables RoCE (through MODIFY_NIC_VPORT_CONTEXT command).
• A memory leakage that occurred when closing connected QPs (Type RC/UC/XRC/DC).
• Added a missing VLAN strip.

• Fixed an issue that caused the DCR (DC Resources) to be destroyed before the retry option managed to work when the retry timeout is too big. in this case, the DCR' time-to-live was increased, and the maximum retry timeout was decreased.
• Increased PHY power consumption limit to 1.5w.
• Fixed an issue that caused PortCounters.PortRcvErr / PPCNT.infiniband_counters.PortRcvErr not to report port icrc errors.

The following issues have been fixed in version 16.35.1012

• Rare lanes skew issue that caused CPU to timeout in Rec.idle.
• The card occasionally masked some PCIe AER reporting.
• Incorrect flow of credits blockage that prevented booting during DC cycle test.
• An issue with BMC medium migration from SMBUS to PCIe, and increased FIFOs to pass large packets in case of the migration.

• Firmware got into an unresponsive state and caused unexpected behavior when connecting an optical transceiver that support RxLOS and the remote side port was down.
• The system could not create more than 128K QPs.
• On rare occasions, the system got into an unresponsive state when a peer port went down while using an Optical module.
• Packet Pacing rate was used if asymmetric VFs was enabled.
• Incorrect RNR timeout when trying to set it during the rts2rts_qp transition.
• Issue with RSS on IPSec flows in ConnectX-4 Lx led to performance degradation. In this scenario, the SPI optimization caused packets from a given host to hash to the same CPU core. The fix was to ignore SPI optimization according to l4_type in ConnectX-4 Lx adapter cards.
• The GetInventory NC-SI command reported leading 0xf in firmware version when it started with 0.
   

The following issues have been fixed in version 16.35.3006:

• Packet loss that occurred when restarting the transmit. 
• An issue that prevented RoCE malformed packets (UDP packet with dest_port equal to RoCE well known udp_dport (0x4791)) from being counted on the vport_counter when the function disables RoCE (through MODIFY_NIC_VPORT_CONTEXT command).
• A memory leakage that occurred when closing connected QPs (Type RC/UC/XRC/DC).
• Added a missing VLAN strip.

• Firmware got into an unresponsive state and caused unexpected behavior when connecting an optical transceiver that support RxLOS and the remote side port was down.
• The system could not create more than 128K QPs.
• On rare occasions, the system got into an unresponsive state when a peer port went down while using an Optical module.
• Packet Pacing rate was used if asymmetric VFs was enabled.
• Incorrect RNR timeout when trying to set it during the rts2rts_qp transition.
• Issue with RSS on IPSec flows in ConnectX-4 Lx led to performance degradation. In this scenario, the SPI optimization caused packets from a given host to hash to the same CPU core. The fix was to ignore SPI optimization according to l4_type in ConnectX-4 Lx adapter cards.
• The GetInventory NC-SI command reported leading 0xf in firmware version when it started with 0.
   

The following issues have been fixed in version 16.35.1012:

• RDE (Redfish) PATCH operation to LLDPTransmit properties "ManagementAddressIPv4", "ManagementAddressIPv6" and "ManagementAddressMAC" were applied only in the first attempt, but failed in the next.
• PLDM AEN event receiver media was changed unexpectedly and destination BDF was overridden with garbage when some PLDM packet were received from the SMBus layer.
• Bad configuration of number of VFs and SFs led to the consumption of too many functions and triggered a FW assert 0x888E. The reduction flows behavior was fixed to ensure the configuration does not exceed the total number of supported functions. 
• InfiniBand L2 QP could not receive RDMA traffic occasionally.
• Running with a debug firmware reduced security as if token was applied.

Ver. 3.00_01-26-2024(B) contains updates to the firmware packaging and is functionally equivalent to ver. 3.00_01-26-2024. It is not necessary to upgrade with Revision B if a previous component revision was used to upgrade the firmware to version 3.00_01-26-2024.

This version of the System ROM contains updates aligned with vulnerability fixes in EDK2 NetworkPkg IP stack implementation that is described in the address https://github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-gj7h.

Firmware Dependencies:

None

Problems Fixed:

This revision of the System ROM includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented as CVE-2023-45229, CVE-2023-45230, CVE-2023-45231, CVE-2023-45232, CVE-2023-45233, CVE-2023-45234, CVE-2023-45235, CVE-2023-45236, and CVE-2023-45237.

Known Issues:

None

This version of the System ROM contains updates aligned with vulnerability fixes in EDK2 NetworkPkg IP stack implementation that is described in the address https://github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-gj7h.

Firmware Dependencies:

None

Problems Fixed:

This revision of the System ROM includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented as CVE-2023-45229, CVE-2023-45230, CVE-2023-45231, CVE-2023-45232, CVE-2023-45233, CVE-2023-45234, CVE-2023-45235, CVE-2023-45236, and CVE-2023-45237.

Known Issues:

None

• Smart Array reporting "Storage Enclosure FW upgrade Problem Detected".
• PSU version is showing as "No Ver" after inserted the New bel power PSU.
• GEM_5_2 Coverity defect fix.

Please refer to the Release Notes for the complete listing of fixes, enhancements, known issues and work-arounds corresponding to this firmware.

• Smart Array reporting "Storage Enclosure FW upgrade Problem Detected".
• PSU version is showing as "No Ver" after inserted the New bel power PSU.
• GEM_5_2 Coverity defect fix.

Please refer to the Release Notes for the complete listing of fixes, enhancements, known issues and work-arounds corresponding to this firmware.

• Fixed OID name hrSystemUptime is reported incorrectly

• Fixed incorrect NVMe drive information displayed after hot plugging.
• Fixed SSD wear status sudden peak value triggering SNMP trap false alarm.
• Fixed incomplete uninstallation for amscli while upgrading Agentless Management Service.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM contains updates aligned with the Intel Product Update (IPU) version IPU.2024.1 guidance.

This revision of the System ROM includes the mitigation for vulnerabilities documented as CVE-2023-45853 and CVE-2021-38575.

This revision of the System ROM includes the revision of the OpenSSL library 1.0.2zi update which provides mitigation for security vulnerabilities documented as CVE-2023-3817.

This revision of the System ROM includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented as CVE-2023-45229, CVE-2023-45230, CVE-2023-45231, CVE-2023-45232, CVE-2023-45233, CVE-2023-45234, CVE-2023-45235, CVE-2023-45236, and CVE-2023-45237.

Addressed an issue where the operating system cannot detect the iSCSI hard drive through IPv6 installation if the iSCSI IpAddressType is set to auto.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Addressed an issue where “Restore Manufacturing Defaults” and “Restore Defaults” from iLO web did not restore the Secure Boot Status.

Addressed an issue where system might hang while accessing IML log from RBSU.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM contains updates aligned with the Intel Product Update (IPU) version IPU.2024.1 guidance.

This revision of the System ROM includes the mitigation for vulnerabilities documented as CVE-2021-38575, CVE-2023-45853, CVE-2022-36763 and CVE-2022-36764.

This revision of the System ROM includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented as CVE-2023-45229, CVE-2023-45230, CVE-2023-45231, CVE-2023-45232, CVE-2023-45233, CVE-2023-45234, CVE-2023-45235, CVE-2023-45236, and CVE-2023-45237.

Addressed an issue where the operating system cannot detect the iSCSI hard drive through IPv6 installation if the iSCSI IpAddressType is set to auto.

Addressed an issue where DmiAspmCtrl was not set accordingly when setting DMI ASPM to Disabled/L1 Enabled.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.4 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2023-23583. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.1.1v update which provides mitigation for security vulnerabilities documented as CVE-2023-3817.

Addressed an issue where system might hang while accessing IML logs from RBSU.

Known Issues:

• Temperature sensors logic inside gSEP model and SES database
• When an IOM is pulled the surviving IOM reports false critical temperatures

Please refer to the Release Notes for the complete listing of fixes, enhancements, known issues and work-arounds corresponding to this firmware.

• Temperature sensors logic inside gSEP model and SES database
• When an IOM is pulled the surviving IOM reports false critical temperatures

Please refer to the Release Notes for the complete listing of fixes, enhancements, known issues and work-arounds corresponding to this firmware.

Ver. 1.0.0.22(B) contains updates to the firmware packaging and is functionally equivalent to ver. 1.0.0.22. It is not necessary to upgrade with Revision B if a previous component revision was used to upgrade the firmware to version 1.0.0.22.

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where Innovation Engine (IE) may improperly reset every 24 hours.

Known Issues:

None

None

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where Innovation Engine (IE) may improperly reset every 24 hours.

Known Issues:

None

This version of the System ROM should be paired with Server Platform Services (SPS) Firmware 04.01.05.002.

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where SBCE and ECC storm records may disappear from AHS.

Addressed an issue where the iSCSI SW IPv6 HDD is not found under OS when the iSCSI IpAddressType is set to Auto.

Addressed an issue where the server may hang due to an IE function error.

Merged the solutions from EDK2 for vulnerabilities:

- Buffer overflow in the DHCPv6 client via a long Server ID option

- Out-of-bounds read when handling a ND Redirect message with truncated options

- Infinite loop when parsing unknown options in the Destination Options header

- Infinite loop when parsing a PadN option in the Destination Options header

- Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message

- Predictable TCP ISNs

- Use of a Weak PseudoRandom Number Generator

Known Issues:

None

Firmware Dependencies:

Problems Fixed:

Addressed an issue where SBCE and ECC storm records may disappear from AHS.

Addressed an issue where the iSCSI SW IPv6 HDD is not found under OS when the iSCSI IpAddressType is set to Auto.

Addressed an issue where the server may hang due to an IE function error.

Merged the solutions from EDK2 for vulnerabilities:

- Buffer overflow in the DHCPv6 client via a long Server ID option

- Out-of-bounds read when handling a ND Redirect message with truncated options

- Infinite loop when parsing unknown options in the Destination Options header

- Infinite loop when parsing a PadN option in the Destination Options header

- Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message

- Predictable TCP ISNs

- Use of a Weak PseudoRandom Number Generator

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented as CVE-2023-45229 CVE-2023-45230 CVE-2023-45231 CVE-2023-45232 CVE-2023-45233 CVE-2023-45234 CVE-2023-45235 CVE-2023-45236 CVE-2023-45237.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Addressed an issue where Restore Manufacturing Defaults and Restore Defaults from iLO web did not restore the Secure Boot Status.

Replaced "AC power" with "external power" in the help text of "Automatic power-on" option. This is due to ProLiant servers also provide the DC power supply option.

Addressed an issue where system might hang while accessing IML logs from RBSU.

Known Issues:

• PortRcvPkts counter was prevented from being cleared after resetting it.
• The system Timed Out on the configuration cycle of the Virtual Functions (VFs) when more than 10 Virtual Functions performed FLR and the completion Time Out value was configured to a range of less than 16 msec.
• The server hangs and results in NMI when running “mlxfwtop –d mt4103_pci_cr0” while restarting the driver in parallel (from a different thread). In this case, the downstream bridge over the device reported completion timeout error.
• In flow_steering, BMC could not receive a ping over IPV6 after running bmc_reboot.
• While closing the HCA, the RX packet caused bad access to resources that did not exist, and consequently caused the QPCGW or the irisc to get stuck.
• The master SMLID and the LID was either 0 or 0xFFFF when the port was neither active nor armed.
• ibdump could not capture all MADs packets.
• link did not go up after reboot.
• Fixed a rare issue that cause the PCIe configuration cycle that arrived during the time of sw_reset to generate 2 completions.
• Network Controller Sideband Interface (NC-SI) did not work when adding the disable_static_steering_ini field in the ini file, due to memory allocation issue for this field in the scratchpad.

Fixes in version 2.42.5056:

• Fixed an issue that resulted in reading from invalid I/O address on handover from UEFI boot to OS boot, when a port was configured as InfiniBand on a VPI adapter device.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the mitigation for security vulnerabilities CVE-2023-31346 and CVE-2023-31347 for AMD 3rd Generation EPYC processors. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the mitigation for NetworkPkg iSCSI Dxe driver vulnerability documented as CVE-2021-38575.

This revision of the System ROM includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented as CVE-2023-45229 CVE-2023-45230 CVE-2023-45231 CVE-2023-45232 CVE-2023-45233 CVE-2023-45234 CVE-2023-45235 CVE-2023-45236 CVE-2023-45237.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision provides AMD's mitigation for security vulnerabilities for CVE-2023-20592 for both AMD 2nd and 3rd Generation EPYC processors. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Replaced "AC power" with "external power" in the help text of "Automatic power-on" option. This is due to ProLiant servers also provide the DC power supply option.

Addressed an issue where system might hang while accessing IML logs from RBSU.

Known Issues:

• Fixed the issue where AMS was crashing after plugging and removing a USB drive

• Added an error handling mechanism so that the ahslog service will no longer crash when there is no system package or the packet is NULL.
• Customers who use the snmpwalk command to query cpqSePciSlotWidth OID will see the correct data reported for all ports

• Firmware got into an unresponsive state and caused unexpected behavior when connecting an optical transceiver that support RxLOS and the remote side port was down.
• The system could not create more than 128K QPs.
• On rare occasions, the system got into an unresponsive state when a peer port went down while using an Optical module.
• Packet Pacing rate was used if asymmetric VFs was enabled.
• Incorrect RNR timeout when trying to set it during the rts2rts_qp transition.
• Issue with RSS on IPSec flows in ConnectX-4 Lx led to performance degradation. In this scenario, the SPI optimization caused packets from a given host to hash to the same CPU core. The fix was to ignore SPI optimization according to l4_type in ConnectX-4 Lx adapter cards.
• The GetInventory NC-SI command reported leading 0xf in firmware version when it started with 0.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM contains updates aligned with the Intel Product Update (IPU) version IPU.2024.1 guidance.

This revision of the System ROM includes the mitigation for vulnerabilities documented as CVE-2021-38575, CVE-2023-45853, CVE-2022-36763 and CVE-2022-36764.

This revision of the System ROM includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented as CVE-2023-45229, CVE-2023-45230, CVE-2023-45231, CVE-2023-45232, CVE-2023-45233, CVE-2023-45234, CVE-2023-45235, CVE-2023-45236, and CVE-2023-45237.

Addressed an issue where the operating system cannot detect the iSCSI hard drive through IPv6 installation if the iSCSI IpAddressType is set to auto.

Addressed an issue where DmiAspmCtrl was not set accordingly when setting DMI ASPM to Disabled/L1 Enabled.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel IPU 2023.4 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2023-23583. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the revision of the OpenSSL library 1.1.1v update which provides mitigation for security vulnerabilities documented as CVE-2023-3817.

Addressed an issue where system might hang while accessing IML logs from RBSU.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Addressed an issue where SBCE and ECC storm records may disappear from AHS.

Addressed an issue where the iSCSI SW IPv6 HDD is not found under OS when the iSCSI IpAddressType is set to Auto.

Addressed an issue where the server may hang due to an IE function error.

Merged the solutions from EDK2 for vulnerabilities:

- Buffer overflow in the DHCPv6 client via a long Server ID option

- Out-of-bounds read when handling a ND Redirect message with truncated options

- Infinite loop when parsing unknown options in the Destination Options header

- Infinite loop when parsing a PadN option in the Destination Options header

- Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message

- Predictable TCP ISNs

- Use of a Weak PseudoRandom Number Generator

Known Issues:

Firmware Dependencies:

Problems Fixed:

Addressed an issue where Restore Manufacturing Defaults and Restore Defaults from iLO web did not restore the Secure Boot Status.

Addressed an issue where BIOS did not report CPU status correctly to iLO, and OneView would receive notification when Uncorrectable Machine Check Exception (UMCE) occurs.

Addressed an issue where system might hang while accessing IML logs from RBSU.

Known Issues:

• RDE LLDPTransmit ChassisID was occassionally not represented correctly.

• Product rebuilt to have the new SHA 384 signature.

Fixes in version 2.42.5000:

• PortRcvPkts counter was prevented from being cleared after resetting it.
• The system Timed Out on the configuration cycle of the Virtual Functions (VFs) when more than 10 Virtual Functions performed FLR and the completion Time Out value was configured to a range of less than 16 msec.
• The server hangs and results in NMI when running “mlxfwtop –d mt4103_pci_cr0” while restarting the driver in parallel (from a different thread). In this case, the downstream bridge over the device reported completion timeout error.
• In flow_steering, BMC could not receive a ping over IPV6 after running bmc_reboot.
• While closing the HCA, the RX packet caused bad access to resources that did not exist, and consequently caused the QPCGW or the irisc to get stuck.
• The master SMLID and the LID was either 0 or 0xFFFF when the port was neither active nor armed.
• ibdump could not capture all MADs packets.
• link did not go up after reboot.
• Fixed a rare issue that cause the PCIe configuration cycle that arrived during the time of sw_reset to generate 2 completions.
• Network Controller Sideband Interface (NC-SI) did not work when adding the disable_static_steering_ini field in the ini file, due to memory allocation issue for this field in the scratchpad.

Fixes in version 2.42.5056:

• Fixed an issue that resulted in reading from invalid I/O address on handover from UEFI boot to OS boot, when a port was configured as InfiniBand on a VPI adapter device.

• PortRcvPkts counter was prevented from being cleared after resetting it.
• The system Timed Out on the configuration cycle of the Virtual Functions (VFs) when more than 10 Virtual Functions performed FLR and the completion Time Out value was configured to a range of less than 16 msec.
• The server hangs and results in NMI when running “mlxfwtop –d mt4103_pci_cr0” while restarting the driver in parallel (from a different thread). In this case, the downstream bridge over the device reported completion timeout error.
• In flow_steering, BMC could not receive a ping over IPV6 after running bmc_reboot.
• While closing the HCA, the RX packet caused bad access to resources that did not exist, and consequently caused the QPCGW or the irisc to get stuck.
• The master SMLID and the LID was either 0 or 0xFFFF when the port was neither active nor armed.
• ibdump could not capture all MADs packets.
• link did not go up after reboot.
• Fixed a rare issue that cause the PCIe configuration cycle that arrived during the time of sw_reset to generate 2 completions.
• Network Controller Sideband Interface (NC-SI) did not work when adding the disable_static_steering_ini field in the ini file, due to memory allocation issue for this field in the scratchpad.

Fixes in version 2.42.5056:

• Fixed an issue that resulted in reading from invalid I/O address on handover from UEFI boot to OS boot, when a port was configured as InfiniBand on a VPI adapter device.

Fixed bundle update status reporting when Component download fails after all retries done.

• Congestion Control did not work as expected when Global Route Headers (GRH) was used in traffic of an IB cluster.
• SPDM requests received when CPLD burn flow in progress were answered with incorrect responses.
• When ConnectX-7 adapter card was configured to use the Auto-Negotiation mode, 400G_8x linkup could not be raised.
• When performing a stress toggling on a ConnectX-7 adapter card that was connected to P65334-B21 cable and the speed is set to 100G_1x with interleaved FEC, a long linkup time of up to 5 minutes occurred.
• When raising a link using 200G optical cables while connecting a ConnectX-7 to a ConnectX-7, raising a link with width less than the maximum provided by the cable with speed 25G lane was not supported.
• When raising a link using 400G optical cables while connecting a ConnectX-7 to a ConnectX-7, raising a link with width less than the maximum provided by the cable with speed 50G or 25G lane was not supported.
• WoL packets did not work properly if sent to Unicast destination MAC.
• When performing PCIe link secondary-bus-reset, disable/enable or mlxfwreset on AMD based Genoa systems, the device took longer then expected to link up, due to a PCIe receiver termination misconfiguration.
• Disabling the Relaxed Ordered (RO) capability (relaxed_ordering_read_pci_enabled=0) using the vhca_resource_manager was not functional.
• In rare cases, linkup time of NDR and NDR200 with P49764-B21 transceiver took longer than 60 seconds.
• Selective-Repeat configuration issue which occasionally caused retransmission to wait for timeout instead of out-of-sequence NACK.
• The secondary ASIC run module init failed due to missing condition.
• The adapter cards' quad ports were kept UP when using breakout cables / QSFP-split-4.
• A rare race condition in NODNIC teardown that caused commands to hang on regular PF.

• A code mismatch in the process of handling the cause to the link being down when the remote faults were received.
• An incorrect parameter in the cable info MAD resulted in unnecessary messages in the log.
• An issue that caused the buffer for PLDM firmware update that were pending NIC requests to not being properly locked in case of PLDM-over-NC-SI, and consequently being corrupted by other flows.
• An issue that prevented MSI Interrupts from being advertised correctly, resulting in incorrect MSI being sent.
• "Get Temperature" OEM command did not return a unified temperature occasionally.
• An issue that caused the firmware to miscalculate the value of the maximum current temperature measured from all the diodes (found in the Internal_sensor_curr_temp field).
• Transaction loss when cache replacement transaction occurs in parallel to code transcoding.
• The eeprom module got stuck in polling 20% of the times after reset. To resolve the issue, a delay after config module to high power was added.
• A linkup failure issue that occurred when connecting to a 25GbE transceiver by clearing the PSI Aging before trying to open Tx power.
• A "Bad Signal Integrity" message was seen after power cycle.
• A statics issue that caused the i2c access module to lock and make the switch unresponsive.
• An issue that prevented the get_func_num_from_pci_func_num function from returning the value "-1" for undefined function type.
• Incorrect Signal-to-Noise Ratio (SNR) readings from the "P49764-B21" optical cable module.
• A race condition occurred between insertion and deletion of the same rule in parallel. Such behavior occasionally resulted in firmware accessing a memory that has already been released, thus causing IOMMU / translation error.
• A race condition that led to a firmware assert upon driver removal, or when changing the ETH flow control scheme in case of a stress of larger than MTU ingress packets.
• Incorrect QoS Shaper handling behavior for non-transmitting applications.

• Product rebuilt to have the new SHA 384 signature.

The following issues have been fixed in version 14.32.1010:

• Firmware got into an unresponsive state and caused unexpected behavior when connecting an optical transceiver that support RxLOS and the remote side port was down.
• The system could not create more than 128K QPs.
• On rare occasions, the system got into an unresponsive state when a peer port went down while using an Optical module.
• Packet Pacing rate was used if asymmetric VFs was enabled.
• Incorrect RNR timeout when trying to set it during the rts2rts_qp transition.
• Issue with RSS on IPSec flows in ConnectX-4 Lx led to performance degradation. In this scenario, the SPI optimization caused packets from a given host to hash to the same CPU core. The fix was to ignore SPI optimization according to l4_type in ConnectX-4 Lx adapter cards.
• The GetInventory NC-SI command reported leading 0xf in firmware version when it started with 0.

• Firmware got into an unresponsive state and caused unexpected behavior when connecting an optical transceiver that support RxLOS and the remote side port was down.
• The system could not create more than 128K QPs.
• On rare occasions, the system got into an unresponsive state when a peer port went down while using an Optical module.
• Packet Pacing rate was used if asymmetric VFs was enabled.
• Incorrect RNR timeout when trying to set it during the rts2rts_qp transition.
• Issue with RSS on IPSec flows in ConnectX-4 Lx led to performance degradation. In this scenario, the SPI optimization caused packets from a given host to hash to the same CPU core. The fix was to ignore SPI optimization according to l4_type in ConnectX-4 Lx adapter cards.
• The GetInventory NC-SI command reported leading 0xf in firmware version when it started with 0.

This version of the System ROM should be paired with Server Platform Services (SPS) Firmware 04.01.05.002.

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where SBCE and ECC storm records may disappear from AHS.

Addressed an issue where the iSCSI SW IPv6 HDD is not found under OS when the iSCSI IpAddressType is set to Auto.

Addressed an issue where the server may hang due to an IE function error.

Merged the solutions from EDK2 for vulnerabilities:

- Buffer overflow in the DHCPv6 client via a long Server ID option

- Out-of-bounds read when handling a ND Redirect message with truncated options

- Infinite loop when parsing unknown options in the Destination Options header

- Infinite loop when parsing a PadN option in the Destination Options header

- Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message

- Predictable TCP ISNs

- Use of a Weak PseudoRandom Number Generator

Known Issues:

None

Firmware Dependencies:

Problems Fixed:

Addressed an issue where SBCE and ECC storm records may disappear from AHS.

Addressed an issue where the iSCSI SW IPv6 HDD is not found under OS when the iSCSI IpAddressType is set to Auto.

Addressed an issue where the server may hang due to an IE function error.

Merged the solutions from EDK2 for vulnerabilities:

- Buffer overflow in the DHCPv6 client via a long Server ID option

- Out-of-bounds read when handling a ND Redirect message with truncated options

- Infinite loop when parsing unknown options in the Destination Options header

- Infinite loop when parsing a PadN option in the Destination Options header

- Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message

- Predictable TCP ISNs

- Use of a Weak PseudoRandom Number Generator

Known Issues:

This version of the Server Platform Services (SPS) Firmware contains updates aligned with the Intel Product Update (IPU) version IPU.2023.1 guidance.

Firmware Dependencies:

None

Enhancements/New Features:

This version is in compliance with IPU.2023.1 guidance.

Known Issues:

None

• An error was triggered in case devlink reload was attempted when there were allocated subfunctions.
• Changing the steering mode to firmware steering was unsupported for policy IPsec rules.

• Migration data corruption occurred when running parallel save_vhca_state/load_vhca_state commands on the same PF.

• An issue that prevented the adapter card from handling WoL packets when the host powered up directly into the standby mode.
• CNP received, handled, and ignored counters in the hardware counters could not work after moving to Programmable Congestion Control mode.

Ver. 1.0.0.22(C) contains updates to the firmware packaging and is functionally equivalent to ver. 1.0.0.22. It is not necessary to upgrade with Revision C if a previous component revision was used to upgrade the firmware to version 1.0.0.22.

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where Innovation Engine (IE) may improperly reset every 24 hours.

Known Issues:

None

None

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where Innovation Engine (IE) may improperly reset every 24 hours.

Known Issues:

None

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the mitigation for security vulnerabilities CVE-2023-31346 and CVE-2023-31347 for AMD 3rd Generation EPYC processors. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the mitigation for NetworkPkg iSCSI Dxe driver vulnerability documented as CVE-2021-38575.

This revision of the System ROM includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented as CVE-2023-45229 CVE-2023-45230 CVE-2023-45231 CVE-2023-45232 CVE-2023-45233 CVE-2023-45234 CVE-2023-45235 CVE-2023-45236 CVE-2023-45237.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision provides AMD's mitigation for security vulnerabilities for CVE-2023-20592 for both AMD 2nd and 3rd Generation EPYC processors. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Replaced "AC power" with "external power" in the help text of "Automatic power-on" option. This is due to ProLiant servers also provide the DC power supply option.

Addressed an issue where system might hang while accessing IML logs from RBSU.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM contains updates aligned with the Intel Product Update (IPU) version IPU.2024.1 guidance.

This revision of the System ROM includes the mitigation for vulnerabilities documented as CVE-2023-45853 and CVE-2021-38575.

This revision of the System ROM includes the revision of the OpenSSL library 1.0.2zi update which provides mitigation for security vulnerabilities documented as CVE-2023-3817.

This revision of the System ROM includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented as CVE-2023-45229, CVE-2023-45230, CVE-2023-45231, CVE-2023-45232, CVE-2023-45233, CVE-2023-45234, CVE-2023-45235, CVE-2023-45236, and CVE-2023-45237.

Addressed an issue where the operating system cannot detect the iSCSI hard drive through IPv6 installation if the iSCSI IpAddressType is set to auto.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Addressed an issue where Restore Manufacturing Defaults and Restore Defaults from iLO web did not restore the Secure Boot Status.

Addressed an issue where system might hang while accessing IML log from RBSU.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented as CVE-2023-45229 CVE-2023-45230 CVE-2023-45231 CVE-2023-45232 CVE-2023-45233 CVE-2023-45234 CVE-2023-45235 CVE-2023-45236 CVE-2023-45237.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Addressed an issue where Restore Manufacturing Defaults and Restore Defaults from iLO web did not restore the Secure Boot Status.

Replaced "AC power" with "external power" in the help text of "Automatic power-on" option. This is due to ProLiant servers also provide the DC power supply option.

Addressed an issue where system might hang while accessing IML logs from RBSU.

Known Issues:

This version of the System ROM should be paired with Server Platform Services (SPS) Firmware 04.01.05.002.

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where SBCE and ECC storm records may disappear from AHS.

Addressed an issue where the iSCSI SW IPv6 HDD is not found under OS when the iSCSI IpAddressType is set to Auto.

Addressed an issue where the server may hang due to an IE function error.

Merged the solutions from EDK2 for vulnerabilities:

- Buffer overflow in the DHCPv6 client via a long Server ID option

- Out-of-bounds read when handling a ND Redirect message with truncated options

- Infinite loop when parsing unknown options in the Destination Options header

- Infinite loop when parsing a PadN option in the Destination Options header

- Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message

- Predictable TCP ISNs

- Use of a Weak PseudoRandom Number Generator

Known Issues:

None

Firmware Dependencies:

Problems Fixed:

Addressed an issue where SBCE and ECC storm records may disappear from AHS.

Addressed an issue where the iSCSI SW IPv6 HDD is not found under OS when the iSCSI IpAddressType is set to Auto.

Addressed an issue where the server may hang due to an IE function error.

Merged the solutions from EDK2 for vulnerabilities:

- Buffer overflow in the DHCPv6 client via a long Server ID option

- Out-of-bounds read when handling a ND Redirect message with truncated options

- Infinite loop when parsing unknown options in the Destination Options header

- Infinite loop when parsing a PadN option in the Destination Options header

- Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message

- Predictable TCP ISNs

- Use of a Weak PseudoRandom Number Generator

Known Issues:

This version of the System ROM should be paired with Server Platform Services (SPS) Firmware 04.04.04.603 (2.00_12_18_2023).

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where the PCI VPD data would be written unconditionally while system is accessing to PCI VPD.
This revision of the System ROM includes the latest revision of the Intel IPU 2024.1 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2021-38575, CVE-2022-36763, CVE-2022-36764, CVE-2023-45229 and CVE-2023-45853. This security vulnerability is documented in the CVE report site.  This issue is not unique to HPE servers.
Addressed an issue where the UBM version between RBSU and iLO web pages was not synchronized.
Addressed an issue where NVME hot plug when installing fully loaded NVME drives.
Addressed a potential security vulnerability in some 3rd and 4th Generation Intel® Xeon® Processors when using Intel® Software Guard Extensions (SGX) or Intel® Trust Domain Extensions (TDX) may allow escalation of privilege, as documented in CVE-2023-22655.
Addressed an issue vulnerabilities in network IP stack documented as from CVE-2023-45230 to CVE-2023-45237.
Addressed an issue where the PCIE slot control would disappear in RBSU when the PCIE switchboard is installed in the system.
Addressed an issue where the iSCSI SW ipv6 HDD could not be found under OS when iSCSI IP Address Type option is set to Auto in RBSU Network Options / iSCSI Configuration / Add an iSCSI Attempt > select Network device > IP Address Type.
Addressed an issue where setup options of the BIOS Configuration (RBSU) utility may not be synchronized to the latest state when a server is idle in RBSU for more than 30 minutes.

Known Issues:

None

Firmware Dependencies:

Problems Fixed:

Addressed an issue where the PCI VPD data would be written unconditionally while system is accessing to PCI VPD.

This revision of the System ROM includes the latest revision of the Intel IPU 2024.1 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2021-38575, CVE-2022-36763, CVE-2022-36764, CVE-2023-45229 and CVE-2023-45853. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Addressed an issue where the UBM version between RBSU and iLO web pages was not synchronized.

Addressed an issue where NVME hot plug when installing fully loaded NVME drives.

Addressed an issue vulnerabilities in network IP stack documented as from CVE-2023-45230 to CVE-2023-45237.

Addressed an issue where the PCIE slot control would disappear in RBSU when the PCIE switchboard is installed in the system.

Addressed an issue where the iSCSI SW ipv6 HDD can't be found under OS when iSCSI IP Address Type option is set to “Auto” in RBSU Network Options / iSCSI Configuration / Add an iSCSI Attempt > select Network device > IP Address Type.

Known Issues:

This version of the System ROM should be paired with Server Platform Services (SPS) Firmware 04.04.04.603 (2.00_12_18_2023).

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where the PCI VPD data would be written unconditionally while system is accessing to PCI VPD.
This revision of the System ROM includes the latest revision of the Intel IPU 2024.1 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2021-38575, CVE-2022-36763, CVE-2022-36764, CVE-2023-45229 and CVE-2023-45853. This security vulnerability is documented in the CVE report site.  This issue is not unique to HPE servers.
Addressed an issue where the UBM version between RBSU and iLO web pages was not synchronized.
Addressed an issue where NVME hot plug when installing fully loaded NVME drives.
Addressed a potential security vulnerability in some 3rd and 4th Generation Intel® Xeon® Processors when using Intel® Software Guard Extensions (SGX) or Intel® Trust Domain Extensions (TDX) may allow escalation of privilege, as documented in CVE-2023-22655.
Addressed an issue vulnerabilities in network IP stack documented as from CVE-2023-45230 to CVE-2023-45237.
Addressed an issue where the PCIE slot control would disappear in RBSU when the PCIE switchboard is installed in the system.
Addressed an issue where the iSCSI SW ipv6 HDD could not be found under OS when iSCSI IP Address Type option is set to Auto in RBSU Network Options / iSCSI Configuration / Add an iSCSI Attempt > select Network device > IP Address Type.
Addressed an issue where setup options of the BIOS Configuration (RBSU) utility may not be synchronized to the latest state when a server is idle in RBSU for more than 30 minutes.

Known Issues:

None

Firmware Dependencies:

Problems Fixed:

Addressed an issue where the PCI VPD data would be written unconditionally while system is accessing to PCI VPD.

This revision of the System ROM includes the latest revision of the Intel IPU 2024.1 BIOS update which provides Intel's mitigation for BIOS advisory and security vulnerabilities documented as CVE-2021-38575, CVE-2022-36763, CVE-2022-36764, CVE-2023-45229 and CVE-2023-45853. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Addressed an issue where the UBM version between RBSU and iLO web pages was not synchronized.

Addressed an issue where NVME hot plug when installing fully loaded NVME drives.

Addressed an issue vulnerabilities in network IP stack documented as from CVE-2023-45230 to CVE-2023-45237.

Addressed an issue where the PCIE slot control would disappear in RBSU when the PCIE switchboard is installed in the system.

Addressed an issue where the iSCSI SW ipv6 HDD can't be found under OS when iSCSI IP Address Type option is set to Auto in RBSU Network Options / iSCSI Configuration / Add an iSCSI Attempt > select Network device > IP Address Type.

Known Issues:

This version of the System ROM should be paired with Server Platform Services (SPS) Firmware 04.01.05.002.

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where SBCE and ECC storm records may disappear from AHS.

Addressed an issue where the iSCSI SW IPv6 HDD is not found under OS when the iSCSI IpAddressType is set to Auto.

Addressed an issue where the server may hang due to an IE function error.

Merged the solutions from EDK2 for vulnerabilities:

- Buffer overflow in the DHCPv6 client via a long Server ID option

- Out-of-bounds read when handling a ND Redirect message with truncated options

- Infinite loop when parsing unknown options in the Destination Options header

- Infinite loop when parsing a PadN option in the Destination Options header

- Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message

- Predictable TCP ISNs

- Use of a Weak PseudoRandom Number Generator

Known Issues:

None

Firmware Dependencies:

Problems Fixed:

Addressed an issue where SBCE and ECC storm records may disappear from AHS.

Addressed an issue where the iSCSI SW IPv6 HDD is not found under OS when the iSCSI IpAddressType is set to Auto.

Addressed an issue where the server may hang due to an IE function error.

Merged the solutions from EDK2 for vulnerabilities:

- Buffer overflow in the DHCPv6 client via a long Server ID option

- Out-of-bounds read when handling a ND Redirect message with truncated options

- Infinite loop when parsing unknown options in the Destination Options header

- Infinite loop when parsing a PadN option in the Destination Options header

- Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message

- Predictable TCP ISNs

- Use of a Weak PseudoRandom Number Generator

Known Issues:

Ver. 0.2.3.0(B) contains updates to the firmware packaging and is functionally equivalent to ver. 0.2.3.0. It is not necessary to upgrade with Revision B if a previous component revision was used to upgrade the firmware to version 0.2.3.0.

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where Innovation Engine (IE) may improperly reset every 24 hours. On some systems this could result in a brief drop in CPU utilization or network traffic lasting less than a second.

Known Issues:

None

None

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where Innovation Engine (IE) may improperly reset every 24 hours. On some systems this could result in a brief drop in CPU utilization or network traffic lasting less than a second.

Known Issues:

None

This version of the System ROM should be paired with Server Platform Services (SPS) Firmware 04.01.05.002.

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where SBCE and ECC storm records may disappear from AHS.

Addressed an issue where the iSCSI SW IPv6 HDD is not found under OS when the iSCSI IpAddressType is set to Auto.

Addressed an issue where the server may hang due to an IE function error.

Merged the solutions from EDK2 for vulnerabilities:

- Buffer overflow in the DHCPv6 client via a long Server ID option

- Out-of-bounds read when handling a ND Redirect message with truncated options

- Infinite loop when parsing unknown options in the Destination Options header

- Infinite loop when parsing a PadN option in the Destination Options header

- Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message

- Predictable TCP ISNs

- Use of a Weak PseudoRandom Number Generator

Known Issues:

None

Firmware Dependencies:

Problems Fixed:

Addressed an issue where SBCE and ECC storm records may disappear from AHS.

Addressed an issue where the iSCSI SW IPv6 HDD is not found under OS when the iSCSI IpAddressType is set to Auto.

Addressed an issue where the server may hang due to an IE function error.

Merged the solutions from EDK2 for vulnerabilities:

- Buffer overflow in the DHCPv6 client via a long Server ID option

- Out-of-bounds read when handling a ND Redirect message with truncated options

- Infinite loop when parsing unknown options in the Destination Options header

- Infinite loop when parsing a PadN option in the Destination Options header

- Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message

- Predictable TCP ISNs

- Use of a Weak PseudoRandom Number Generator

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the mitigation for security vulnerabilities CVE-2023-31346 and CVE-2023-31347 for AMD 3rd Generation EPYC processors. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers. This revision of the System ROM includes the mitigation for NetworkPkg iSCSI Dxe driver vulnerability documented as CVE-2021-38575. This revision of the System ROM includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented as CVE-2023-45229 CVE-2023-45230 CVE-2023-45231 CVE-2023-45232 CVE-2023-45233 CVE-2023-45234 CVE-2023-45235 CVE-2023-45236 CVE-2023-45237.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision provides AMD's mitigation for security vulnerabilities for CVE-2023-20592 for both AMD 2nd and 3rd Generation EPYC processors. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Replaced "AC power" with "external power" in the help text of "Automatic power-on" option. This is due to ProLiant servers also provide the DC power supply option.

Addressed an issue where system might hang while accessing IML logs from RBSU.

Known Issues:

This version of the System ROM should be paired with Server Platform Services (SPS) Firmware 04.01.05.002.

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where SBCE and ECC storm records may disappear from AHS.

Addressed an issue where the iSCSI SW IPv6 HDD is not found under OS when the iSCSI IpAddressType is set to Auto.

Addressed an issue where the server may hang due to an IE function error.

Merged the solutions from EDK2 for vulnerabilities:

- Buffer overflow in the DHCPv6 client via a long Server ID option

- Out-of-bounds read when handling a ND Redirect message with truncated options

- Infinite loop when parsing unknown options in the Destination Options header

- Infinite loop when parsing a PadN option in the Destination Options header

- Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message

- Predictable TCP ISNs

- Use of a Weak PseudoRandom Number Generator

Known Issues:

None

Firmware Dependencies:

Problems Fixed:

Addressed an issue where SBCE and ECC storm records may disappear from AHS.

Addressed an issue where the iSCSI SW IPv6 HDD is not found under OS when the iSCSI IpAddressType is set to Auto.

Addressed an issue where the server may hang due to an IE function error.

Merged the solutions from EDK2 for vulnerabilities:

- Buffer overflow in the DHCPv6 client via a long Server ID option

- Out-of-bounds read when handling a ND Redirect message with truncated options

- Infinite loop when parsing unknown options in the Destination Options header

- Infinite loop when parsing a PadN option in the Destination Options header

- Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message

- Predictable TCP ISNs

- Use of a Weak PseudoRandom Number Generator

Known Issues:

• An issue that prevented the firmware from detecting a link_down event thus preventing the IB bond interface from going to a failover mode.

The following issues have been fixed in version 14.32.1010:

• Firmware got into an unresponsive state and caused unexpected behavior when connecting an optical transceiver that support RxLOS and the remote side port was down.
• The system could not create more than 128K QPs.
• On rare occasions, the system got into an unresponsive state when a peer port went down while using an Optical module.
• Packet Pacing rate was used if asymmetric VFs was enabled.
• Incorrect RNR timeout when trying to set it during the rts2rts_qp transition.
• Issue with RSS on IPSec flows in ConnectX-4 Lx led to performance degradation. In this scenario, the SPI optimization caused packets from a given host to hash to the same CPU core. The fix was to ignore SPI optimization according to l4_type in ConnectX-4 Lx adapter cards.
• The GetInventory NC-SI command reported leading 0xf in firmware version when it started with 0.

The following issues have been fixed in version 16.35.3006:

• Packet loss that occurred when restarting the transmit. 
• An issue that prevented RoCE malformed packets (UDP packet with dest_port equal to RoCE well known udp_dport (0x4791)) from being counted on the vport_counter when the function disables RoCE (through MODIFY_NIC_VPORT_CONTEXT command).
• A memory leakage that occurred when closing connected QPs (Type RC/UC/XRC/DC).
• Added a missing VLAN strip.

• An issue that prevented the firmware from detecting a link_down event thus preventing the IB bond interface from going to a failover mode.

The following issues have been fixed in version 14.32.1010:

• Firmware got into an unresponsive state and caused unexpected behavior when connecting an optical transceiver that support RxLOS and the remote side port was down.
• The system could not create more than 128K QPs.
• On rare occasions, the system got into an unresponsive state when a peer port went down while using an Optical module.
• Packet Pacing rate was used if asymmetric VFs was enabled.
• Incorrect RNR timeout when trying to set it during the rts2rts_qp transition.
• Issue with RSS on IPSec flows in ConnectX-4 Lx led to performance degradation. In this scenario, the SPI optimization caused packets from a given host to hash to the same CPU core. The fix was to ignore SPI optimization according to l4_type in ConnectX-4 Lx adapter cards.
• The GetInventory NC-SI command reported leading 0xf in firmware version when it started with 0.

The following issues have been fixed in version 16.35.3006:

• Packet loss that occurred when restarting the transmit. 
• An issue that prevented RoCE malformed packets (UDP packet with dest_port equal to RoCE well known udp_dport (0x4791)) from being counted on the vport_counter when the function disables RoCE (through MODIFY_NIC_VPORT_CONTEXT command).
• A memory leakage that occurred when closing connected QPs (Type RC/UC/XRC/DC).
• Added a missing VLAN strip.

• Product rebuilt to support FIPS mode enabled OS environment.

The following changes have been made in sub-version 1.0.6(A):

• Product rebuilt to have the new SHA 384 signature.

The following issues have been fixed in version 14.32.1010:

• Firmware got into an unresponsive state and caused unexpected behavior when connecting an optical transceiver that support RxLOS and the remote side port was down.
• The system could not create more than 128K QPs.
• On rare occasions, the system got into an unresponsive state when a peer port went down while using an Optical module.
• Packet Pacing rate was used if asymmetric VFs was enabled.
• Incorrect RNR timeout when trying to set it during the rts2rts_qp transition.
• Issue with RSS on IPSec flows in ConnectX-4 Lx led to performance degradation. In this scenario, the SPI optimization caused packets from a given host to hash to the same CPU core. The fix was to ignore SPI optimization according to l4_type in ConnectX-4 Lx adapter cards.
• The GetInventory NC-SI command reported leading 0xf in firmware version when it started with 0.

• Product rebuilt to have the new SHA 384 signature.

The following issues have been fixed in version 14.32.1010:

• Firmware got into an unresponsive state and caused unexpected behavior when connecting an optical transceiver that support RxLOS and the remote side port was down.
• The system could not create more than 128K QPs.
• On rare occasions, the system got into an unresponsive state when a peer port went down while using an Optical module.
• Packet Pacing rate was used if asymmetric VFs was enabled.
• Incorrect RNR timeout when trying to set it during the rts2rts_qp transition.
• Issue with RSS on IPSec flows in ConnectX-4 Lx led to performance degradation. In this scenario, the SPI optimization caused packets from a given host to hash to the same CPU core. The fix was to ignore SPI optimization according to l4_type in ConnectX-4 Lx adapter cards.
• The GetInventory NC-SI command reported leading 0xf in firmware version when it started with 0.

Firmware Dependencies:

Problems Fixed:

Addressed an issue where SBCE and ECC storm records may disappear from AHS.

Addressed an issue where the iSCSI SW IPv6 HDD is not found under OS when the iSCSI IpAddressType is set to Auto.

Addressed an issue where the server may hang due to an IE function error.

Merged the solutions from EDK2 for vulnerabilities:

- Buffer overflow in the DHCPv6 client via a long Server ID option

- Out-of-bounds read when handling a ND Redirect message with truncated options

- Infinite loop when parsing unknown options in the Destination Options header

- Infinite loop when parsing a PadN option in the Destination Options header

- Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message

- Predictable TCP ISNs

- Use of a Weak PseudoRandom Number Generator

Known Issues:

Firmware Dependencies:

Problems Fixed:

Addressed an issue where Restore Manufacturing Defaults and Restore Defaults from iLO web did not restore the Secure Boot Status.

Addressed an issue where BIOS did not report CPU status correctly to iLO, and OneView would receive notification when Uncorrectable Machine Check Exception (UMCE) occurs.

Addressed an issue where system might hang while accessing IML logs from RBSU.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the mitigation for security vulnerabilities CVE-2023-31346 and CVE-2023-31347 for AMD 3rd Generation EPYC processors. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the mitigation for NetworkPkg iSCSI Dxe driver vulnerability documented as CVE-2021-38575.

This revision of the System ROM includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented as CVE-2023-45229 CVE-2023-45230 CVE-2023-45231 CVE-2023-45232 CVE-2023-45233 CVE-2023-45234 CVE-2023-45235 CVE-2023-45236 CVE-2023-45237.

Known Issues:

Firmware Dependencies:

Problems Fixed:

This revision provides AMD's mitigation for security vulnerabilities for CVE-2023-20592 for both AMD 2nd and 3rd Generation EPYC processors. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

Replaced "AC power" with "external power" in the help text of "Automatic power-on" option. This is due to ProLiant servers also provide the DC power supply option.

Addressed an issue where system might hang while accessing IML logs from RBSU.

Known Issues:

Ver. 3.00_01-26-2024(B) contains updates to the firmware packaging and is functionally equivalent to ver. 3.00_01-26-2024. It is not necessary to upgrade with Revision B if a previous component revision was used to upgrade the firmware to version 3.00_01-26-2024.

This revision of the System ROM includes AMD reference code MilanPI 1.0.0.C for AMD 3rd Generation EPYC processors. This revision of the System ROM includes AMD reference code RomePI 1.0.0.H for AMD 2nd Generation EPYC processors. This revision of the System ROM includes the mitigation for security vulnerabilities CVE-2023-31346 and CVE-2023-31347 for AMD 3rd Generation EPYC processors. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers. This revision of the System ROM includes the mitigation for NetworkPkg iSCSI Dxe driver vulnerability documented as CVE-2021-38575. This revision of the System ROM includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented as CVE-2023-45229, CVE-2023-45230, CVE-2023-45231, CVE-2023-45232, CVE-2023-45233, CVE-2023-45234, CVE-2023-45235, CVE-2023-45236, and CVE-2023-45237.

Firmware Dependencies:

None

Problems Fixed:

This revision of the System ROM includes the mitigation for security vulnerabilities CVE-2023-31346 and CVE-2023-31347 for AMD 3rd Generation EPYC processors. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the mitigation for NetworkPkg iSCSI Dxe driver vulnerability documented as CVE-2021-38575.

This revision of the System ROM includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented as CVE-2023-45229, CVE-2023-45230, CVE-2023-45231, CVE-2023-45232, CVE-2023-45233, CVE-2023-45234, CVE-2023-45235, CVE-2023-45236, and CVE-2023-45237.

Known Issues:

None

This revision of the System ROM includes AMD reference code MilanPI 1.0.0.C for AMD 3rd Generation EPYC processors. This revision of the System ROM includes AMD reference code RomePI 1.0.0.H for AMD 2nd Generation EPYC processors. This revision of the System ROM includes the mitigation for security vulnerabilities CVE-2023-31346 and CVE-2023-31347 for AMD 3rd Generation EPYC processors. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers. This revision of the System ROM includes the mitigation for NetworkPkg iSCSI Dxe driver vulnerability documented as CVE-2021-38575. This revision of the System ROM includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented as CVE-2023-45229, CVE-2023-45230, CVE-2023-45231, CVE-2023-45232, CVE-2023-45233, CVE-2023-45234, CVE-2023-45235, CVE-2023-45236, and CVE-2023-45237.

Firmware Dependencies:

None

Problems Fixed:

This revision of the System ROM includes the mitigation for security vulnerabilities CVE-2023-31346 and CVE-2023-31347 for AMD 3rd Generation EPYC processors. This security vulnerability is documented in the CVE report site. This issue is not unique to HPE servers.

This revision of the System ROM includes the mitigation for NetworkPkg iSCSI Dxe driver vulnerability documented as CVE-2021-38575.

This revision of the System ROM includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented as CVE-2023-45229, CVE-2023-45230, CVE-2023-45231, CVE-2023-45232, CVE-2023-45233, CVE-2023-45234, CVE-2023-45235, CVE-2023-45236, and CVE-2023-45237.

Known Issues:

None

Fixes in version 12.28.2006:

• Fixed an issue that caused the DCR (DC Resources) to be destroyed before the retry option managed to work when the retry timeout is too big. in this case, the DCR' time-to-live was increased, and the maximum retry timeout was decreased.
• Increased PHY power consumption limit to 1.5w.
• Fixed an issue that caused PortCounters.PortRcvErr / PPCNT.infiniband_counters.PortRcvErr not to report port icrc errors.

The following issues have been fixed in version 16.35.3006:

• Packet loss that occurred when restarting the transmit. 
• An issue that prevented RoCE malformed packets (UDP packet with dest_port equal to RoCE well known udp_dport (0x4791)) from being counted on the vport_counter when the function disables RoCE (through MODIFY_NIC_VPORT_CONTEXT command).
• A memory leakage that occurred when closing connected QPs (Type RC/UC/XRC/DC).
• Added a missing VLAN strip.

Fixes in version 12.28.2006:

• Fixed an issue that caused the DCR (DC Resources) to be destroyed before the retry option managed to work when the retry timeout is too big. in this case, the DCR' time-to-live was increased, and the maximum retry timeout was decreased.
• Increased PHY power consumption limit to 1.5w.
• Fixed an issue that caused PortCounters.PortRcvErr / PPCNT.infiniband_counters.PortRcvErr not to report port icrc errors.

The following issues have been fixed in version 16.35.3006:

• Packet loss that occurred when restarting the transmit. 
• An issue that prevented RoCE malformed packets (UDP packet with dest_port equal to RoCE well known udp_dport (0x4791)) from being counted on the vport_counter when the function disables RoCE (through MODIFY_NIC_VPORT_CONTEXT command).
• A memory leakage that occurred when closing connected QPs (Type RC/UC/XRC/DC).
• Added a missing VLAN strip.

Ver. 0.2.3.0(D) contains updates to the firmware packaging and is functionally equivalent to ver. 0.2.3.0. It is not necessary to upgrade with Revision D if a previous component revision was used to upgrade the firmware to version 0.2.3.0.

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where Innovation Engine (IE) may improperly reset every 24 hours. On some systems this could result in a brief drop in CPU utilization or network traffic lasting less than a second.

Known Issues:

None

Ver. 0.2.3.0(C) contains updates to the firmware packaging and is functionally equivalent to ver. 0.2.3.0. It is not necessary to upgrade with Revision B if a previous component revision was used to upgrade the firmware to version 0.2.3.0.

Firmware Dependencies:

None

Problems Fixed:

Addressed an issue where Innovation Engine (IE) may improperly reset every 24 hours. On some systems this could result in a brief drop in CPU utilization or network traffic lasting less than a second.

Known Issues:

None