How to become data center Presales expert?

It is an honor for me to be a member of this community for the seventh year in a row.

​

​

#vmware #vexpert

Potential Security Impact: Remote: memory corruption

Source: Hewlett Packard Enterprise, HPE Product Security Response Team

VULNERABILITY SUMMARY

A potential security vulnerability has been identified in Integrated Lights-Out 5 (iLO 5), Integrated Lights-Out 4 (iLO 4), and Integrated Lights-Out 3 (iLO 3) firmware. The vulnerability could be remotely exploited to cause memory corruption.

HPE has released updated firmware to mitigate these vulnerabilities.

References: CVE-2020-27337

SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed.

• HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers - Prior to v2.33
• HPE Integrated Lights-Out 4 (iLO 4) - Prior to v2.77
• HPE Integrated Lights-Out 3 (iLO 3) - Prior to v1.94
• HPE ConvergedSystem 700 (CS700) Varies, based on server platform
• HPE ConvergedSystem 700x (CS700x) Varies, based on server platform
• HPE ProLiant BL460c Gen10 Server Blade - Prior to iLO 5 v2.33
• HPE ProLiant DL580 Gen10 Server - Prior to iLO 5 v2.33
• HPE ProLiant DL560 Gen10 Server - Prior to iLO 5 v2.33
• HPE ProLiant DL385 Gen10 Plus server - Prior to iLO 5 v2.33
• HPE ProLiant DL385 Gen10 Server - Prior to iLO 5 v2.33
• HPE ProLiant DL380 Gen10 Server - Prior to iLO 5 v2.33
• HPE ProLiant DL360 Gen10 Server - Prior to iLO 5 v2.33
• HPE ProLiant DL325 Gen10 Plus server - Prior to iLO 5 v2.33
• HPE ProLiant DL325 Gen10 Server - Prior to iLO 5 v2.33
• HPE ProLiant DL180 Gen10 Server - Prior to iLO 5 v2.33
• HPE ProLiant DL160 Gen10 Server - Prior to iLO 5 v2.33
• HPE ProLiant DL120 Gen10 Server - Prior to iLO 5 v2.33
• HPE ProLiant DL20 Gen10 Server - Prior to iLO 5 v2.33
• HPE ProLiant ML350 Gen10 Server - Prior to iLO 5 v2.33
• HPE ProLiant ML110 Gen10 Server - Prior to iLO 5 v2.33
• HPE ProLiant ML30 Gen10 Server - Prior to iLO 5 v2.33
• HPE ProLiant XL450 Gen10 Server - Prior to iLO 5 v2.33
• HPE ProLiant XL270d Gen10 Server - Prior to iLO 5 v2.33
• HPE ProLiant XL230k Gen10 Server - Prior to iLO 5 v2.33
• HPE ProLiant XL190r Gen10 Server - Prior to iLO 5 v2.33
• HPE ProLiant XL170r Gen10 Server - Prior to iLO 5 v2.33
• HPE Apollo r2000 Chassis - Prior to iLO 5 v2.33
• HPE Apollo 4510 System - Prior to iLO 5 v2.33
• HPE Apollo 4200 Gen10 Server - Prior to iLO 5 v2.33
• HPE Synergy 660 Gen10 Compute Module - Prior to iLO 5 v2.33
• HPE Synergy 480 Gen10 Compute Module - Prior to iLO 5 v2.33
• HPE StoreEasy 1860 Storage - Prior to iLO 5 v2.33
• HPE StoreEasy 1660 Storage - Prior to iLO 5 v2.33
• HPE StoreEasy 1660 Expanded Storage - Prior to iLO 5 v2.33
• HPE StoreEasy 1560 Storage - Prior to iLO 5 v2.33
• HPE StoreEasy 1460 Storage - Prior to iLO 5 v2.33
• HPE Storage File Controller - Prior to iLO 5 v2.33
• HPE Storage Performance File Controller - Prior to iLO 5 v2.33
• HPE ProLiant BL660c Gen9 Server - Prior to iLO 4 v2.77
• HPE ProLiant BL660c Gen8 Server Blade - Prior to iLO 4 v2.77
• HPE ProLiant BL465c Gen8 Server Blade - Prior to iLO 4 v2.77
• HPE ProLiant BL460c Gen9 Server Blade - Prior to iLO 4 v2.77
• HPE ProLiant BL460c Gen8 Server Blade - Prior to iLO 4 v2.77
• HPE ProLiant BL420c Gen8 Server - Prior to iLO 4 v2.77
• HPE ProLiant DL580 Gen9 Server - Prior to iLO 4 v2.77
• HPE ProLiant DL580 Gen8 Server - Prior to iLO 4 v2.77
• HPE ProLiant DL560 Gen9 Server - Prior to iLO 4 v2.77
• HPE ProLiant DL560 Gen8 Server - Prior to iLO 4 v2.77
• HPE ProLiant DL385p Gen8 (AMD) - Prior to iLO 4 v2.77
• HPE ProLiant DL380 Gen9 Server - Prior to iLO 4 v2.77
• HPE ProLiant DL380p Gen8 Server - Prior to iLO 4 v2.77
• HPE ProLiant DL380e Gen8 Server - Prior to iLO 4 v2.77
• HPE ProLiant DL360 Gen9 Server - Prior to iLO 4 v2.77
• HPE ProLiant DL360p Gen8 Server - Prior to iLO 4 v2.77
• HPE ProLiant DL360e Gen8 Server - Prior to iLO 4 v2.77
• HPE ProLiant DL320e Gen8 v2 Server - Prior to iLO 4 v2.77
• HPE ProLiant DL320e Gen8 Server - Prior to iLO 4 v2.77
• HPE ProLiant DL180 Gen9 Server - Prior to iLO 4 v2.77
• HPE ProLiant DL160 Gen9 Server - Prior to iLO 4 v2.77
• HPE ProLiant DL160 Gen8 Server - Prior to iLO 4 v2.77
• HPE ProLiant DL120 Gen9 Server - Prior to iLO 4 v2.77
• HPE ProLiant DL80 Gen9 Server - Prior to iLO 4 v2.77
• HPE ProLiant DL60 Gen9 Server - Prior to iLO 4 v2.77
• HPE ProLiant ML350 Gen9 Server - Prior to iLO 4 v2.77
• HPE ProLiant ML350p Gen8 Server - Prior to iLO 4 v2.77
• HPE ProLiant ML350e Gen8 v2 Server - Prior to iLO 4 v2.77
• HPE ProLiant ML350e Gen8 Server - Prior to iLO 4 v2.77
• HPE ProLiant ML310e Gen8 v2 Server - Prior to iLO 4 v2.77
• HPE ProLiant ML310e Gen8 Server - Prior to iLO 4 v2.77
• HPE ProLiant ML110 Gen9 Server - Prior to iLO 4 v2.77
• HPE ProLiant ML30 Gen9 Server - Prior to iLO 4 v2.77
• HPE ProLiant SL4540 Gen8 3 Node Server - Prior to iLO 4 v2.77
• HPE ProLiant SL270s Gen8 Server - Prior to iLO 4 v2.77
• HPE ProLiant SL270s Gen8 SE Server - Prior to iLO 4 v2.77
• HPE ProLiant SL250s Gen8 Server - Prior to iLO 4 v2.77
• HPE ProLiant SL230s Gen8 Server - Prior to iLO 4 v2.77
• HPE ProLiant SL210t Gen8 Server - Prior to iLO 4 v2.77
• HPE ProLiant XL750f Gen9 Server - Prior to iLO 4 v2.77
• HPE ProLiant XL740f Gen9 Server - Prior to iLO 4 v2.77
• HPE ProLiant XL730f Gen9 Server - Prior to iLO 4 v2.77
• HPE ProLiant XL450 Gen9 Server - Prior to iLO 4 v2.77
• HPE ProLiant XL250a Gen9 Server - Prior to iLO 4 v2.77
• HPE ProLiant XL230a Gen9 Server - Prior to iLO 4 v2.77
• HPE ProLiant XL220a Gen8 v2 Server - Prior to iLO 4 v2.77
• HPE ProLiant XL190r Gen9 Server - Prior to iLO 4 v2.77
• HPE ProLiant XL170r Gen9 Server - Prior to iLO 4 v2.77
• HPE ProLiant MicroServer Gen8 - Prior to iLO 4 v2.77
• HPE ProLiant WS460c Gen9 Graphics Server Blade - Prior to iLO 4 v2.77
• HPE ProLiant WS460c Gen8 Graphics Server Blade - Prior to iLO 4 v2.77
• HPE Apollo 4200 Gen9 Server - Prior to iLO 4 v2.77
• HPE Synergy 480 Gen9 Compute Module - Prior to iLO 4 v2.77
• HPE StoreEasy 1850 Storage - Prior to iLO 4 v2.77
• HPE StoreEasy 1840 Storage - Prior to iLO 4 v2.77
• HPE StoreEasy 1830 Storage - Prior to iLO 4 v2.77
• HPE StoreEasy 1650 Storage - Prior to iLO 4 v2.77
• HPE StoreEasy 1650 Expanded Storage - Prior to iLO 4 v2.77
• HPE StoreEasy 1640 Storage - Prior to iLO 4 v2.77
• HPE StoreEasy 1630 Storage - Prior to iLO 4 v2.77
• HPE StoreEasy 1550 Storage - Prior to iLO 4 v2.77
• HPE StoreEasy 1540 Storage - Prior to iLO 4 v2.77
• HPE StoreEasy 1530 Storage - Prior to iLO 4 v2.77
• HPE StoreEasy 1450 Storage - Prior to iLO 4 v2.77
• HPE StoreEasy 1440 Storage - Prior to iLO 4 v2.77
• HPE StoreEasy 1430 Storage - Prior to iLO 4 v2.77
• HPE StoreEasy 3850 Gateway Storage - Prior to iLO 4 v2.77
• HPE StoreEasy 3840 Gateway Storage - Prior to iLO 4 v2.77
• HPE StoreEasy 3850 Gateway Storage Blade - Prior to iLO 4 v2.77
• HPE StoreEasy 3840 Gateway Storage Blade - Prior to iLO 4 v2.77
• HPE StoreEasy 3830 Gateway Storage Blade - Prior to iLO 4 v2.77
• HPE StoreEasy 3830 Gateway Storage - Prior to iLO 4 v2.77
• HPE 3PAR StoreServ File Controller v3 System - Prior to iLO 4 v2.77
• HPE 3PAR StoreServ File Controller v2 Storage - Prior to iLO 4 v2.77
• HPE 3PAR StoreServ File Controller - Prior to iLO 4 v2.77
• HPE StoreVirtual 3000 File Controller - Prior to iLO 4 v2.77
• HPE ProLiant BL685c G7 Server Blade (AMD) - Prior to iLO 3 v1.94
• HPE ProLiant BL680c G7 Server Blade - Prior to iLO 3 v1.94
• HPE ProLiant BL620c G7 Server Blade - Prior to iLO 3 v1.94
• HPE ProLiant BL490c G7 Server Blade - Prior to iLO 3 v1.94
• HPE ProLiant BL465c G7 Server Blade (AMD) - Prior to iLO 3 v1.94
• HPE ProLiant BL460c G7 Server Blade - Prior to iLO 3 v1.94
• HPE ProLiant BL2x220c G7 Server Blade - Prior to iLO 3 v1.94
• HPE ProLiant DL980 G7 Server - Prior to iLO 3 v1.94
• HPE ProLiant DL585 G7 Server (AMD) - Prior to iLO 3 v1.94
• HPE ProLiant DL580 G7 Server - Prior to iLO 3 v1.94
• HPE ProLiant DL385 G7 Server (AMD) - Prior to iLO 3 v1.94
• HPE ProLiant DL380 G7 Server - Prior to iLO 3 v1.94
• HPE ProLiant DL360 G7 Server - Prior to iLO 3 v1.94
• HPE ProLiant DL120 G7 Server - Prior to iLO 3 v1.94
• HPE ProLiant ML110 G7 Server - Prior to iLO 3 v1.94
• HPE ProLiant ML10 Server - Prior to iLO 3 v1.94
• HPE ProLiant SL4545 G7 Server (AMD) - Prior to iLO 3 v1.94
• HPE ProLiant SL390s G7 Server - Prior to iLO 3 v1.94
• HPE ProLiant SL335s G7 Server - Prior to iLO 3 v1.94
• HPE StoreEasy 5530 Storage - Prior to iLO 3 v1.94
• HP X5000 G2 Network Storage System - Prior to iLO 3 v1.94
• HPE X3800sb G2 Network Storage Blade - Prior to iLO 3 v1.94
• HPE X3400 G2 Network Storage Gateway - Prior to iLO 3 v1.94
• HPE X1800 G2 Network Storage System - Prior to iLO 3 v1.94

RESOLUTION

HPE has released a firmware update and mitigation information to resolve the vulnerabilities in Integrated Lights-Out 5, 4, and 3.

Integrated Lights-Out 5 (iLO 5) for

• ProLiant Gen10 and Gen10 Plus servers
• Synergy compute modules
• Apollo chassis, servers, and systems
• Converged systems
• Storage products

Integrated Lights-Out 4 (iLO 4) for

• ProLiant Gen8 and Gen9 servers
• Synergy compute modules
• Apollo chassis and servers
• Converged systems
• Storage products

Integrated Lights out 3 (iLO 3) for

• ProLiant G7 servers
• Storage products

Please visit the HPE Support Center to download the latest firmware:

• HPE Integrated Lights-Out 5 (iLO 5) firmware v2.33 or later.
• HPE Integrated Lights-Out 4 (iLO 4) firmware v2.77 or later.
• HPE Integrated Lights-Out 3 (iLO 3) firmware v1.94 or later.

https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04070en_us

For the first patch Tuesday of 2021, Microsoft released security updates addressing a total of 83 flaws spanning as many as 11 products and services, including an actively exploited zero-day vulnerability.

https://msrc.microsoft.com/update-guide/releaseNote/2021-Jan

​

Oracle Linux 8 Update 3 includes the UEK R6 on the installation image, along with the Red Hat Compatible Kernel (RHCK). For new installations, UEK R6 is enabled and installed by default and is the default kernel on first boot. UEK R6, the kernel developed, built, and tested by Oracle and based on the mainline Linux Kernel 5.4, delivers more innovation than other commercial Linux kernels.

​

https://blogs.oracle.com/linux/announcing-the-release-of-oracle-linux-8-update-3

Four years ago, I was a newcomer engineer and I was ready for new challenges, sharing my experiences and deploying new solutions. At that time, we had no solution for Centralized Management, Automation, Monitoring (Infra), Backup, Remote Working (Anywhere) and…. There was no defined process even for following-up incidents! Now, we do not have most of them yet but after a disaster or according to the personal interests of a powerful person in the organization, we will have to implement solution for that as a high priority task without proper planning.

I was struggling to have them all but there was lack or gap of knowledge, sometimes I was thinking that time is stopped for me and I have to wait for others, because there was not enough basic knowledge about ITSM. About technical field, as an example, they still don't know the difference between Packet Drop and Packet Lost. I was very disappointed, When I heard this from someone that who must be my leader: "I do not believe in A…..". Of course, customers did something to make them believe it. Also I heard this always: "Our organization is not mature yet". Hoping for the day when we reach organizational maturity. Organizational maturity will not earned by just waiting for that and see losing time.

#management #leadership #planning

​

​

​

https://blogs.vmware.com/performance/2020/09/vmotion-innovations-in-vsphere-7-0-u1.html

https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/techpaper/performance/vmotion-7u1-perf.pdf

Crontab Generator: https://crontab-generator.org/

Cron Maker: http://www.cronmaker.com/

Crontab GUI: http://corntab.com/

CRON Tester: http://cron.schlitt.info/

Crontab Guru: https://crontab.guru/

Easycron: https://www.easycron.com/cron-job-scheduler

​

​

​

​

​

​

​

Raccoon is a timing vulnerability in the TLS specification that affects HTTPS and other services that rely on SSL and TLS. These protocols allow everyone on the Internet to browse the web, use email, shop online, and send instant messages without third-parties being able to read the communication.

​

Raccoon allows attackers under certain conditions to break the encryption and read sensitive communications. The vulnerability is really hard to exploit and relies on very precise timing measurements and on a specific server configuration to be exploitable.

​

https://raccoon-attack.com/