Release Notes for ProLiant Support Pack for Microsoft Windows Server 2003, v7.90 ******************************** Following issues which may be seen with HP ProLiant Support Pack (PSP) 7.80, have been resolved in PSP 7.90: 1) An HP ProLiant server running Microsoft Windows Server 2003 with HP ProLiant Smart Array SAS/SATA Controller Driver (HPCISSS2.SYS) Version 6.6.0 (or earlier) and HP Insight Management Agents may blue screen after applying HP ProLiant Support Pack (PSP) 7.80. HP recommends updating the HPCISSS2.SYS driver to the latest version. For more details on this issue, please refer to the following customer advisories: a) http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01102958 b)http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01102961 2) Issue 2: An HP ProLiant server running Microsoft Windows Server 2003 with HP Network Configuration Utility for Windows Server 2003 (CPQTEAM.SYS) Version 8.60 may blue screen after applying HP ProLiant Support Pack (PSP) 7.80. ******************************** Following is new for Windows 2003 PSP 7.90: 1) The PSP deployment tool RDU was replaced with HP Smart Update Manager. Please refer to the PSP 7.90 user guide for more details on HP Smart Update Manager. 2)"CP008024.exe - HP ProLiant PCI-express Power Management Update for Windows" was added to the PSP. ******************************** Following is the list of all the components that were updated in 7.90 from 7.80. ******************************** cp007671.exe - HP System Management Homepage for Windows Version: 2.1.10.186 Fixes Addressed the following vulnerabilities: 1) CVE-2007-1717: The mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 truncates e-mail messages at the first ASCIIZ ('\0') byte, which might allow context-dependent attackers to prevent intended information from being delivered in e-mail messages. NOTE: this issue might be security-relevant in cases when the trailing contents of e-mail messages are important, such as logging information or if the message is expected to be well-formed. 2) CVE-2007-1711: Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbitrary code by overwriting variables pointing to (1) the GLOBALS array or (2) the session data in _SESSION. NOTE: this issue was introduced when attempting to patch CVE-2007-1701 (MOPB-31-2007). 3) CVE-2007-1583: The mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal register_globals flag and does not disable it in certain cases when a script terminates, which allows remote attackers to invoke available PHP scripts with register_globals functionality that is not detectable by these scripts, as demonstrated by forcing a memory_limit violation. 4) CVE-2007-1582: The resource system in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent attackers to execute arbitrary code by interrupting certain functions in the GD (ext/gd) extension and unspecified other extensions via a userspace error handler, which can be used to destroy and modify internal resources. 5) CVE-2007-1001: Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height values. Enhancements 1) Updated PHP libraries. ******************************** cp007692.exe - HP ProLiant iLO 2 Management Controller Driver for Windows Server 2003 , v1.4.0.0 Enhancements 1) Added support for new HP ProLiant server models. ******************************** cp007548.exe - HP ProLiant 64-Bit/133-MHz Single/Dual Channel Ultra320 SCSI HBA and SCxxXe series SCSI HBA Driver for Windows Server 2003 , v1.24.4.0 Fixes 1) Fixed an intermittent issue of driver installation failure via ProLiant Support Pack. 2) Fixed an issue that causes prolonged shutdown ******************************** cp007914.exe - HP 4/8 Internal Port SAS HBA with RAID and SCxxGe series HBA Driver for Windows Server 2003, v1.24.24.0 B Enhancements 1) Added support for new controller. ******************************** cp007703.exe - HP ProLiant Smart Array SAS/SATA Controller Driver for Windows Server 2003, v6.8.0.32 Fixes 1) Updated the driver to properly handle shutdown events. On certain HP ProLiant servers configured with an HP Smart Array SAS/SATA controller (Driver version 6.6.0.x or earlier) as the boot controller, the system may blue screen or become unresponsive during shutdown after upgrading to Windows 2003 SP2 or applying Storport QFE (KB932755). 2) Corrected a driver issue that resulted in an unexpected system termination after installing the ProLiant Support Pack 7.80. Stop code can be one of the following: 0xD1, 0x50, 0x24. ******************************** cp007955.exe - HP ProLiant Smart Array 5x and 6x Controller Driver for Windows 2000/Windows Server 2003, v5.78.0.32 Fixes 1) Fixed a machine check that was occurring on Integrity servers in certain configurations during shutdown. ******************************** cp007958.exe - HP ProLiant Smart Array Device Manager Extension for Windows Server 2003, v6.4.0.32 Fixes 1) Corrected an issue where the "Launch Agent" button in the Device Manager Extension would not function. 2) Modified the "Visit HP Storage Support on the Web" hyperlink in the Device Manager Extension to point to the correct web page on HP.com. Enhancements 1) Updated to use Microsoft Installer (MSI) to support Windows Server codename Longhorn ******************************** cp007924.exe - HP ProLiant Smart Array SAS/SATA Event Notification Service for Windows 2000/Windows Server 2003, v6.4.0.32 Enhancements 1) Added a description for the HP Smart Array SAS/SATA Event Notification Service to the “Services” branch of the Microsoft Management Console. 2) Changed the wording of Event ID 24601 to make it more user friendly and descriptive. 3) Modified the Event Notification Service to capture the output from the Smart Array Controller firmware and save it to disk (this feature is only available on select HP Smart Array controllers with certain firmware versions). **************************************************************** cp007776.exe - HP ProLiant Remote Monitor Service for Windows, v5.11.3.0 Enhancements 1) Updated installer to allow in-place downgrades to prior versions. **************************************************************** cp007922.exe - HP ProLiant Integrated Lights-Out Management Interface Driver for Windows, v1.12.0.0 Fixes 1) Fixed problem with uninstalling driver via Device Manager. ******************************** cp007819.exe - HP ProLiant Rack Infrastructure Interface Service for Windows Server 2003, v1.24.3.0 Fixes 1) Updated installer to permit "in place" downgrades. This only applies to future versions being downgraded to 1.24.3.0 or later. Downgrades to a version prior to 1.24.3.0 require that the current version be uninstalled first (via Add/Remove Programs in the Control Panel). ******************************** cp007744.exe - HP ProLiant Integrated Management Log Viewer for Windows, v5.13.0.0 Fixes 1) Updated installer to allow in-place downgrades to prior versions. Enhancements 1) Added support for new Advanced Memory Protection events. ******************************** cp007578.exe - HP ProLiant Array Configuration Utility for Windows, v7.85.18.0 Enhancements 1) Enabled drive write cache for all SAS controllers. ******************************** cp007433.exe - HP ProLiant Array Diagnostics Utility for Windows, v7.85.16.0 Enhancements 1) Updated to fix several bug fixes. ******************************** cp007432.exe - HP ProLiant Array Configuration Utility (CLI) for Windows, v7.85.18.0 Enhancements 1) Enabled drive write cache for all SAS controllers. ******************************** cp007600.exe - HP NC31xx Fast Ethernet NIC Driver for Windows Server 2003, v8.0.43.0 (B) Enhancements 1) This component has been updated with the latest component tools so that it interacts correctly with the Windows Server 2003 ProLiant Support Pack. ******************************** cp007714.exe - HP NC-Series Intel Driver for Windows Server 2003, v8.9.1.0 Enhancements 1) This driver is the latest available from Intel. ******************************** cp007655.exe - HP NC-Series Broadcom Driver for Windows Server 2003, v10.39.0.0 Enhancements 1) This driver now supports the NC105i LOM. ******************************** cp007676.exe - HP NC-Series Multifunction Driver for Windows Server 2003, v3.4.10.0 Fixes 1) This driver fixes a problem where a Windows F6 installation halts when multiple Multifunction Adapters were present in a system. 2) The NC-Series Multifunction NDIS 5.2 RSS feature now operates with systems with more than 8 processor cores, which eliminates failures. 3) A data corruption issue has been resolved where SNP, TOE, and Microsoft WinTarget iSCSI components are enabled on a server, which eliminates data failures. Enhancements 1) The multifunction driver set has been updated as a KMDF (Kernel Mode Driver Family) for future compatibility with Windows 2008. KMDF drivers require additional co-installer files WUDFUpdate_01005.dll and WdfCoInstaller01005.dll to be present. These files are included in the distribution and landed in Windows System32 folder during the Smart Start Installer execution. 2) The RIS drivers for WinPE have been updated. ******************************** cp007660.exe - HP NC-Series Intel N1E Driver for Windows Server 2003, v9.7.38.0 Enhancements 1) This driver includes a fix for CPU utilization spikes that could occur during cable disconnects. ******************************** cp007625.exe - HP Network Configuration Utility for Windows Server 2003, v8.70.0.0 Enhancements 1) This software now supports the NC510C, NC510F and NC512m 10 GbE adapters so that you can configure them from within NCU. ******************************** cp007755.exe - HP Version Control Agent for Windows, v2.1.9.790 Fixes 1) Fixed a defect where Version Control Agent (VCA) incorrectly reports inactive or obsolete Software and Drivers that are not actually required to be installed on ProLiant Servers, causing Overall status display as yellow (Degraded). ******************************** cp007669.exe - HP Insight Management Agents for Windows Server 2003, v7.90.0.0 Fixes 1) Physical disk performance values were showing garbage in non English OS Enhancements 1) Enhanced support for Power Meter Information. 2) Enhance support for C-class Rack Information. ******************************** cp008049.exe - HP Lights-Out Online Configuration Utility for Windows Server 2003, v1.5.1.1 B Fixes 1. Updated the component installer to not check for agents as a dependency. ******************************** cp007668.exe - HP Insight Diagnostics Online Edition for Windows Server 2003, v7.9.0.2359 Enhancements 1) Added support for new ProLiant hardware. ******************************** Copyright 2003-2007 Hewlett-Packard Development Company, L.P.