Updated: January 7, 2019

********************************************************************************

Patch-243897: Patch for OneFS 8.1.2.0. This patch addresses multiple Kernel 
issues in OneFS. 

********************************************************************************

This patch can be installed on clusters running the following OneFS version:
8.1.2.0

This patch will deprecate the following patches:
Patch-240794
Patch-237483
Patch-237113

If any conflicting or deprecated patches are installed on the cluster, you must
remove them before installing this patch.

********************************************************************************

RESOLVED ISSUES

The patch includes new fixes for the following vulnerabilities:

* Bug ID 241468
  This fix reduces unnecessary Spectre variant 2 logging during the application 
  of the microcode on each CPU.
  
* Bug ID 237518
  OneFS was affected by the following vulnerabilities: 

     o SGX: Systems with microprocessors utilizing speculative execution and 
	 Intel software guard extensions (Intel SGX) might have allowed unauthorized
	 disclosure of information residing in the L1 data cache from an enclave to 
	 an attacker with local user access via a side-channel analysis.
	 
     o SMM: Systems with microprocessors utilizing speculative execution and 
	 address translations might have allowed unauthorized disclosure of 
	 information residing in the L1 data cache to an attacker with local user 
	 access via a terminal page fault and a side-channel analysis.
	 
     o VMM: Systems with microprocessors utilizing speculative execution and 
	 address translations might have allowed unauthorized disclosure of 
	 information residing in the L1 data cache to an attacker with local 
	 user access with guest OS privilege via a terminal page fault and a 
	 side-channel analysis.

  For more information about CVE-2018-3615, CVE-2018-3620, and CVE-2018-3646, 
  see DSA-2018-220 on the Customer support site.
	 
  For more information about other Spectre and Meltdown vulnerabilities, 
  see DSA-2018-098 on the customer support site.

* Bug ID 231091
  OneFS was affected by the following vulnerabilities: 
  
     o Variant 4: Used memory disambiguation to cause a load to speculatively 
	 read an old value, then used that value to create a side channel.
	 
     o Variant 3a: CPU might have speculatively performed a read of the system 
	 registers not accessible in the current privilege level and the data value 
	 might have been returned to speculative dependent operations.

  For more information about CVE-2018-3639 and CVE-2018-3640, see DSA-2018-220 
  on the Customer Support site.

  For more information about other Spectre and Meltdown vulnerabilities, 
  see DSA-2018-098 on the customer support site.

The patch includes previous fixes for the following vulnerabilities:

* Bug ID 241499
  The version of Expat was updated to 2.2.6. This version addresses 
  CVE-2016-0718 and CVE-2017-9233.
  
  For more information about these CVEs, see DSA-2018-221 
  on the Customer support site.
  
* Bug ID 241777
  This fix restricts the ntpd server to not accept queries from outside the 
  cluster.

* Bug ID 241752
  The version of Curl was updated to 7.60.0.  This version addresses 
  CVE-2018-1000007, CVE-2018-1000120, CVE-2018-1000121, CVE-2018-1000122, 
  CVE-2018-1000300, and CVE-2018-1000301.
  
  For more information about these CVEs, see DSA-2018-221 on the Customer
  support site.
 
* Bug ID 241504
  The version of PCRE was updated to 8.42. This version addresses CVE-2014-8964,
  CVE-2015-2326, CVE-2015-2327, CVE-2015-2328, CVE-2015-3217, CVE-2015-8380, 
  CVE-2015-8381, CVE-2015-8382, CVE-2015-8383, CVE-2015-8384, CVE-2015-8385, 
  CVE-2015-8386, CVE-2015-8387, CVE-2015-8388, CVE-2015-8389, CVE-2015-8390, 
  CVE-2015-8391, CVE-2015-8392, CVE-2015-8393, CVE-2015-8394, CVE-2015-8395, 
  CVE-2016-1283, CVE-2016-3191, CVE-2017-6004. 
  
  For more information about these CVEs, see DSA-2018-221 on the Customer 
  support site.
  
* Bug ID 241486
  The version of SQLite3 was updated to 3.24.0. This version addresses 
  multiple bugs and CVE-2018-8740, CVE-2017-15286, CVE-2017-13685, 
  CVE-2017-10989, CVE-2016-6153, CVE-2015-6607, CVE-2015-5895, CVE-2015-3717, 
  CVE-2015-3416, CVE-2015-3415, CVE-2015-3414. 

  For more information about these CVEs, see DSA-2018-221 on the Customer 
  support site.

* Bug ID 241289
  OneFS was affected by an elevation of privilege vulnerability.  An 
  authenticated attacker might have been able to read sensitive data in memory 
  or control low-level operating system functions.

  For more information about CVE-2018-8897, see DSA-2018-221 on the Customer 
  support site.

* Bug ID 240047
  The version of OpenSSL was updated to 1.0.2p. This version addresses 
  CVE-2018-0732 and CVE-2018-0737.
  
  For more information about these CVEs, see DSA-2018-221 on the Customer
  support site.

* Bug ID 230444
  The version of OpenSSH was updated to 7.7. This version addresses 
  CVE-2017-15906.
  
  For more information about this CVE, see DSA-2018-221 on the Customer
  support site
  
The patch includes the following other fixes:

* Bug ID 237126
  Nodes that had a non-fatal error on pcie 0:0:28 no longer experience
  a fatal trap 19 panic.

* Bug ID 236913
  Nodes would unexpectedly reboot due to a bug in the CMI watchdog.

* Bug ID 236495
  Urgent fix for historical SIDs.
  
* Bug ID 235988
  The order in which the servers were listed was automatically sorted in 
  alphabetical order regardless of GUI or CLI configuration, with no 
  option by the user to re-order. This fix allows users to modify the 
  order in which the servers are listed.

* Bug ID 234871
  The SCSI command timeout was changed and that reduced the likelihood of
  BUF_TIMELOCKs under certain conditions. As a result of this change, the
  SCSI timeout default yielded a regression on F800 SED nodes causing the
  TCG and mirror commands to time out at a new timeout lower than the usual.

* Bug ID 234385
  When quota was configured, delta_cmd_apply might have returned EOVERFLOW
  and caused lots of "ifs_createfile: Truncate Failed. error = 85" 
  in messages.

* Bug ID 232381
  The split from <7,5482> to <7,5483>, where that side of the cluster lost
  quorum, raced with a thread performing a write that was updating the LIN
  master location. Due to another issue, the writer thread wrote to a set of
  superblocks taken from a gmp_info from after the split, but did its 
  superblock quorum check against a gmp_info which was taken from before the
  split. This event enabled the write to proceed (incorrectly) against a group
  that did not have superblock quorum, which incremented the LIN super
  generation in a case where that should not have been permitted.
  
* Bug ID 230791
  If quota hard limit exceeded during the burst I/O operations over 
  Network File System (NFS), it could have led to multiple threads demanding
  exclusive locks to update quota state, thus causing high I/O latency, 
  and ultimately unresponsive NFS connection. The exclusive lock contention
  is now reduced to get better performance.

* Bug ID 230773
  Latency/locking issue around hard and soft quotas was fixed.

* Bug ID 227882
  The SCSI command timeout was changed and that reduced the likelihood of 
  BUF_TIMELOCKs under certain conditions.

********************************************************************************

CHANGED FILES

* /boot/kernel.amd64/cpuctl.ko
 (MD5 = cbc51943117ac35785fa4e72918b91c1)

* /boot/kernel.amd64/kernel.gz
 (MD5 = 13f7aa5697c429037f10e0928ed482c1)

* /boot/kernel.amd64/mnvi.ko.gz
 (MD5 = 89495708805f7110468ce295ef11e3ad)

* /boot/kernel.amd64/mps.ko.gz
 (MD5 = 058dc93369098f163ba7d20169a3d3e8)

* /boot/kernel.amd64/sel.ko
 (MD5 = ba7953529ef0151c5511a41b8f770b69)

* /etc/mcp/scripts/openssh
 (MD5 = 535e1f90beaee412b1d8cbcc216f2fa0)

* /etc/mcp/templates/ntp.conf
 (MD5 = 6eb7ea8f95938adfba3a5a027ef1aa64)

* /etc/rc.d/isi_hw_init
 (MD5 = 828ae95c7affe0299dcd22b1546a06ad)

* /etc/ssh/moduli
 (MD5 = 1d6a0eec8740f8e4ae33f9a7bc0415bd)

* /etc/ssh/ssh_config.sample
 (MD5 = df0a01542a28486139f38a804b387ee9)

* /etc/ssh/sshd_config.sample
 (MD5 = 1800a0ab7e2f44b0fa86847ef662deea)

* /lib/libbsdxml.so.4
 (MD5 = 0e806e7541de1852bce5187e7e33ba4f)

* /lib/libcrypto.so.8
 (MD5 = 2df1f74e0c0f4ffd16d5f7eaded68c41)

* /usr/bin/isi_hwtools/isi_sed
 (MD5 = b85caafe878bfd382f899e735c4817b0)

* /usr/bin/openssl
 (MD5 = dd43137c1b87a0008311f10ee003207e)

* /usr/lib/libisi_hw.so.1
 (MD5 = 69517afc55530f1a5d549a834e15d65c)

* /usr/lib/libisi_pkg.so.1
 (MD5 = 7858e7b12f1e30822d87483868808998)

* /usr/lib/libssl.so.8
 (MD5 = 239a01689df95403ec7d6dc4d57996c6)

* /usr/local/apache24/bin/ab
 (MD5 = 5ac6960168f8c1f2db33e820d53abab8)

* /usr/local/apache24/bin/checkgid
 (MD5 = 6b560f3bc32fdcfcf0d2e4a6bdeeb0da)

* /usr/local/apache24/bin/fcgistarter
 (MD5 = 95019cfa74b1220831340ff7779d1d31)

* /usr/local/apache24/bin/htcacheclean
 (MD5 = 3969badd87badc91cc56803eec1c2f8c)

* /usr/local/apache24/bin/htdbm
 (MD5 = 303c435c9149bbb7ce94f20c92d8e706)

* /usr/local/apache24/bin/htdigest
 (MD5 = 3c0eb7ee68660bdfe114bbb1c95bc5ab)

* /usr/local/apache24/bin/htpasswd
 (MD5 = 1eba017206e6a62b1256b1035125ac7e)

* /usr/local/apache24/bin/httpd
 (MD5 = 49926802d29da849f890859609e11888)

* /usr/local/apache24/bin/httxt2dbm
 (MD5 = 0e6bbb3009c46364d742d010de0e3559)

* /usr/local/apache24/bin/logresolve
 (MD5 = e94e4b132d9a978fde0663c765976c12)

* /usr/local/apache24/bin/rotatelogs
 (MD5 = fb22482076819cc78a5a876943b5de10)

* /usr/local/apache24/modules/mod_ssl.so
 (MD5 = f6aeb30e169de2cb8bb36055d109dcc4)

* /usr/local/bin/curl
 (MD5 = 78eea9411ee377843700e4a00488b240)

* /usr/local/bin/curl-config
 (MD5 = 2152639f9b80b39cc70e9e08239066d1)

* /usr/local/bin/gmetric
 (MD5 = 1ab5a13bb2988d95b8501183e6e0fc3e)

* /usr/local/bin/gstat
 (MD5 = e687b17089c725c08515c5b4dbb4cef2)

* /usr/local/bin/pcre-config
 (MD5 = b0fa6fee6c64a658da1ef49d9c7b81cc)

* /usr/local/bin/pcregrep
 (MD5 = 6574898b3ea0e79893ceec850cb70be9)

* /usr/local/bin/pcretest
 (MD5 = 987b93d26670e70b7969432822547dcb)

* /usr/local/bin/scp
 (MD5 = 60a2ffbada9448463e2c1e8b6bdab1bd)

* /usr/local/bin/sftp
 (MD5 = 262afc4e408dd42088d2a3832440f7ca)

* /usr/local/bin/sqlite3
 (MD5 = dfacb1af803ead4692435de265a1bda8)

* /usr/local/bin/ssh
 (MD5 = 08d427cd9ee4b6d0a5809b9ce76e143f)

* /usr/local/bin/ssh-add
 (MD5 = f441ab5497f73b67b46acc33271492b0)

* /usr/local/bin/ssh-agent
 (MD5 = 137cbaaffdb4eee12186d25a27bd1bfc)

* /usr/local/bin/ssh-keygen
 (MD5 = 97efbd62ff551c4ce55303c28f7d563b)

* /usr/local/bin/ssh-keyscan
 (MD5 = 8cd329e48976cf437f9b1cff873ae3fd)

* /usr/local/bin/xmlwf
 (MD5 = 45076e78157e3d625317aa40aac7d017)

* /usr/local/etc/rc.d/openssh
 (MD5 = 535e1f90beaee412b1d8cbcc216f2fa0)

* /usr/local/lib/ganglia/modcpu.so
 (MD5 = 24744bc23f71b16525d665e9ca978898)

* /usr/local/lib/ganglia/moddisk.so
 (MD5 = 6e85aa7855118eb78c3d2d12e2a92e88)

* /usr/local/lib/ganglia/modload.so
 (MD5 = f286e49627d4921a0d89e71c72237b3a)

* /usr/local/lib/ganglia/modmem.so
 (MD5 = ea98d785f0352acdeaf2ed611a5e5c23)

* /usr/local/lib/ganglia/modmulticpu.so
 (MD5 = e48b90969eedff00f4348c44730d6559)

* /usr/local/lib/ganglia/modnet.so
 (MD5 = d0f03ec4d0dbf4f33991449bfe216288)

* /usr/local/lib/ganglia/modproc.so
 (MD5 = 0cb451eccd8e3ba5726fd10ae2ca1966)

* /usr/local/lib/ganglia/modpython.so
 (MD5 = b3ae491059bddc78a37957bfd4257ab9)

* /usr/local/lib/ganglia/modsys.so
 (MD5 = 0b5fbd3317f51f971568482a714cacc4)

* /usr/local/lib/libaprutil-1.so.0.6.0
 (MD5 = 9a9ee34673dd47ed7244309ec5196929)

* /usr/local/lib/libcurl.so.4.5.0
 (MD5 = 6849ef95dd971ade34da166896edd8c0)

* /usr/local/lib/libexpat.so
 (MD5 = 10a22dbf8982a6198be11006c160b937)

* /usr/local/lib/libexpat.so.1
 (MD5 = 10a22dbf8982a6198be11006c160b937)

* /usr/local/lib/libexpat.so.1.6.8
 (MD5 = 6b9c926849626b5b28e2b75efd0d8720)

* /usr/local/lib/libganglia-3.1.1.so.0
 (MD5 = 047915a08e3b98451ced22046c2dffb0)

* /usr/local/lib/libganglia.la
 (MD5 = 6e9905f4a0dc4034fc27b2e1a2ec7275)

* /usr/local/lib/libpcre.so
 (MD5 = ce70a400b587513bdc5f2055f76fe339)

* /usr/local/lib/libpcre.so.1
 (MD5 = ce70a400b587513bdc5f2055f76fe339)

* /usr/local/lib/libpcre.so.1.2.10
 (MD5 = 8a04313c65d58662482707295f63f908)

* /usr/local/lib/libpcre16.so
 (MD5 = 9bf12d084dbc54e73b5330c08efdaa52)

* /usr/local/lib/libpcre16.so.0
 (MD5 = 9bf12d084dbc54e73b5330c08efdaa52)

* /usr/local/lib/libpcre16.so.0.2.10
 (MD5 = 2b355af924b83f66c6fe70e65f8d8ebc)

* /usr/local/lib/libpcre32.so
 (MD5 = ba0ffae8977d1cb1c54d1075267530d4)

* /usr/local/lib/libpcre32.so.0
 (MD5 = ba0ffae8977d1cb1c54d1075267530d4)

* /usr/local/lib/libpcre32.so.0.0.10
 (MD5 = 8072b706a90a1c5fa74e9363ec18d7c1)

* /usr/local/lib/libpcrecpp.so
 (MD5 = f308ad26ce4f25a8ec0d1d3d07a1c126)

* /usr/local/lib/libpcrecpp.so.0
 (MD5 = f308ad26ce4f25a8ec0d1d3d07a1c126)

* /usr/local/lib/libpcrecpp.so.0.0.1
 (MD5 = dc686bc58ad55058656bbb69c3b321bc)

* /usr/local/lib/libpcreposix.so
 (MD5 = d9a6a689504ce7f511548f7fda501287)

* /usr/local/lib/libpcreposix.so.0
 (MD5 = d9a6a689504ce7f511548f7fda501287)

* /usr/local/lib/libpcreposix.so.0.0.6
 (MD5 = 3a75c337b469118f070f7f6c842e27c9)

* /usr/local/lib/libsqlite3.la
 (MD5 = 4465e75e24f9fbfc7a6d9a1d8c2a7e2a)

* /usr/local/lib/libsqlite3.so.8
 (MD5 = 5a9bcb56668f2c9d3f33efa4ef637835)

* /usr/local/lib/python2.7/lib-dynload/_ssl.so
 (MD5 = 55fe2da34102223e557f6456ef92c768)

* /usr/local/lib/python2.7/site-packages/cryptography/hazmat/bindings/_openssl.so
 (MD5 = 2a26c7d00de856def03402576c754819)

* /usr/local/lib/python2.7/site-packages/pycurl.so
 (MD5 = f7cf0da7319f6cefd5b0b41c84978cce)

* /usr/local/libdata/pkgconfig/expat.pc
 (MD5 = 0cef34b8e640fc36e84fe552f0159171)

* /usr/local/libdata/pkgconfig/libcurl.pc
 (MD5 = f94d1f1cba5855d93eb19082cba7301d)

* /usr/local/libdata/pkgconfig/libpcre.pc
 (MD5 = 4fb6c536c73369f627225d366703c1fa)

* /usr/local/libdata/pkgconfig/libpcre16.pc
 (MD5 = 39e42adb5f67607fba7dc47518e72e20)

* /usr/local/libdata/pkgconfig/libpcre32.pc
 (MD5 = 9b3989180e2cac5c8acd6dc837204f86)

* /usr/local/libdata/pkgconfig/libpcrecpp.pc
 (MD5 = 4c0b85eb7bbae683815bb1042f4849f8)

* /usr/local/libdata/pkgconfig/libpcreposix.pc
 (MD5 = ecd527ef9197d68149ca4dbc58e1623a)

* /usr/local/libdata/pkgconfig/sqlite3.pc
 (MD5 = 9a1dbe6c3acd75023b2482ddff36a3e3)

* /usr/local/libexec/sftp-server
 (MD5 = 2696062fc6e083714fe8eca0948469d7)

* /usr/local/libexec/ssh-keysign
 (MD5 = c94699c0208539d694aa0c506cb46f90)

* /usr/local/libexec/ssh-pkcs11-helper
 (MD5 = 443f4914b1a485fd7383acaffcf59924)

* /usr/local/man/man1/curl-config.1.gz
 (MD5 = 605dedbb5d116c71ab4752b30407d6bb)

* /usr/local/man/man1/curl.1.gz
 (MD5 = 1bc6321c607eeb51a52b7a8c5262fe85)

* /usr/local/man/man1/pcre-config.1.gz
 (MD5 = 22cdcf2058e7338371e0649cd5dfc772)

* /usr/local/man/man1/pcregrep.1.gz
 (MD5 = 8ce9108f62a1221398620506927cbe18)

* /usr/local/man/man1/pcretest.1.gz
 (MD5 = 9805207ea356226b546752bc440dc371)

* /usr/local/man/man1/scp.1.gz
 (MD5 = 201df7f3e241851f53ef6dec98e23fb3)

* /usr/local/man/man1/sftp.1.gz
 (MD5 = efad4adfca16d5f404f1c5814fcdb6b6)

* /usr/local/man/man1/ssh-add.1.gz
 (MD5 = 6c39906d3b2b2adcce12c8b59c76b65d)

* /usr/local/man/man1/ssh-agent.1.gz
 (MD5 = ed89cf8090563fb10a33fea92ee62ff5)

* /usr/local/man/man1/ssh-keygen.1.gz
 (MD5 = a37412e4ed36e10e72b5588d6f1756bb)

* /usr/local/man/man1/ssh-keyscan.1.gz
 (MD5 = a1d199bb601b73d806ad183ab174cbfb)

* /usr/local/man/man1/ssh.1.gz
 (MD5 = ac80a94916988a6c203cbeabb318e9d6)

* /usr/local/man/man1/xmlwf.1.gz
 (MD5 = ee223879b7707b5d811cc111f494e62a)

* /usr/local/man/man5/moduli.5.gz
 (MD5 = 4b9faa97c0f939a39648e65b81f80eaf)

* /usr/local/man/man5/ssh_config.5.gz
 (MD5 = 92ad1976e9b4b5f555126bc150ce31c6)

* /usr/local/man/man5/sshd_config.5.gz
 (MD5 = c99eef6915dca8f2d51e3ea71601473a)

* /usr/local/man/man8/sftp-server.8.gz
 (MD5 = 8341f6d1fa45cdfd0e28a9e38f9a565f)

* /usr/local/man/man8/ssh-keysign.8.gz
 (MD5 = 1a54283c4ee1aeb51e1eb0c32a100208)

* /usr/local/man/man8/ssh-pkcs11-helper.8.gz
 (MD5 = f6779a06d04c6c5aa0147fb04fdec20d)

* /usr/local/man/man8/sshd.8.gz
 (MD5 = 142f2c4c62b35517f89eaa6b0bd21655)

* /usr/local/sbin/gmond
 (MD5 = dceb240f699107667fdbf8d24dbadb4d)

* /usr/local/sbin/ntp-keygen
 (MD5 = 87ebaeed03f067d5d7732bae9918922f)

* /usr/local/sbin/ntpd
 (MD5 = 91b1f8ec29580ca10a033895600e03fd)

* /usr/local/sbin/sshd
 (MD5 = 8e89273ebc3a91f97c13640ec1c29aad)

* /usr/sbin/isi_ucodeupdate
 (MD5 = 6562545befbe2ea54153ee44bc9eeca4)

* /usr/share/isi_ucode/M03106A5_0000001D.bin
 (MD5 = f64144f1d0026fcd89761a3df42747e3)

* /usr/share/isi_ucode/M03206C2_0000001F.bin
 (MD5 = f7fe382a333a5ddcb317d5553f83fd59)

* /usr/share/isi_ucode/M1050662_00000017.bin
 (MD5 = afe3ae2b8078fa117fe5c1def988f7c7)

* /usr/share/isi_ucode/M1050663_07000013.bin
 (MD5 = bb9e9f224a95f890bacaa6405d12bc39)

* /usr/share/isi_ucode/M36506E3_000000C5_000000C6.bin
 (MD5 = a231f54a2356ad98e78b634afccbe0e7)

* /usr/share/isi_ucode/M6D206D6_0000061D.bin
 (MD5 = 69159813bdc2dc232f5dc2080311b4a7)

* /usr/share/isi_ucode/M6D206D7_00000714.bin
 (MD5 = 4bfb167f8a8dadf2c831ee47154d9384)

* /usr/share/isi_ucode/M6F306F2_0000003D.bin
 (MD5 = 2f08f0c8469ea184fdcbb06832df0dd0)

* /usr/share/isi_ucode/MB750654_0200004D.bin
 (MD5 = b2c10489a03c69559675d0dcf2cb60cb)

* /usr/share/isi_ucode/MED306E4_0000042D.bin
 (MD5 = 81b0e85b12515b81edb64a8b252e2ebe)

* /usr/share/isi_ucode/MEF406F1_0B00002E.bin
 (MD5 = 6349faa3a5b1e8945c70908ca80d29a7)

* /usr/share/openssl/man/man1/CA.pl.1.gz
 (MD5 = bd8abffebca586988cdba7acbe10b538)

* /usr/share/openssl/man/man1/asn1parse.1.gz
 (MD5 = f5b434f4433a3fdfe6821f9d5aa8a8b9)

* /usr/share/openssl/man/man1/ca.1.gz
 (MD5 = 072ac75fe2d1f2e54c3a55ea881508ad)

* /usr/share/openssl/man/man1/ciphers.1.gz
 (MD5 = bfb4c49948bbdf176ec9037470c401c2)

* /usr/share/openssl/man/man1/cms.1.gz
 (MD5 = 2ddb1c67ca310b1be5b5d8d96611b543)

* /usr/share/openssl/man/man1/crl.1.gz
 (MD5 = bc69151efd011923a01f3cc659a0d377)

* /usr/share/openssl/man/man1/crl2pkcs7.1.gz
 (MD5 = 4a8eca583102eaf9bc73d7e50b0162d6)

* /usr/share/openssl/man/man1/dgst.1.gz
 (MD5 = aaa4323009c8b35c0b0a5f9c787d1a61)

* /usr/share/openssl/man/man1/dhparam.1.gz
 (MD5 = fc7153a881d9e41a03768174487ba92c)

* /usr/share/openssl/man/man1/dsa.1.gz
 (MD5 = 6dc7efc65b0decd390137ab76fae7abf)

* /usr/share/openssl/man/man1/dsaparam.1.gz
 (MD5 = 0c9c4a69ac33429273fc5a18506a54ab)

* /usr/share/openssl/man/man1/dss1.1.gz
 (MD5 = aaa4323009c8b35c0b0a5f9c787d1a61)

* /usr/share/openssl/man/man1/ec.1.gz
 (MD5 = 6b635eed62852a4f86544b4be0ba3696)

* /usr/share/openssl/man/man1/ecparam.1.gz
 (MD5 = 4020094a6471ee239e101de341386a4b)

* /usr/share/openssl/man/man1/enc.1.gz
 (MD5 = 07d468ad42e4464d84c5371ba2595a0b)

* /usr/share/openssl/man/man1/errstr.1.gz
 (MD5 = 8bd4339daf8f30a6cd3196d319377d77)

* /usr/share/openssl/man/man1/gendsa.1.gz
 (MD5 = e77177261e8b7f6aba0df795248ae473)

* /usr/share/openssl/man/man1/genpkey.1.gz
 (MD5 = a9ad7b504e0073e09fb424b017f5c2a0)

* /usr/share/openssl/man/man1/genrsa.1.gz
 (MD5 = a1552896598e6d145e625f128ede4ae0)

* /usr/share/openssl/man/man1/md2.1.gz
 (MD5 = aaa4323009c8b35c0b0a5f9c787d1a61)

* /usr/share/openssl/man/man1/md4.1.gz
 (MD5 = aaa4323009c8b35c0b0a5f9c787d1a61)

* /usr/share/openssl/man/man1/md5.1.gz
 (MD5 = aaa4323009c8b35c0b0a5f9c787d1a61)

* /usr/share/openssl/man/man1/mdc2.1.gz
 (MD5 = aaa4323009c8b35c0b0a5f9c787d1a61)

* /usr/share/openssl/man/man1/nseq.1.gz
 (MD5 = ee684a6de3496d7a34a0a7acb63249cc)

* /usr/share/openssl/man/man1/ocsp.1.gz
 (MD5 = 090e917cec1ced022bbee9950f42a674)

* /usr/share/openssl/man/man1/openssl-asn1parse.1.gz
 (MD5 = f5b434f4433a3fdfe6821f9d5aa8a8b9)

* /usr/share/openssl/man/man1/openssl-ca.1.gz
 (MD5 = 072ac75fe2d1f2e54c3a55ea881508ad)

* /usr/share/openssl/man/man1/openssl-ciphers.1.gz
 (MD5 = bfb4c49948bbdf176ec9037470c401c2)

* /usr/share/openssl/man/man1/openssl-cms.1.gz
 (MD5 = 2ddb1c67ca310b1be5b5d8d96611b543)

* /usr/share/openssl/man/man1/openssl-crl.1.gz
 (MD5 = bc69151efd011923a01f3cc659a0d377)

* /usr/share/openssl/man/man1/openssl-crl2pkcs7.1.gz
 (MD5 = 4a8eca583102eaf9bc73d7e50b0162d6)

* /usr/share/openssl/man/man1/openssl-dgst.1.gz
 (MD5 = aaa4323009c8b35c0b0a5f9c787d1a61)

* /usr/share/openssl/man/man1/openssl-dhparam.1.gz
 (MD5 = fc7153a881d9e41a03768174487ba92c)

* /usr/share/openssl/man/man1/openssl-dsa.1.gz
 (MD5 = 6dc7efc65b0decd390137ab76fae7abf)

* /usr/share/openssl/man/man1/openssl-dsaparam.1.gz
 (MD5 = 0c9c4a69ac33429273fc5a18506a54ab)

* /usr/share/openssl/man/man1/openssl-ec.1.gz
 (MD5 = 6b635eed62852a4f86544b4be0ba3696)

* /usr/share/openssl/man/man1/openssl-ecparam.1.gz
 (MD5 = 4020094a6471ee239e101de341386a4b)

* /usr/share/openssl/man/man1/openssl-enc.1.gz
 (MD5 = 07d468ad42e4464d84c5371ba2595a0b)

* /usr/share/openssl/man/man1/openssl-errstr.1.gz
 (MD5 = 8bd4339daf8f30a6cd3196d319377d77)

* /usr/share/openssl/man/man1/openssl-gendsa.1.gz
 (MD5 = e77177261e8b7f6aba0df795248ae473)

* /usr/share/openssl/man/man1/openssl-genpkey.1.gz
 (MD5 = a9ad7b504e0073e09fb424b017f5c2a0)

* /usr/share/openssl/man/man1/openssl-genrsa.1.gz
 (MD5 = a1552896598e6d145e625f128ede4ae0)

* /usr/share/openssl/man/man1/openssl-nseq.1.gz
 (MD5 = ee684a6de3496d7a34a0a7acb63249cc)

* /usr/share/openssl/man/man1/openssl-ocsp.1.gz
 (MD5 = 090e917cec1ced022bbee9950f42a674)

* /usr/share/openssl/man/man1/openssl-passwd.1.gz
 (MD5 = 0612c231bc13faefefd0c863b6e7c361)

* /usr/share/openssl/man/man1/openssl-pkcs12.1.gz
 (MD5 = 31ae97675de7eab16ca4368c58843720)

* /usr/share/openssl/man/man1/openssl-pkcs7.1.gz
 (MD5 = 886fe828655c57d44984c4a1f6aebf75)

* /usr/share/openssl/man/man1/openssl-pkcs8.1.gz
 (MD5 = d4f804dc3bcd4957ad05923c55bc2fa1)

* /usr/share/openssl/man/man1/openssl-pkey.1.gz
 (MD5 = 597d4eb79e5dca5819d933d98e249dcb)

* /usr/share/openssl/man/man1/openssl-pkeyparam.1.gz
 (MD5 = 5292acb9e4c42c18f2073b34d5a01199)

* /usr/share/openssl/man/man1/openssl-pkeyutl.1.gz
 (MD5 = 356feefcf6edd3ad9f1de934ca235a53)

* /usr/share/openssl/man/man1/openssl-rand.1.gz
 (MD5 = e1ce1dfaa41ca91e31eaf090e3612ab1)

* /usr/share/openssl/man/man1/openssl-req.1.gz
 (MD5 = 33c6bdb04a97c695e461c944d5e7abdf)

* /usr/share/openssl/man/man1/openssl-rsa.1.gz
 (MD5 = a525d349e25675c7de86e4d456199cfa)

* /usr/share/openssl/man/man1/openssl-rsautl.1.gz
 (MD5 = c15478cbb2f3f67fe596a730c1f359d8)

* /usr/share/openssl/man/man1/openssl-s_client.1.gz
 (MD5 = d78dd2dedc498ccb69b5ff03dd59879b)

* /usr/share/openssl/man/man1/openssl-s_server.1.gz
 (MD5 = 580dbc96ccdb5944b2f544319974c5a9)

* /usr/share/openssl/man/man1/openssl-s_time.1.gz
 (MD5 = 4830bf6b95077ad449b40d14a766e929)

* /usr/share/openssl/man/man1/openssl-sess_id.1.gz
 (MD5 = 0f2dffcc9882440803fd04ddb747eb12)

* /usr/share/openssl/man/man1/openssl-smime.1.gz
 (MD5 = 7feb3755a3f11d5920a11eae50b6b284)

* /usr/share/openssl/man/man1/openssl-speed.1.gz
 (MD5 = 2bd08d9a1a466db693754b71f89bcfe9)

* /usr/share/openssl/man/man1/openssl-spkac.1.gz
 (MD5 = 6b5f8ba2a50e87a4e7f76aa95e38f1eb)

* /usr/share/openssl/man/man1/openssl-ts.1.gz
 (MD5 = 41e8dc51264e71d7d937406a7d314e26)

* /usr/share/openssl/man/man1/openssl-tsget.1.gz
 (MD5 = cab2158cd419c14728397d477945c104)

* /usr/share/openssl/man/man1/openssl-verify.1.gz
 (MD5 = e9be56100c3613a41d8c6c61172837fd)

* /usr/share/openssl/man/man1/openssl-version.1.gz
 (MD5 = b6b8a3fa5c5c4d3744b175dba73c3d06)

* /usr/share/openssl/man/man1/openssl-x509.1.gz
 (MD5 = a77bec74423c127dbb040e339a645e7b)

* /usr/share/openssl/man/man1/openssl.1.gz
 (MD5 = ef0e04e3de9103ba6ceda8fef45e52bd)

* /usr/share/openssl/man/man1/passwd.1.gz
 (MD5 = 0612c231bc13faefefd0c863b6e7c361)

* /usr/share/openssl/man/man1/pkcs12.1.gz
 (MD5 = 31ae97675de7eab16ca4368c58843720)

* /usr/share/openssl/man/man1/pkcs7.1.gz
 (MD5 = 886fe828655c57d44984c4a1f6aebf75)

* /usr/share/openssl/man/man1/pkcs8.1.gz
 (MD5 = d4f804dc3bcd4957ad05923c55bc2fa1)

* /usr/share/openssl/man/man1/pkey.1.gz
 (MD5 = 597d4eb79e5dca5819d933d98e249dcb)

* /usr/share/openssl/man/man1/pkeyparam.1.gz
 (MD5 = 5292acb9e4c42c18f2073b34d5a01199)

* /usr/share/openssl/man/man1/pkeyutl.1.gz
 (MD5 = 356feefcf6edd3ad9f1de934ca235a53)

* /usr/share/openssl/man/man1/rand.1.gz
 (MD5 = e1ce1dfaa41ca91e31eaf090e3612ab1)

* /usr/share/openssl/man/man1/req.1.gz
 (MD5 = 33c6bdb04a97c695e461c944d5e7abdf)

* /usr/share/openssl/man/man1/ripemd160.1.gz
 (MD5 = aaa4323009c8b35c0b0a5f9c787d1a61)

* /usr/share/openssl/man/man1/rsa.1.gz
 (MD5 = a525d349e25675c7de86e4d456199cfa)

* /usr/share/openssl/man/man1/rsautl.1.gz
 (MD5 = c15478cbb2f3f67fe596a730c1f359d8)

* /usr/share/openssl/man/man1/s_client.1.gz
 (MD5 = d78dd2dedc498ccb69b5ff03dd59879b)

* /usr/share/openssl/man/man1/s_server.1.gz
 (MD5 = 580dbc96ccdb5944b2f544319974c5a9)

* /usr/share/openssl/man/man1/s_time.1.gz
 (MD5 = 4830bf6b95077ad449b40d14a766e929)

* /usr/share/openssl/man/man1/sess_id.1.gz
 (MD5 = 0f2dffcc9882440803fd04ddb747eb12)

* /usr/share/openssl/man/man1/sha.1.gz
 (MD5 = aaa4323009c8b35c0b0a5f9c787d1a61)

* /usr/share/openssl/man/man1/sha1.1.gz
 (MD5 = aaa4323009c8b35c0b0a5f9c787d1a61)

* /usr/share/openssl/man/man1/sha224.1.gz
 (MD5 = aaa4323009c8b35c0b0a5f9c787d1a61)

* /usr/share/openssl/man/man1/sha256.1.gz
 (MD5 = aaa4323009c8b35c0b0a5f9c787d1a61)

* /usr/share/openssl/man/man1/sha384.1.gz
 (MD5 = aaa4323009c8b35c0b0a5f9c787d1a61)

* /usr/share/openssl/man/man1/sha512.1.gz
 (MD5 = aaa4323009c8b35c0b0a5f9c787d1a61)

* /usr/share/openssl/man/man1/smime.1.gz
 (MD5 = 7feb3755a3f11d5920a11eae50b6b284)

* /usr/share/openssl/man/man1/speed.1.gz
 (MD5 = 2bd08d9a1a466db693754b71f89bcfe9)

* /usr/share/openssl/man/man1/spkac.1.gz
 (MD5 = 6b5f8ba2a50e87a4e7f76aa95e38f1eb)

* /usr/share/openssl/man/man1/ts.1.gz
 (MD5 = 41e8dc51264e71d7d937406a7d314e26)

* /usr/share/openssl/man/man1/tsget.1.gz
 (MD5 = cab2158cd419c14728397d477945c104)

* /usr/share/openssl/man/man1/verify.1.gz
 (MD5 = e9be56100c3613a41d8c6c61172837fd)

* /usr/share/openssl/man/man1/version.1.gz
 (MD5 = b6b8a3fa5c5c4d3744b175dba73c3d06)

* /usr/share/openssl/man/man1/x509.1.gz
 (MD5 = a77bec74423c127dbb040e339a645e7b)

* /usr/share/openssl/man/man1/x509v3_config.1.gz
 (MD5 = beb948b44eeee0f39193c32f9b0525fd)

* /usr/share/openssl/man/whatis
 (MD5 = 2703d909722ba74780d7645f797c38f2)

********************************************************************************

INSTALLATION/REMOVAL IMPACTS

The installation of the patch will cause either an immediate simultaneous 
or rolling reboot, depending on the --rolling flag.
 
A simultaneous reboot of the cluster is faster than a rolling reboot; however, 
because all nodes are rebooted simultaneously, this type of reboot causes a 
temporary interruption of service while the nodes reboot.
 
If a rolling reboot is performed, client connections to the cluster over 
protocols that are configured or designed to fail over to another node are not 
disconnected. SMB clients will experience a disconnection unless SMB3 CA is 
enabled for the share with a supported client. NFS clients will not be impacted 
if a Dynamic IP pool is used. However, client connections to the cluster over 
other protocols are disconnected when the node they are connected to reboots. 
Clients that are disconnected must manually reestablish a connection to the 
cluster. 
 
Whether you perform a simultaneous reboot or a rolling reboot of the nodes, 
we recommend that you install the patch during an off-hours maintenance 
window to minimize the disruption of service to the clients.

********************************************************************************

IMPORTANT!
VERIFY CLUSTER-FREE SPACE
If there is insufficient free space and you attempt to install or remove a
patch, the process might not complete successfully. An incomplete patch
installation or patch removal can leave the cluster in an inaccessible state.

Before installing or removing a patch, verify that your cluster has enough
free space to perform the procedure. For more information about maintaining
sufficient free space on an Isilon cluster, see the Best Practices Guide for
Maintaining Enough Free Space on Isilon Clusters and Pools:
https://support.emc.com/docu48119.

********************************************************************************

PRE INSTALLATION INSTRUCTIONS

REMOVING CONFLICTING AND DEPRECATED PATCHES

If any conflicting or deprecated patches are installed on the cluster,
perform the following procedure to remove them before installing this patch.

IMPORTANT!
Read the INSTALLATION/REMOVAL IMPACTS in the README for the
conflicting and deprecated patches before performing this procedure.

1. Verify that your cluster has enough free space to remove this patch.

2. Open an SSH connection on any node in the cluster and log in using the
   root account.

   NOTE: If the procedure is being done on a compliance mode cluster,
   log in using the compadmin account.

3. To remove this patch, run the following command:

   isi upgrade patches uninstall patch-<ID> --rolling=false
   
   where, <ID> is the patch ID of the patch to be removed.
  
   NOTE: The preceding command will reboot all of the nodes in the cluster
   simultaneously.  To remove the patch and then reboot each node in
   succession, omit the '--rolling=false' parameter. For more information,
   see the Installation/Removal Impacts section of the README.

   Confirm that you want to continue with this operation:

   Are you sure?  (yes/[no]): yes

4. To verify that this patch was removed, run the following command:

   isi upgrade patches list

5. Confirm that patch-<ID> does not appear in the list of installed packages.

********************************************************************************

INSTALLING THIS PATCH
Follow these instructions to install the patch.

IMPORTANT!
Read INSTALLATION/REMOVAL IMPACTS before performing this procedure.

1. Verify that your cluster has enough free space to install this patch.

2. Open an SSH connection on any node in the cluster and log in by using the
   root account.

   NOTE: If the patch is being installed on a compliance mode cluster,
   log in using the compadmin account.

3. Copy the patch-243897.tgz file to the /ifs/data directory on the cluster.

4. Run the following command to change to the /ifs/data directory:

   cd /ifs/data

5. To extract the patch file, run the following command:

   tar -zxvf patch-243897.tgz

6. To install this patch, run the following command:

   isi upgrade patches install patch-243897.pkg --rolling=false

   NOTE: The preceding command will reboot all of the nodes in the cluster
   simultaneously.  To install the patch and then reboot each node in
   succession, omit the '--rolling=false' parameter. For more information,
   see the Installation/Removal Impacts section of the README.

7. To verify that this patch is installed, run the following command:

   isi upgrade patches list

8. Confirm that patch-243897 appears in the list of installed packages and the
   status is set to Installed.

********************************************************************************

REMOVING THIS PATCH

If you need to remove this patch, complete the steps below.

IMPORTANT!
Read INSTALLATION/REMOVAL IMPACTS before performing this procedure.

1. Verify that your cluster has enough free space to remove this patch.

2. Open an SSH connection on any node in the cluster and log in using the
   root account.

   NOTE: If the procedure is being done on a compliance mode cluster,
   log in using the compadmin account.

3. To remove this patch, run the following command:

   isi upgrade patches uninstall patch-243897 --rolling=false

   NOTE: The preceding command will reboot all of the nodes in the cluster
   simultaneously.  To remove the patch and then reboot each node in
   succession, omit the '--rolling=false' parameter. For more information,
   see the Installation/Removal Impacts section of the README.

4. To verify that this patch is removed, run the following command:

   isi upgrade patches list

5. Confirm that patch-243897 does not appear in the list of installed packages.

********************************************************************************

TROUBLESHOOTING THIS PATCH

If you received the following output after running the 'isi upgrade patches
list' command during installation or removal of this patch, follow the
additional instructions below.

# isi upgrade patches list
Patch Name   Description                           Status
patch-243897 ...                                   Failed
Total: 1

1. Run the following command to create a statuscache file on the cluster:

   isi_upgrade_status > /ifs/.ifsvar/upgrade/statuscache

2. Run the following command to attempt the patch installation or removal
   procedure again:

   isi upgrade retry-last-action --nodes=all

3. Wait five minutes for the commands to take effect.

4. Run the following command to verify that this patch is installed or removed:

   isi upgrade patches list

5. Confirm that patch-243897 appears (or does not appear, if the patch is
   being removed) in the list of installed packages and the status is set to
   Installed.

6. Should the patch status fail again, please contact Isilon Technical Support
   for further troubleshooting steps.

********************************************************************************
