Cisco Blog » The Platform

2015年11月1日星期日

Cisco Notification Alert -Cisco NCS 6000 Series Core Router-01-Nov-2015 17:49 GMT

 

 

 

 

 

 

 


Security Advisories & Responses - Network Convergence System 6000 Series Routers

Title:
Multiple Vulnerabilities in OpenSSL (June 2015) Affecting Cisco Products
Description:

On June 11, 2015, the OpenSSL Project released a security advisory detailing six distinct vulnerabilities, and another fix that provides hardening protections against exploits as described in the Logjam research.

Multiple Cisco products incorporate a version of the OpenSSL package affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or corrupt portions of OpenSSL process memory.

This advisory will be updated as additional information becomes available.

Cisco will release software updates that address these vulnerabilities.

Workarounds that mitigate these vulnerabilities may be available.

This advisory is available at the following link:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150612-openssl

Date:
16-OCT-2015

Find additional information in Cisco Security Advisories & Responses

Software Updates for Network Convergence System 6000 Series Routers

Product Name:
NCS 6008 - 8-Slot Chassis
Software Type:
IOS XR Software Maintenance Upgrades (SMU)
Release Version:
5.2.4
Alert Type:
New File
File Name:
ncs6k-sysadmin-5.2.4.CSCuw50394.tar
File Description:

Hitless/Optional SMU, Umbrella DDTS for CSCuw15920 and CSCuu22097

File Release Date:
22-OCT-2015
Alert Type:
New File
File Name:
ncs6k-5.2.4.CSCuv86041.tar
File Description:

ISSU/Recommended SMU, target ldp sessions needs to be increased to 600

File Release Date:
21-OCT-2015

Software Updates for Network Convergence System 6000 Series Routers

Product Name:
NCS 6008 - 8-Slot Chassis
Software Type:
IOS XR Software Maintenance Upgrades (SMU)
Release Version:
5.2.1
Alert Type:
New File
File Name:
ncs6k-sysadmin-5.2.1.CSCuv97943.tar
File Description:

Reboot/Recommended SMU, Umbrella DDTS for CSCuv16191, CSCuu14963 CSCut52652, CSCus15240

File Release Date:
02-OCT-2015
Alert Type:
New File
File Name:
ncs6k-sysadmin-5.2.1.CSCuw38821.tar
File Description:

Hitless/Recommended SMU, Umbrella DDTS for CSCuv39293, CSCuu63975 & CSCuv29892

File Release Date:
02-OCT-2015
Alert Type:
New File
File Name:
ncs6k-sysadmin-5.2.1.CSCuu37545.tar
File Description:

Hitless/Optional SMU,Rib and bcdl processes shut down on standby after reinserting RP

File Release Date:
02-OCT-2015
Alert Type:
New File
File Name:
ncs6k-5.2.1.CSCuw38821.tar
File Description:

Reboot/Recommended SMU,Umbrella DDTS for CSCuv39293, CSCuu63975 & CSCuv29892

File Release Date:
02-OCT-2015
Alert Type:
New File
File Name:
ncs6k-5.2.1.CSCuv97943.tar
File Description:

Reboot/Recommended SMU,Umbrella DDTS for CSCuv16191, CSCuu14963 CSCut52652, CSCus15240

File Release Date:
02-OCT-2015

Software Updates for Network Convergence System 6000 Series Routers

Product Name:
NCS 6008 - 8-Slot Chassis
Software Type:
IOS XR Software Maintenance Upgrades (SMU)
Release Version:
5.2.3
Alert Type:
New File
File Name:
ncs6k-5.2.3.CSCuw50304.tar
File Description:

Hitless/Optional SMU,some tunnel-te interfaces flapped due to ResvTear

File Release Date:
27-OCT-2015
Alert Type:
New File
File Name:
ncs6k-sysadmin-5.2.3.CSCuu99122.tar
File Description:

Hitlesst/Optional SMU, Umbrella fix for ISSU upgrade

File Release Date:
27-OCT-2015
Find additional information in Software Downloads index.

Known Bugs - Network Convergence System 6000 Series Routers

Alert Type:
Updated *
Bug Id:
CSCuw61676
Title:
ncs6k 5.2.4 bgp memory fragmentation after bgp scale test and flap
Status:
Open
Severity:
1 Catastrophic
Description: *

Symptom:
NCS6K 5.2.4

after many vrf ebgp peers flaps will scale (1M) prefixes, bgp process leaks memory

Conditions:
full internet peer flaps

Workaround:
process restart bgp

Further Problem Description:

Last Modified:
29-OCT-2015
Known Affected Releases:
5.2.4.BASE
Known Fixed Releases:
Alert Type:
Updated *
Bug Id:
CSCuv53674
Title:
[5.2.5.3I SIT] install prepare got aborted after 90 mins(timeout)
Status:
Fixed
Severity:
2 Severe
Description: *


Install [prepare|activate] issu stuck on 30% progress until timeout occurs and the operation is aborted after about 60 minutes.

Symptom:
Install [prepare|activate] issu stuck on 30% progress until timeout occurs and the operation is aborted after about 60 minutes.

Conditions:
The system is upgraded or SMUs are installed via issu.
Install activate issu or install prepare issu is executed.

Workaround:
Restart process inst_agent in sysadmin on All RPs
More Info:



Last Modified:
08-OCT-2015
Known Affected Releases:
5.2.4.BASE, 5.2.5.BASE
Known Fixed Releases:
5.2.5.24i.BASE
Alert Type:
Updated *
Bug Id:
CSCuv36887
Title:
[r52x] [MC] Sfe_driver crashed in __libc_message
Status:
Fixed
Severity:
2 Severe
Description:

Symptom:
Sfe_driver crashed at boot up. This could occur in any MC Panini setup.
Program terminated with signal 6, Aborted.
#0 0x00007f6bfd6265b5 in raise (sig=) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
64 return INLINE_SYSCALL (tgkill, 3, pid, selftid, sig);

Conditions:
This issue can occur
Reload/Insersion of FC

Workaround:
none

Further Problem Description:
This is caused in the scenario at boot up when if links are down, then the genem lanes associated with that link need to be reset. This issue is caused at the time of genem lane reset. Fixed it in r52x (5.2.5)

Last Modified:
23-OCT-2015
Known Affected Releases:
5.2.5.BASE
Known Fixed Releases: *
5.2.5.22i.BASE, 6.1.0.4i.BASE
Alert Type:
Updated *
Bug Id:
CSCuu64262
Title:
Multiple fabric links down on MC system
Status:
Fixed
Severity:
2 Severe
Description:

Symptom:
Multiple S2 fabric links down on MC system on boot up.

Conditions:
Usually occurs when there is one or more gennums sitting in between the FE links. In an MC system there are gennums sitting in between the s13 and s2 optical links. There are scenarios where theses gennums does not adapt to a signal properly there by causing errors on the end point falafel links. This may cause the links to be down.

Workaround:
Not scalable

Further Problem Description:

Last Modified:
23-OCT-2015
Known Affected Releases:
5.2.3.BASE, 5.2.4.BASE
Known Fixed Releases: *
5.2.5.13i.BASE, 6.1.0.4i.BASE
Alert Type:
Updated *
Bug Id:
CSCuu89051
Title:
Interface loopback on PAT without optics does not come UP
Status:
Fixed
Severity:
2 Severe
Description:

Symptom:
loopback on pat card does not come up if no optics.

Conditions:
pat card port no optics loopback does not come up

Workaround:
no workaround

Further Problem Description:
pat card port no optics loopback does not come up

Last Modified:
23-OCT-2015
Known Affected Releases:
5.2.5.BASE
Known Fixed Releases: *
5.2.5.28i.BASE, 6.1.0.4i.BASE
Alert Type:
Updated *
Bug Id:
CSCuv41747
Title:
bob sessions continuously flapping followed by XR VM reload
Status:
Fixed
Severity:
2 Severe
Description:

Symptom:
LC XR VM reload will cause bob sessions to flap continously

Conditions:
LC XR VM reload will cause bob sessions to flap continously

Workaround:
None

Further Problem Description:
High priority packets(including BFD) are send from pita to amba with a drop precedence of "3". which will cause packet to be dropped in case of queue congestion. Need to send with drop precedence of "0" to make sure packets are not dropped in case of congestion

Last Modified:
30-OCT-2015
Known Affected Releases:
5.2.5.BASE
Known Fixed Releases: *
5.2.5.22i.BASE, 6.0.0.21i.BASE, 6.1.0.2i.BASE
Alert Type:
Updated *
Bug Id:
CSCuw58893
Title:
show tech slice_manager throwing errors
Status:
Fixed
Severity:
3 Moderate
Description:

Symptom:
error message from show tech slice_manager

Conditions:
show tech slice_manager

Workaround:
none

Further Problem Description:

Last Modified:
23-OCT-2015
Known Affected Releases:
5.2.5.BASE
Known Fixed Releases: *
5.2.5.29i.BASE, 6.1.0.4i.BASE
Alert Type:
Updated *
Bug Id:
CSCuv32389
Title:
show fpd package in XR VM on NCS6K show NCS4K FPD info
Status:
Fixed
Severity:
3 Moderate
Description:

Symptom:
show fpd package in XR VM on NCS6K show NCS4K FPD details

Conditions:
Only when show fpd package is executed on the XR VM

Workaround:
NA

Further Problem Description:
NA

Last Modified:
04-OCT-2015
Known Affected Releases:
5.2.4.BASE, 5.2.5.BASE
Known Fixed Releases: *
5.2.5.28i.BASE
Alert Type:
New
Bug Id:
CSCuw23117
Title:
[PaniniB2B] UT / IT document update
Status:
Open
Severity:
3 Moderate
Description:

Symptom:
Document update for tracking the UT / IT progress.

Conditions:

Workaround:

Further Problem Description:

Last Modified:
07-OCT-2015
Known Affected Releases:
6.2.0.BASE
Known Fixed Releases:
Alert Type:
New
Bug Id:
CSCuw34072
Title:
[PaniniB2B] Modify Sense Resistor from 3 Ohms to 1.5 Ohms
Status:
Fixed
Severity:
3 Moderate
Description:

Symptom:
The current sensor values reported for ADM1075 was not correct. It was 1/2 of what is expected.

Conditions:
Always

Workaround:
None

Further Problem Description:

Last Modified:
07-OCT-2015
Known Affected Releases:
6.2.0.BASE
Known Fixed Releases:
Alert Type:
New
Bug Id:
CSCuw23115
Title:
[PaniniB2B] P0/P1 Boards IDPROM Changes
Status:
Open
Severity:
3 Moderate
Description:

Symptom:
This is a development testing use case. We have raised a bug to make changes for the new P1 boards.

Conditions:

Workaround:

Further Problem Description:

Last Modified:
07-OCT-2015
Known Affected Releases:
6.2.0.BASE
Known Fixed Releases:
Alert Type:
New
Bug Id:
CSCuw23113
Title:
[PaniniB2B] OBFL Testing
Status:
Open
Severity:
3 Moderate
Description:

Symptom:
This is a development testing use case. We have raised a bug because this functionality is not fully regressed on the Panini B2B fabric card.

Conditions:

Workaround:

Further Problem Description:

Last Modified:
07-OCT-2015
Known Affected Releases:
6.2.0.BASE
Known Fixed Releases:
Alert Type:
Updated *
Bug Id:
CSCuw61889
Title:
"No entries found" seen on A41 on Execution of following commands
Status:
Open
Severity: *
4 Minor
Description: *

Symptom:
"No entries found" seen on A41 on Execution of following commands
admin show controller fabric bundle all
admin show controller fabric link port s1 rx all state down
admin show controller fabric link port s1 rx all state mismatch
admin show controller fabric link port s3 tx all state down
admin show controller fabric link port s3 tx all state mismatch

Conditions:

Workaround:

Further Problem Description:

Last Modified:
12-OCT-2015
Known Affected Releases:
5.2.5.ADMIN, 5.2.5.BASE
Known Fixed Releases:

Find additional information in Bug Search index.

 

2013 Cisco and/or its affiliates. All rights reserved. Terms & Conditions | Privacy Statement | Cookie Policy | Trademarks

 

没有评论:

发表评论