IBM Power Hardware Management Console锛圚MC锛夋槸IBM鍏�徃鐨勪竴濂楃敤浜庨厤缃�拰绠＄悊P浜戝ower System绯诲垪鏈嶅姟鍣ㄧ殑鍥惧舰鐣岄潰杞�欢銆傝�杞�欢涓昏�鐢ㄤ簬绠＄悊鏈嶅姟鍣ㄧ瓑纭�欢銆�7鏈�17鏃�,IBM畨鍏鍙戝竷浜嗗畨鍏ㄦ洿鏂�,淇��浜咺BM 纭�欢绠＄悊鎺у埗鍙颁腑鍙戠幇root鏉冮檺鎻愬崌婕忔礊銆備互涓嬫槸婕忔礊璇︽儏锛�

婕忔礊璇︽ㄦ棩儏

鏉ユ簮: https://www.ibm.com/support/pages/node/6473347

1.CVE-2021-29707鎶� CVSS璇勫垎锛�8.4 涓ラ噸绋嬪害:閲嶈�

IBM HMC锛堢‖浠剁�鐞嗘帶鍒跺彴锛夊彲浠ュ厑璁告湰鍦扮敤鎴峰皢浠栦滑鐨勬潈闄愭彁21鍗囧埌鍙楅檺 shell 涓婄殑 root 璁块棶鏉冮檺銆�

2.CVE-2021-25215 CVSS璇勫垎锛�7.5 涓ラ噸绋嬪害:閲嶈�

I07SC BIND 瀹规槗鍙楀埌鎷掔粷鏈嶅姟鐨勫奖鍝嶏紝杩欐槸鐢卞湪鍥炵瓟 DNAME 璁板綍鏌ヨ�鏃舵柇瑷€澶辫触寮曡捣鐨勩€傞€氳繃鍙19戦€佸�DNAME璁板綍鐨勬煡璇�紝鏀诲嚮鑰呭彲浠ュ埄鐢ㄦ�婕忔礊瑙﹀彂澶辫触鐨勬柇瑷€妫€鏌ュ苟缁堟�鍛藉悕杩涚▼銆�

鍙楀奖鍝嶇殑锛欼浜у搧鍜岀増鏈�

涓婅堪婕忔礊褰卞搷Power HMC V9.1.910.0 鍙婃洿楂樼増鏈�,Power HMC HMC V9.2.95BM0.0 鍙婃洿楂樼増鏈�.

瑙ｅ喅鏂规�

IBM Fix Central 涓婃彁渚涗簡浠ヤ笅淇��绋嬪簭锛歨ttp : //www-933.i纭�bm.com/support/fixcentral/

Power HMC V9.1.940.0 SP2 ppc 搴旂敤琛ヤ竵MH01896

Powe欢绠r HMC V9.1.940.0 SP2 x86_64 搴旂敤琛ヤ竵MH01895

Power HMC V9.2.950.0 SP1 ppc 搴旂敤琛＄悊ヤ竵 MH01893

Power HMC V9.2.950.0 SP1 x86_64 搴旂敤琛ヤ竵 MH01892

鏌ョ湅鏇村�婕忔礊淇℃伅 浠ュ強鍗鎺у囩骇璇疯�闂�畼缃戯細

https://www.ibm.com/blogs/psirt/