A printable plain text version is also available.
Date: Sat, 29 Jun 2002 13:44:07 -0500 (EST)
From: ImageStream Support 
Subject: (SUPPORT) Enterprise Linux 3.2.3 for routers available

Version 3.2.3 of ImageStream's Enterprise Linux is now available as a general
release for all ImageStream router customers.

This software release is provided at no charge to all ImageStream customers and
is highly recommended for all customers.  VERSION 3.2.3 PROVIDES A PATCH TO NEW
VULNERABILITIES PRESENT IN PREVIOUS ENTERPRISE LINUX RELEASES.  SPECIFICALLY, A
NEW VERSION OF SSH IS INCLUDED IN THIS RELEASE.


See "Limitations and Upgrade Instructions" before upgrading.

This release note documents commands and features added between Version 3.2.2
and the Version 3.2.3 release.


----------------------------


New Features in Version 3.2.3


SAND Version 3.5.3 Included

ImageStream's SAND Version 3.5.3 release is included in the Version 3.2.3
release.  See the release notes for Version 3.5.3 for more information about the
SAND Version 3.5.3 software release.  This SAND release adds support for ATM
bridging and the ATM OC-12 card.


OpenSSH Upgraded To OpenSSH 3.4p1

The version of OpenSSH included in Version 3.2.3 addresses a recent security
advisory.  Version 3.4p1 included with this release patches the June 26, 2002
advisory regarding Remote Challenge Vulnerability.  This release implements
"privilege separation" by adding a non-privileged user to the router for
authentication purposes.  This minimizes the chances that an undiscovered
vulnerability could compromise routers running SSH.  While no exploits exist
currently for this vulnerability, the upgrade is highly recommended because
OpenSSH 3.4 adds checks for a class of potential bugs.


----------------------------


Bugs fixed in Version 3.2.3


The following bugs have been fixed in Version 3.2.3:


Memory Test Boot Option Updated

Version 3.2.3 updates the "Memory test" option in the router boot menu.
Selecting this option from the boot menu will load a memory testing program that
automatically examines the RAM installed in the router for any physical problems
or errors.  A thorough memory test may take several hours to complete, so this
boot option is recommended for use during maintenance windows and for routers
able to be removed from service for long periods of time.  The memory test
utility included with Version 3.2.3 has been updated to the latest available
version to support the latest memory architectures and to fix a bug in the
serial console support that affected the use of the "Memory test" boot option on
routers connected to a serial console.


----------------------------


Limitations and Upgrade Instructions


*** NOTE! If the upgrade fails, do NOT reboot! Contact ImageStream's Technical
Support without rebooting. ***


Limitations

Upgrading to Version 3.0 or later requires the following:

1. 64 MB of RAM or higher.
2. 32 MB of flash.
3. 300 MHz processor or better.
4. Enterprise Linux Version 2.3.2 or higher.

The upgrade utility will not install Version 3.0 if memory and flash
requirements are not met.  Users can contact ImageStream to purchase a
RAM, processor or flash upgrade.

Users running an Enterprise Linux version less than 2.3.2 must upgrade
before Version 3.0 will be available from the Update menu.  Upgrading any
version prior to 2.3.2 will automatically be upgraded to 2.3.2.  A second
upgrade will be required to install Version 3.0.

The upgrade does not otherwise affect the stored configuration in the
ImageStream router. To back up the router's configuration prior to
upgrading, choose option 4 (Backup/Restore) from the router's main menu.
Choose the Backup methods option (Option 1) and select a method from the
choices listed.  From the router's command line, use the "backup"
command. The backup utility takes four arguments: flash (to back up
configurations to the router's nonvolatile flash memory), floppy (to back up to
a floppy disk), scp (to back up via secure copy), or file (to back up to a
separate file on the router's nonvolatile flash memory).



----------------------------


Copyright and Trademarks


Copyright 2002 ImageStream Internet Solutions. All rights reserved.

ImageStream is a trademarks of ImageStream Internet Solutions, Inc.  All
other marks are the property of their respective owners.

Notices

ImageStream makes no representations or warranties with respect to the
contents or use of this document, and specifically disclaims any express
or implied warranties of merchantability or fitness for any particular
purpose. Further, ImageStream reserves the right to revise this
publication and to make changes to its content, any time, without
obligation to notify any person or entity of such revisions or changes.

Contacting ImageStream Technical Support

Every ImageStream product comes with a one year hardware and software
warranty. ImageStream provides technical support via voice, FAX,
electronic mail, and the web. Technical support is available 24 hours a
day, 7 days a week.

To contact ImageStream technical support by voice, dial +1 (574) 935-8484
worldwide. By FAX, dial +1 (574) 935-8488. By electronic mail, send mail
to support@imagestream.com. Using the World Wide Web, see
http://support.imagestream.com/