I was send the follwoing today
Advisory ID: ARUBA-PSA-2016-004CVE: CVE-2016-2031Publication Date: 2016-May-04Status: ConfirmedRevision: 1
Please can someone explain the Aruba firmware release pattern / naming convention.
The advisory says that Aruba Instant (all versions up to, but not including, 18.104.22.168 and 22.214.171.124) are affected but sorry to sound stupid but the current relased is 126.96.36.199-188.8.131.52_54637 and this is for 4.xxxx. Also when was the 'safe' version of Aruba instant firmware relased?
My guess is that the 4.x.x.x refers to the middle part of the full version number. I.e. 184.108.40.206-220.127.116.11_54637 = 18.104.22.168. And 22.214.171.124-126.96.36.199 is the latest release in the Early Deployment branch.
But that still doesn't explain where 188.8.131.52 can be downloaded. The latest release in the General Availability branch is 184.108.40.206-220.127.116.11 (I.e. 18.104.22.168 if my theory is correct) and the Early Deployment branch only have 4.2.x.x versions.
The full Aruba Instant version numbers is built up like: <ArubaOS base version>-<Aruba Instant version>_<build number>.
The ArubaOS base version defines from which Controller release this Instant version has been derived, and is there for information purposes only; the same for the Build Number.
So in most cases you only take the middle part 4.x.x.x into account.
Aruba Instant firmware is available without support contract from the 'Check new version' in the Maintenance tab in the virtual controller, or via the support website under Life time warranty software: http://support.arubanetworks.com/LifetimeWarrantySoftware/tabid/121/Default.aspx. At this moment 22.214.171.124 and 126.96.36.199 are the available versions.
Version 188.8.131.52 has not been released yet, you may work with Aruba TAC to get an estimated release date.
I'm sitting on 184.108.40.206 and have been checking for firmware since the bulletins have come out under Maintenance. It won't pull any updates down.
You can update manually by URL. What URL should we be using?
The lifetime warranty software available at the moment is here 220.127.116.11
18.104.22.168 now available under:
aruba instant>GA>current release
In reference to the URL, I'm referring to the box on the Maintenance > Firmware page where it asks for URL for manual updating.
you can use HTTP, TFTP, FTP (anonymous only). from user guides:
Select the Image URL option. Select this option to obtain an image file from a TFTP, FTP, or HTTP URL.n HTTP - http://<IP-address>/<image-file>. For example, http://<IP-address>/ArubaInstant_Orion_22.214.171.124-126.96.36.199.0_xxxxn TFTP - tftp://<IP-address>/<image-file>. For example, tftp://<IP-address>/ArubaInstant_Orion_188.8.131.52-184.108.40.206.0_xxxxn FTP - ftp://<IP-address>/<image-file>. For example, ftp://<IP-address>/ArubaInstant_Orion_220.127.116.11-18.104.22.168.0_xxxx
At Aruba, we believe that the most dynamic customer experiences happen at the Edge. Our mission is to deliver innovative solutions that harness data at the Edge to drive powerful business outcomes.
© Copyright 2021 Hewlett Packard Enterprise Development LPAll Rights Reserved.