AIX Open Source

AIX Open Source

Share your experiences and connect with fellow developers to discover how to build and manage open source software for the AIX operating system

 View Only
  • 1.  Curl - Security Advisory - Update to 7.79.0 needed

    Posted Thu September 16, 2021 03:39 AM

    Hi AIX OpenSource-Team,

    please update curl, because of the following security issues.

    AIX Toolbox Version: 7.76.1


    AFFECTED VERSIONS

    RECOMMENDATIONS
    A - Upgrade curl to version 7.79.0
    B - Apply the patch to your local version
    C - Do not use MQTT


    ---

    Curl Security Advisory 2021-09-14
    https://curl.se/docs/CVE-2021-22945.html

    Curl Security Advisory 2021-09-14
    https://curl.se/docs/CVE-2021-22946.html

    Curl Security Advisory 2021-09-14
    https://curl.se/docs/CVE-2021-22947.html

    ---



    ------------------------------
    Niklas
    System Engineer UNIX and Linux on Power
    ------------------------------


  • 2.  RE: Curl - Security Advisory - Update to 7.79.0 needed

    Posted Mon September 20, 2021 02:36 AM
    Hi Niklas,

    Thank you for reporting this.
    We will look into this.

    ------------------------------
    SANKET RATHI
    ------------------------------



  • 3.  RE: Curl - Security Advisory - Update to 7.79.0 needed

    Posted Mon October 04, 2021 02:06 AM
    Edited by Niklas Vosskoetter Mon October 04, 2021 02:08 AM
    Hi Senket,

    is there an update? Secure operation is extremely important for our mission-critical AIX systems.

    ------------------------------
    Niklas
    System Engineer UNIX and Linux on Power
    ------------------------------




  • 4.  RE: Curl - Security Advisory - Update to 7.79.0 needed

    Posted Tue October 05, 2021 01:47 PM
    We are working on building and testing latest curl.
    There are some process before publishing and it is taking time.
    Hope to publish the new curl in couple of weeks.

    ------------------------------
    SANKET RATHI
    ------------------------------



  • 5.  RE: Curl - Security Advisory - Update to 7.79.0 needed
    Best Answer

    Posted Fri October 08, 2021 09:27 AM
    curl version 7.79.1 is uploaded on AIX toolbox. This version has fix for mentioned CVEs.
    Please find the new curl version at following location.
    https://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/curl/?C=M;O=D

    ------------------------------
    SANKET RATHI
    ------------------------------