AIX Open Source

AIX Open Source

Share your experiences and connect with fellow developers to discover how to build and manage open source software for the AIX operating system

 View Only
Back to discussions
Expand all | Collapse all

httpd and sqlite security vulnerability fixes

  • 1.  httpd and sqlite security vulnerability fixes

    Posted Tue February 13, 2018 12:24 AM

    Originally posted by: sanket


     

    httpd-2.4.29 and sqlite-3.21.0 are now available on AIX toolbox.

    https://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/httpd/httpd-2.4.29-1.aix6.1.ppc.rpm

    https://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/sqlite/sqlite-3.21.0-1.aix6.1.ppc.rpm

     

    This version of http has fix for following security vulnerability.

    CVE-2017-9798

     

    This version of sqlite has fix for following security vulnerability.

    CVE-2017-13685

     

    You can also use YUM to update to these versions of httpd and sqlite from AIX toolbox repository

     

    Thanks

     

     


  • 2.  Re: httpd and sqlite security vulnerability fixes

    Posted Mon June 11, 2018 02:04 PM

    Originally posted by: HJHJ


    Can we please get an update to 2.4.33? 

     

    2.4.29 has been flagged by our security scanners as being vulnerable. Thanks.



  • 3.  Re: httpd and sqlite security vulnerability fixes

    Posted Tue June 12, 2018 05:10 AM

    Originally posted by: sanket


    Yes.. we are aware of the security vulnerabilities on 2.4.29.

    We are working on 2.4.33 and soon we will publish that.



  • 4.  Re: httpd and sqlite security vulnerability fixes

    Posted Mon June 25, 2018 02:24 AM

    Originally posted by: sanket


     

    httpd-2.4.33-1.aix6.1.ppc.rpm is now available on AIX toolbox.

    https://www.ibm.com/developerworks/community/forums/html/topic?id=e754e4b6-d815-4e9f-8aba-6b9b2d63e312&ps=25

     



Related Content