Informix

Informix

Connect with Db2, Informix, Netezza, open source, and other data experts to gain value from your data, share insights, and solve problems.

 View Only
  • 1.  Java jvm update

    Posted Tue October 22, 2024 06:24 AM

    Hi

    Our IT sec reported us a vulnerability warning about the jvm which is in the $INFORMIX/jvm directory. 

    Our Informix version is 14.10.FC10W2X3. 

    Current Java version is 8.0.7.0. 

    The IT sec warning based on IBM Security Update November 2023 advisory. Recomanded java 8.0.8.15

    Can we upgrade a JVM separatly from Informix?



    ------------------------------
    Gábor Fekete
    Software Engineer
    Capital Systems
    Budapest
    ------------------------------


  • 2.  RE: Java jvm update

    Posted Wed October 23, 2024 02:28 AM

    Hi Gabor.

    Yes - you certainly can, and you must from FC11:

    https://www.ibm.com/docs/en/informix-servers/14.10?topic=overview-whats-new-in-informix#concept_v1410xc11__1410xc11_java_removal

    I have found installing Informix product continues to need JRE 8, whereas HQ now wants JRE 11 or later (we are using 11):

    https://www.ibm.com/docs/en/informix-servers/14.10?topic=guide-whats-new-in-informixhq#new240_ifxhq__admin_240

    If using Linux, install both Open JDK "headless" JRE 8 and a later version using yum, dnf or apt-get. They will then be kept up-to-date with the OS. Set the later version as the default for HQ, and set your environment to JRE 8 only when necessary during an installation.

    You should then tar/gzip/rm $INFORMIXDIR/jvm in older versions so it's not reported as a vulnerability.



    ------------------------------
    Doug Lawry
    Oninit Consulting
    ------------------------------