Open Source Development

Power Open Source Development

Explore the open source tools and capabilities for building and deploying modern applications on IBM Power platforms including AIX, IBM i, and Linux.


#Power


#Power

 View Only

ncurses and libffi security vulnerability fixes

  • 1.  ncurses and libffi security vulnerability fixes

    Posted Tue March 27, 2018 09:55 AM

    Originally posted by: sanket


     

    libffi-3.2.1 and ncurses-6.1 are now available on AIX toolbox.

     

    https://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/libffi/libffi-3.2.1-1.aix6.1.ppc.rpm

    https://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/ncurses/ncurses-6.1-1.aix6.1.ppc.rpm

     

     

    This version of libffi has fix for following security vulnerability.

    CVE-2017-1000376

     

    This version of ncurses has fixes for following security vulnerabilities.

    CVE-2017-10684
    CVE-2017-10685
    CVE-2017-11112
    CVE-2017-11113

     

    You can also use YUM to update to these versions of libffi and ncurses from AIX toolbox repository

     

    Thanks

     

    #AIX-Open-Source-Software
    #AIXOpenSource