Open Source Development

Power Open Source Development

Explore the open source tools and capabilities for building and deploying modern applications on IBM Power platforms including AIX, IBM i, and Linux.


#Power


#Power

 View Only
  • 1.  perl security vulnerability fix

    Posted Fri August 25, 2023 02:12 PM

    perl-5.34.1-2.aix7.1.ppc.rpm  is now available in AIX Toolbox.

    This release of perl has fix for the following security vulnerability.

    CVE-2023-31484


    You can use DNF to update to this version of package from the AIX Toolbox repository.



    ------------------------------
    RESHMA KUMAR
    ------------------------------

    #AIXOpenSource


  • 2.  RE: perl security vulnerability fix

    Posted Mon September 11, 2023 03:51 AM

    RESHMA KUMAR


    After upgrading the AIX version from 7200-03-02 TO 7200-05-05 The CGI modules are missing and the system throws the below error when zip/unzip

    when we check the perl version 

    # ls /usr/opt/perl5/lib

    5.20.1    5.28.1    site_perl

    # cd /usr/opt/perl5/lib
    # ls -ltr
    total 24
    drwxr-xr-x   54 root     system         8192 Mar 10 2021  5.28.1
    drwxr-xr-x    4 root     system          256 Sep  8 14:17 site_perl
    drwxr-xr-x    4 root     system         4096 Sep  8 14:24 5.20.1

    # ls -Ral /usr/opt/perl5/lib/5.20.1/CPAN

    /usr/opt/perl5/lib/5.20.1/CPAN not found

    As per my understanding current perl version is somehow change after the AIX Service Pack 7100-05-05, update 

    Now how do I fix this issue ,

    Error 
    ##########
    Can't locate CGI.pm in @INC (you may need to install the CGI module) (@INC contains: /usr/opt/perl5/lib/site_perl/5.28.1/aix-thread\
    -multi /usr/opt/perl5/lib/site_perl/5.28.1 /usr/opt/perl5/lib/5.28.1/aix-thread-multi /usr/opt/perl5/lib/5.28.1 /usr/opt/perl5/lib/\
    site_perl/5.20.1 /usr/opt/perl5/lib/site_perl) at /app/manh/uat/mif/sh/tar_file_unzip.pl line 30.
    BEGIN failed--compilation aborted at /app/manh/uat/mif/sh/tar_file_unzip.pl line 30.
    ##############



    ------------------------------
    Eranga Prabath
    ------------------------------



  • 3.  RE: perl security vulnerability fix

    Posted Mon September 11, 2023 04:23 AM

    Hi Eranga,

    Please check this https://www.ibm.com/support/pages/aix-perl-updates-and-support-perlrte

    CGI.pm has been removed from perl distribution.



    ------------------------------
    SANGAMESH
    ------------------------------



  • 4.  RE: perl security vulnerability fix

    Posted Mon September 11, 2023 11:06 AM

    Hi SANGAMESH MALLAYYA 

    But In AIX Service Pack 7100-05-05, Perl has been upgraded to 5.28.1. External modules like CGI.pm

    # ls -Ral /usr/opt/perl5/lib/5.28.1/CPAN
    total 1232
    drwxr-xr-x   10 root     system         4096 Mar 10 2021  .
    drwxr-xr-x   54 root     system         8192 Mar 10 2021  ..
    drwxr-xr-x    2 root     system          256 Mar 10 2021  API
    -r--r--r--    1 root     system         6842 Feb 21 2019  Author.pm
    -r--r--r--    1 root     system         9826 Feb 21 2019  Bundle.pm
    -r--r--r--    1 root     system         7664 Feb 21 2019  CacheMgr.pm
    -r--r--r--    1 root     system         6023 Feb 21 2019  Complete.pm
    -r--r--r--    1 root     system         2102 Feb 21 2019  Debug.pm
    -r--r--r--    1 root     system          189 Feb 21 2019  DeferredCode.pm
    -r--r--r--    1 root     system       164588 Feb 21 2019  Distribution.pm
    -r--r--r--    1 root     system        11990 Feb 21 2019  Distroprefs.pm
    -r--r--r--    1 root     system          972 Feb 21 2019  Distrostatus.pm
    drwxr-xr-x    2 root     system          256 Mar 10 2021  Exception
    drwxr-xr-x    2 root     system          256 Mar 10 2021  FTP
    -r--r--r--    1 root     system        42966 Feb 21 2019  FTP.pm
    -r--r--r--    1 root     system        70973 Feb 21 2019  FirstTime.pm
    drwxr-xr-x    2 root     system          256 Mar 10 2021  HTTP
    -r--r--r--    1 root     system        23301 Feb 21 2019  HandleConfig.pm
    -r--r--r--    1 root     system        22216 Feb 21 2019  Index.pm
    -r--r--r--    1 root     system         6909 Feb 21 2019  InfoObj.pm
    drwxr-xr-x    2 root     system          256 Mar 10 2021  Kwalify
    -r--r--r--    1 root     system         3428 Feb 21 2019  Kwalify.pm
    drwxr-xr-x    2 root     system          256 Mar 10 2021  LWP
    drwxr-xr-x    3 root     system         4096 Mar 10 2021  Meta
    -r--r--r--    1 root     system        30272 Feb 21 2019  Meta.pm
    -r--r--r--    1 root     system        16695 Feb 21 2019  Mirrors.pm
    -r--r--r--    1 root     system        22390 Feb 21 2019  Module.pm
    -r--r--r--    1 root     system          953 Feb 21 2019  Nox.pm
    drwxr-xr-x    2 root     system          256 Mar 10 2021  Plugin
    -r--r--r--    1 root     system         3215 Feb 21 2019  Plugin.pm
    -r--r--r--    1 root     system          567 Feb 21 2019  Prompt.pm
    -r--r--r--    1 root     system         6942 Feb 21 2019  Queue.pm
    -r--r--r--    1 root     system        73617 Feb 21 2019  Shell.pm
    -r--r--r--    1 root     system        16715 Feb 21 2019  Tarzip.pm
    -r--r--r--    1 root     system          588 Feb 21 2019  URL.pm
    -r--r--r--    1 root     system         4398 Feb 21 2019  Version.pm
    /usr/opt/perl5/lib/5.28.1/CPAN/API:
    total 16
    drwxr-xr-x    2 root     system          256 Mar 10 2021  .
    drwxr-xr-x   10 root     system         4096 Mar 10 2021  ..
    -r--r--r--    1 root     system         1067 Feb 21 2019  HOWTO.pod

    /usr/opt/perl5/lib/5.28.1/CPAN/Exception:
    total 40
    drwxr-xr-x    2 root     system          256 Mar 10 2021  .
    drwxr-xr-x   10 root     system         4096 Mar 10 2021  ..
    -r--r--r--    1 root     system         3886 Feb 21 2019  RecursiveDependency.pm
    -r--r--r--    1 root     system          920 Feb 21 2019  blocked_urllist.pm
    -r--r--r--    1 root     system          490 Feb 21 2019  yaml_not_installed.pm
    -r--r--r--    1 root     system         1703 Feb 21 2019  yaml_process_error.pm

    /usr/opt/perl5/lib/5.28.1/CPAN/FTP:
    total 16
    drwxr-xr-x    2 root     system          256 Mar 10 2021  .
    drwxr-xr-x   10 root     system         4096 Mar 10 2021  ..
    -r--r--r--    1 root     system         1562 Feb 21 2019  netrc.pm



    ------------------------------
    Eranga Prabath
    ------------------------------