Originally posted by: shalt

need Apache 2.4.39 to fix CVE-2019-0211 added to AIX toolbox

Thanks for any help

Originally posted by: sangameshm

Yes. We are working on this and httpd will be update to latest available version to include this CVE fix.

Thanks,

Sangamesh

Originally posted by: Noah.Chan

Hi Sangamesh,

Thanks for your information, May I know what's the ETA for 2.4.39?

Originally posted by: sangameshm

We will be uploading it mostly by mid next week.

Originally posted by: cforget2810

Thanks very much.  Would there be a chance all the dependencies be included in a package?  I seem to be missing dependencies after dependencies...

Originally posted by: AyappanP

No. 

You need to make use of YUM. Otherwise it will be a nightmare to figure out and install all the dependencies.

Originally posted by: cforget2810

Hi,

I went to download yum using the yum.sh script in https://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/ezinstall/ppc/

I ran it on my server and it installed rpm and yum.

I tried the 'yum update' as mentionned after the installation:

Yum installed successfully.

Please run 'yum update' to update packages to the latest level.

wcalqa5n:root:/tmp> yum update

anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml: [Errno 12] Timeout on anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml: (28, 'Connection timed out after 30000 milliseconds')

Trying other mirror.

Error: Cannot retrieve repository metadata (repomd.xml) for repository: AIX_Toolbox. Please verify its path and try again

wwdefr5:root:/tmp> man yum

Manual entry for yum not found or not installed.

Could you tell me where I can modify the password for anonymous (my guess it has to be my email address) ?

I tried manually to connect and it worked.

Thanks for your help

Originally posted by: sangameshm

Mostly it could be firewall which is blocking the route.

What happens when you run curl as below with http/ftp instead of https  ?

curl anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">http://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml

Originally posted by: cforget2810

root:/tmp> curl anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">http://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml
curl: (7) Failed to connect to public.dhe.ibm.com port 80: A remote host did not respond within the timeout period.
 

If it was firewall, it would not work when I run it manually, no?  

I even try with anonymous:anonymous and it works when doing the ftp from the prompt.

Originally posted by: cforget2810

Yes forget it.  it is something to do with our firewall.

Thank you for your help

Originally posted by: PatrickYancy

Just curious on an update for this version of HTTPD, I have security asking me when it will be updated and I'd like to give them an answer. 

Thank you

Originally posted by: sanket

We are working on 2.4.39 version of httpd and it is in last lap.

Hope to publish it in a week time.

Originally posted by: sangameshm

Fixed version is now available on AIX Toolbox.

Have a look at this post https://www.ibm.com/developerworks/community/forums/html/topic?id=64b4e8df-6c94-4b3e-bbf8-b9f47edb98f2&ps=25