AIX

 View Only
Expand all | Collapse all

Link to dowload latest lssecfixes script

  • 1.  Link to dowload latest lssecfixes script

    Posted Wed January 04, 2023 08:57 AM
    Hey guys...

    Does anyone having link to download latest lssecfixes script for AIX ?

    ------------------------------
    Vikas Dabas
    ------------------------------


  • 2.  RE: Link to dowload latest lssecfixes script

    Posted Fri January 06, 2023 11:27 AM
    I sent you an internal message in Slack, there are some internal options, it seems.

    ------------------------------
    Jan Harris
    AIX Development Support (Liaison to the AIX Toolbox for Open Source)
    IBM (Contract)
    Austin TX
    ------------------------------



  • 3.  RE: Link to dowload latest lssecfixes script

    IBM Champion
    Posted Mon January 09, 2023 03:45 AM
    Would it suit?

    https://www.ibm.com/docs/en/aix/7.2?topic=e-emgr-check-ifixes-command
    https://www.ibm.com/docs/en/aix/7.2?topic=e-emgr-download-ifix-command

    ------------------------------
    Andrey Klyachkin

    https://www.power-devops.com
    ------------------------------



  • 4.  RE: Link to dowload latest lssecfixes script

    Posted Tue January 10, 2023 10:08 AM
    Hello Andrey

    Did you test links above. Command doesn't work. Dnf command works.
    Sample from two aix 7.3 last version lpar. On the second I manually install last ifix on Monday.

    emgr_check_ifixes
    Gathering system information
    +-----------------------------------------------------------------------------+
    p0.mtm=8286-42A
    p0.fw=SV860_234
    p0.parnm=nim
    p0.os=aix
    p0.aix=7300-01-01-2246
    +-----------------------------------------------------------------------------+
    Checking interim fixes on the system ...
    +-----------------------------------------------------------------------------+
    There is no efix data on this system.

    Searching for AIX security fixes ...
    +-----------------------------------------------------------------------------+
    ERROR: SSL connection failed, logs saved in /tmp/ifix/ssl_connection_flrt.log
    root@nim: / > cat /tmp/ifix/ssl_connection_flrt.log
    00000001:error:10080002:BIO routines:(unknown function):system lib:crypto/bio/bio_addr.c:738:Hostname and service name not provided or found
    connect:errno=0

    second lpar with last security ifixes vurnerability

    emgr_check_ifixes
    Gathering system information
    +-----------------------------------------------------------------------------+
    p0.mtm=9009-42A
    p0.fw=VL950_099
    p0.parnm=aix73testnim
    p0.os=aix
    p0.aix=7300-01-01-2246
    +-----------------------------------------------------------------------------+
    Checking interim fixes on the system ...
    +-----------------------------------------------------------------------------+
    ID STATE LABEL INSTALL TIME UPDATED BY ABSTRACT
    === ===== ========== ================= ========== ======================================
    1 S IJ44594s1a 01/05/23 11:01:47 IJ44594 POTENTIAL SECURITY ISSUE
    2 S IJ44595s1a 01/05/23 11:02:52 IJ44595 POTENTIAL SECURITY ISSUE


    Searching for AIX security fixes ...
    +-----------------------------------------------------------------------------+
    ERROR: SSL connection failed, logs saved in /tmp/ifix/ssl_connection_flrt.log
    # cat /tmp/ifix/ssl_connection_flrt.log
    00000001:error:10080002:BIO routines:(unknown function):system lib:crypto/bio/bio_addr.c:738:Hostname and service name not provided or found
    connect:errno=0

    ------------------------------
    Juraj Petráš
    ------------------------------



  • 5.  RE: Link to dowload latest lssecfixes script

    IBM Champion
    Posted Tue January 10, 2023 10:42 AM
    Hello Juraj,

    yes, I tested them and even opened a call at IBM because of the wrong hostname in one of the scripts. It was ca. 6 months ago (August-September?) and I thought it is already fixed. Unfortunately I can't find APAR right now.

    ------------------------------
    Andrey Klyachkin

    https://www.power-devops.com
    ------------------------------



  • 6.  RE: Link to dowload latest lssecfixes script