Open Source Development

Power Open Source Development

Explore the open source tools and capabilities for building and deploying modern applications on IBM Power platforms including AIX, IBM i, and Linux.


#Power


#Power

 View Only
Expand all | Collapse all

curl security vulnerabilities fix

  • 1.  curl security vulnerabilities fix

    Posted Tue November 14, 2017 06:05 AM

    Originally posted by: sanket


     

    curl-7.56.1 is now available on AIX toolbox.

    https://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/curl/curl-7.56.1-1.aix6.1.ppc.rpm

     

     

    This version has following security vulnerabilities fixes.

    CVE-2017-1000254

     

    You can also use YUM to update to this version of curl from AIX toolbox repository

     


    #AIXOpenSource
    #AIX-Open-Source-Software


  • 2.  Re: curl security vulnerabilities fix

    Posted Wed November 22, 2017 10:44 AM

    Originally posted by: ch_kolumbus


    Hello, are theese the developer files? The packages looks another way and calling curl --version gives an error   "0509-150   Dependent module libgcc_s.a(shr.o) could not be loaded".

    We need the compiled files which can be used standalone without Installation and additional libraries....

     

    Tankes!


    #AIX-Open-Source-Software
    #AIXOpenSource


  • 3.  Re: curl security vulnerabilities fix

    Posted Thu November 23, 2017 09:59 AM

    Originally posted by: sanket


    This is RPM for curl binary.

    I works perfectly on our system.

     

    # rpm -qa | grep curl
    python-pycurl-7.19.3-1.ppc
    curl-7.54.1-2.ppc
    # wget https://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/curl/curl-7.56.1-1.aix6.1.ppc.rpm
    --2017-11-23 08:35:34--  https://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/curl/curl-7.56.1-1.aix6.1.ppc.rpm
    Resolving public.dhe.ibm.com... 9.17.248.112
    Connecting to public.dhe.ibm.com|9.17.248.112|:443... connected.
    HTTP request sent, awaiting response... 200 OK
    Length: 558953 (546K) [text/plain]
    Saving to: 'curl-7.56.1-1.aix6.1.ppc.rpm'

    curl-7.56.1-1.aix6.1.ppc.rpm           100%[============================================================================>] 545.85K  1.12MB/s    in 0.5s

    2017-11-23 08:35:35 (1.12 MB/s) - 'curl-7.56.1-1.aix6.1.ppc.rpm' saved [558953/558953]

    # ls -l
    total 1096
    -rw-r--r--    1 root     system       558953 Nov 06 23:02 curl-7.56.1-1.aix6.1.ppc.rpm
    # rpm -Uvh curl-7.56.1-1.aix6.1.ppc.rpm
    Preparing...                ########################################### [100%]
       1:curl                   ########################################### [100%]
    # rpm -qa | grep curl
    curl-7.56.1-1.ppc
    python-pycurl-7.19.3-1.ppc
    # curl --version
    curl 7.56.1 (powerpc-ibm-aix6.1.9.0) libcurl/7.56.1 OpenSSL/1.0.2h zlib/1.2.11
    Release-Date: 2017-10-23
    Protocols: dict file ftp ftps gopher http https imap imaps pop3 pop3s rtsp smb smbs smtp smtps telnet tftp
    Features: AsynchDNS IPv6 Largefile NTLM NTLM_WB SSL libz TLS-SRP UnixSockets HTTPS-proxy
    #

     

    Probably you have older version of libgcc or some other conflict.

    Please install latest libgcc from toolbox. 

    You can use YUM to install it and all its dependencies. 

     


    #AIXOpenSource
    #AIX-Open-Source-Software