11.50.FC9W1
Good day. Is there anybody who uses version mentioned in the title on AIX platform?
No response is good news, because this version has criminal bug - allows to connect without password...
On Mon, Dec 12, 2011 at 01:38, ifmx@inbox.lv <ifmx@inbox.lv> wrote: > No response is good news, because this version has criminal bug - > allows to connect without password... IBM was notified of this last week, investigated it, and validated it. The APAR number is IC80345. The bug is only in the 11.50.UC9W1 and 11.50.FC9W1 fix packs (32-bit and 64-bit) for AIX; it is not in 11.50.xC9; it is not in 11.70; it is not applicable to any other platform. It relates to the way AIX handles shadow passwords, which is slightly different from other systems. The PID for AIX was withdrawn last week and no-one should be able to download it any more. Customers who have installed that PID should contact IBM Technical Support. The obvious workaround is to revert to the 11.50.xC9 release, but discuss alternatives with IBM Technical Support. IIRC, the PID was released in mid-October. -- Jonathan Leffler <jonathan.leffler@gmail.com> #include <disclaimer.h> Guardian of DBD::Informix - v2011.0612 - http://dbi.perl.org "Blessed are we who can laugh at ourselves, for we shall never cease to be amused."
On Dec 12, 7:29 am, Jonathan Leffler <jonathan.leff...@gmail.com> wrote: > On Mon, Dec 12, 2011 at 01:38, i...@inbox.lv <i...@inbox.lv> wrote: > > No response is good news, because this version has criminal bug - > > allows to connect without password... > > IBM was notified of this last week, investigated it, and validated it. The > APAR number is IC80345. > > The bug is only in the 11.50.UC9W1 and 11.50.FC9W1 fix packs (32-bit and > 64-bit) for AIX; it is not in 11.50.xC9; it is not in 11.70; it is not > applicable to any other platform. It relates to the way AIX handles shadow > passwords, which is slightly different from other systems. > > The PID for AIX was withdrawn last week and no-one should be able to > download it any more. Customers who have installed that PID should contact > IBM Technical Support. The obvious workaround is to revert to the > 11.50.xC9 release, but discuss alternatives with IBM Technical Support. > IIRC, the PID was released in mid-October. > > -- > Jonathan Leffler <jonathan.leff...@gmail.com> #include <disclaimer.h> > Guardian of DBD::Informix - v2011.0612 -http://dbi.perl.org > "Blessed are we who can laugh at ourselves, for we shall never cease to be > amused." FYI When is 11.50.xC10 due?
On Wed, Dec 14, 2011 at 14:46, david@smooth1.co.uk <david@smooth1.co.uk>wrote: > On Dec 12, 7:29 am, Jonathan Leffler wrote: > > On Mon, Dec 12, 2011 at 01:38, i...@inbox.lv <i...@inbox.lv> wrote: > > > No response is good news, because this version has criminal bug - > > > allows to connect without password... > > > > IBM was notified of this last week, investigated it, and validated it. > The > > APAR number is IC80345. > > > > The bug is only in the 11.50.UC9W1 and 11.50.FC9W1 [PID] (32-bit and > > 64-bit) for AIX; it is not in 11.50.xC9; it is not in 11.70; it is not > > applicable to any other platform. It relates to the way AIX handles > shadow > > passwords, which is slightly different from other systems. > > > > The PID for AIX was withdrawn last week and no-one should be able to > > download it any more. Customers who have installed that PID should > contact > > IBM Technical Support. The obvious workaround is to revert to the > > 11.50.xC9 release, but discuss alternatives with IBM Technical Support. > > IIRC, the PID was released in mid-October. > > FYI When is 11.50.xC10 due? > I'm not sure. I'm very bad at predicting things, especially when they haven't happened yet. As of earlier today (2011-12-14), there is a replacement PID (and 11.50.xC9W1 was a PID - post-interim drop - rather than a fix pack; I misspoke) for AIX on Fix Central. The detailed version is 11.50.UC9W1X1 and 11.50.FC9W1X1, though that might be shown as 11.50.xC9W1 on the download page. -- Jonathan Leffler <jonathan.leffler@gmail.com> #include <disclaimer.h> Guardian of DBD::Informix - v2011.0612 - http://dbi.perl.org "Blessed are we who can laugh at ourselves, for we shall never cease to be amused."