[prev in list] [next in list] [prev in thread] [next in thread] 

List:       aixtoolbox-list
Subject:    [tbox-l] Toolbox security patches: cvs, rsync, libpng, MySQL
From:       David Clissold <cliss () austin ! ibm ! com>
Date:       2004-05-20 16:23:39
Message-ID: 20040520112339.C49780 () cliss ! austin ! ibm ! com
[Download RAW message or body]

Some recent security patches have been added to a few AIX Toolbox packages.
To address these items, the patches have been applied to the current Toolbox
levels of each package.  We hope to update to the latest versions sometime
in the future, but these fixed packages will address the security items in
the meantime.

CVS 1.11.5:
A few patches have been made here, including the most recent (and most
important) security fix.  You can find info on this from the CVS home page
at http://www.cvshome.org.
The latest version offered from the cvs home site is 1.11.16; in the Toolbox,
the security patches have been added as patches to the Toolbox version, 1.11.5.


RSYNC 2.5.4:
A patch has been made to the Toolbox rsync (2.5.4), backported from the
most recent rsync-2.6.1, to address their recent security advisory -- see
the rsync home page at http://samba.anu.edu.au/rsync.
(Just for good measure, we've also included the prior security patch from
Dec 2003 although that vulnerability was not an issue on AIX).

LIBPNG 1.2.1:
Small security patches has been added to the Toolbox libpng 1.2.1.  See the
"patches" section of the libpng home page at
http://www.libpng.org/pub/png/libpng.html.

MYSQL 3.23.58:
Small patch to address possible file overwrites via a symlink attack.
Patched in the Toolbox 3.23.58 level.  More intensive MySQL users may prefer to
download production level AIX images built by MySQL.com themselves, from their
page at http://dev.mysql.com/downloads/mysql/4.0.html


You can download the Toolbox images from these locations:
-------------------------------------------------------------------
ftp://ftp.software.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/cvs/cvs-1.11.5-4.aix5.1.ppc.rpm


ftp://ftp.software.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/rsync/rsync-2.5.4-2.aix5.1.ppc.rpm


ftp://ftp.software.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/libpng/libpng-1.2.1-4.aix5.1.ppc.rpm
 ftp://ftp.software.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/libpng/libpng-devel-1.2.1-4.aix5.1.ppc.rpm


ftp://ftp.software.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/MySQL/MySQL-3.23.58-2.aix5.1.ppc.rpm
 ftp://ftp.software.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/MySQL/MySQL-client-3.23.58-2.aix5.1.ppc.rpm
 ftp://ftp.software.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/MySQL/MySQL-devel-3.23.58-2.aix5.1.ppc.rpm


_______________________________________________
aixtoolbox-list mailing list
aixtoolbox-list@www-124.ibm.com
http://www-124.ibm.com/developerworks/oss/mailman/listinfo/aixtoolbox-list


[prev in list] [next in list] [prev in thread] [next in thread]