![]() | |
#1
| |||
| |||
|
#2
| |||
| |||
|
#3
| |||
| |||
|
|
No response is good news, because this version has criminal bug - allows to connect without password... |
#4
| |||
| |||
|
|
On Mon, Dec 12, 2011 at 01:38, i... (AT) inbox (DOT) lv <i... (AT) inbox (DOT) lv> wrote: No response is good news, because this version has criminal bug - allows to connect without password... IBM was notified of this last week, investigated it, and validated it. *The APAR number is IC80345. The bug is only in the 11.50.UC9W1 and 11.50.FC9W1 fix packs (32-bit and 64-bit) for AIX; it is not in 11.50.xC9; it is not in 11.70; it is not applicable to any other platform. It relates to the way AIX handles shadow passwords, which is slightly different from other systems. The PID for AIX was withdrawn last week and no-one should be able to download it any more. Customers who have installed that PID should contact IBM Technical Support. The obvious workaround is to revert to the 11.50.xC9 release, but discuss alternatives with IBM Technical Support. IIRC, the PID was released in mid-October. -- Jonathan Leffler <jonathan.leff... (AT) gmail (DOT) com> *#include <disclaimer.h Guardian of DBD::Informix - v2011.0612 -http://dbi.perl.org "Blessed are we who can laugh at ourselves, for we shall never cease to be amused." |
#5
| |||
| |||
|
|
On Dec 12, 7:29 am, Jonathan Leffler wrote: On Mon, Dec 12, 2011 at 01:38, i... (AT) inbox (DOT) lv <i... (AT) inbox (DOT) lv> wrote: No response is good news, because this version has criminal bug - allows to connect without password... IBM was notified of this last week, investigated it, and validated it. The APAR number is IC80345. The bug is only in the 11.50.UC9W1 and 11.50.FC9W1 [PID] (32-bit and 64-bit) for AIX; it is not in 11.50.xC9; it is not in 11.70; it is not applicable to any other platform. It relates to the way AIX handles shadow passwords, which is slightly different from other systems. The PID for AIX was withdrawn last week and no-one should be able to download it any more. Customers who have installed that PID should contact IBM Technical Support. The obvious workaround is to revert to the 11.50.xC9 release, but discuss alternatives with IBM Technical Support. IIRC, the PID was released in mid-October. |
|
FYI When is 11.50.xC10 due? |
![]() |
| Thread Tools | |
| Display Modes | |
| |