vBulletin Search Engine Optimization
| |||||||
| Register | FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
| ||||
| What fixpak should we use fro a production machine? FP7 or FP7a? What's the difference? Regards, -- Burkhard Schultheis Tele Data Electronic, Wagnerstr. 10, D-76448 Durmersheim Email: schultheis@tde-online.de Phone: +49-7245-9287-21, Fax: +49-7245-9287-30 |
| |||
| Burkhard Schultheis schrieb: > What fixpak should we use fro a production machine? FP7 or FP7a? What's > the difference? > Now I see, there is a FP7a for AIX 4.3.3, but not for Linux IA32, only a checksum file! What's with the fixpak? Regards, -- Burkhard Schultheis Tele Data Electronic, Wagnerstr. 10, D-76448 Durmersheim Email: schultheis@tde-online.de Phone: +49-7245-9287-21, Fax: +49-7245-9287-30 |
| |||
| FP6 and FP7, have both been replaced with FP6a and FP7a respectively. These are currently being uploaded to the ftp site ftp://ftp.software.ibm.com/ps/products/db2/fixes The uploads should be finished shortly "Burkhard Schultheis" <schultheis@tde-online.de> wrote in message news:2s4i2dF1gr8nqU1@uni-berlin.de... > Burkhard Schultheis schrieb: > > What fixpak should we use fro a production machine? FP7 or FP7a? What's > > the difference? > > > > Now I see, there is a FP7a for AIX 4.3.3, but not for Linux IA32, only a > checksum file! What's with the fixpak? > > Regards, > -- > Burkhard Schultheis > Tele Data Electronic, Wagnerstr. 10, D-76448 Durmersheim > Email: schultheis@tde-online.de > Phone: +49-7245-9287-21, Fax: +49-7245-9287-30 |
| |||
| To my knowledge, FP7a has some additional fixes for security problems discovered in the original FP7 - everything else should be the same. When IBM discovers a security hole, a top priority is made to address the problem in all available fixpaks that are identified as containing it. An example of a problem that would require a security fix would be a stack overwrites that potentially allowed a user to input malicious code directly into the executable area. In such cases, the corresponding fixpaks are pulled and a replacement fixpak with the "a" suffix is substituted. No additional functionality beyond addressing the security concern is added to the "a" fixpaks. Burkhard Schultheis wrote: > What fixpak should we use fro a production machine? FP7 or FP7a? What's > the difference? > > Regards, |
| ||||
| > To my knowledge, FP7a has some additional fixes for security problems > discovered in the original FP7 - everything else should be the same. > > When IBM discovers a security hole, a top priority is made to address > the problem in all available fixpaks that are identified as containing > it. An example of a problem that would require a security fix would be > a stack overwrites that potentially allowed a user to input malicious > code directly into the executable area. In such cases, the > corresponding fixpaks are pulled and a replacement fixpak with the "a" > suffix is substituted. > > No additional functionality beyond addressing the security concern is > added to the "a" fixpaks. > Fixpak 4a contains a fix for a certain SQL statement that returns the wrong answer. This is obviously also considered an urgent fix, probably more so than a security problem. |