Another release of IBM's Access Client Solutions, ACS 1.1.9.17, is available.
This version is to remedy a couple of CVE related to the SFTP client. And to fix an error with the RESTRICT ON DROP on the CREATE object SQL statement. You can learn more about them on IBM's ACS updates page here.
To download the new version you can either click on the "Download update..." button on the window, or I can go to IBM's ACS website, http://ibm.biz/IBMi_ACS (the URL is case sensitive).
When using the above link the "Login to IBM" page is opened. Don't worry if you don't have an IBMid, you can create one, for free, in a couple of minutes.
Confirm your agreement with IBM's license.
You will then be presented with the "IBM i Access Client Solutions" page. The download for ACS's latest version is the first download.
Click on the "Download" action. The file will be downloaded onto your computer.
Once you have downloaded the zip file, I recommend you read the "Getting Started" file. This will guide you through the install process depending upon which operating system you use.
I installed the new release without any issues.
I can then confirm that the new release was installed (Help > About):
How can we perform a massive update? We have automatic updating from ifs, but the old version and 1.1.9.17 have a bug where we can't update without SSL. Also, version 1.1.9.17 shows a confirmation window when STRPCCMD is run. Can this be disabled?
ReplyDeleteIf it is already installed, just replace the JAR file on the machines.
DeleteJust replacing the JAR file does look like a simple solution. But with several of the security vulnerabilities it left them in place. It is not recommended.
DeleteIndeed, and in any case, the issue regarding updates occurring only over SSL remains unresolved—much like the matter of the confirmation window that appears when using `STRPCCMD`.
Delete