IBM Support

AIX Toolbox for Open Source Software: What's New

General Page

Read about new or significantly changed information for the AIX Toolbox for Open Source Software

whatsnew What's New in the AIX Toolbox for Open Source Software

This page will be updated to reflect significant changes for AIX Toolbox software.
Important Notes:
  • Subscribe to this page for important Toolbox announcements related to AIX updates. Be sure to perform recommended steps before migrating or updating AIX.
    • Visit My Notifications and add a notification for "Open Source Software for AIX Toolbox"
  • There are more than 900 RPMs on the AIX Toolbox. This document will not be updated to reflect most individual package updates.
  • The table content will be periodically archived to a different page.
  • This document will be updated if a new package version has significant impact on multiple packages.
Examples of "significant impacts" include
  • Changes to paths, symbolic links, or directory structures.
  • Updated dependencies on AIX file sets
  • Critical CVE updates
  • Toolbox snapshot updates (iso images) delivered to ESS or Password Advantage for local repositories.
***To learn details about general package updates (usage changes, compatibility), continue to refer to the respective package communities.
Date
Package(s)
Summary of changes
Known impacts or dependencies
References
06-Dec-2023 DNF(AIX 7.1 or 7.2)
DNF steps are required for migration to AIX 7.3.
Announced in Jan 2022, adding to What's New to build awareness.
 When DNF users migrate from 32 bit AIX 7.1 or 7.2 to 64 bit AIX 7.3 then the existing installed DNF won’t work as-is. Some additional steps are required.
23-Nov-2023   AIX rpm.rte file set
The RPM version is upgraded to 4.18.1. The nss, nspr, and db library packages are removed from the AIX base image as these library packages were used internally and are no longer needed for rpm.
IMPORTANT: Update dnf before you update AIX. If you have not updated to python3.9 yet, dnf with python3.7 will fail to run with rpm.rte 4.18.See the May 24 entry in this table.
NOTE: You should remove any non-AIX openssl packages that deliver related libraries to /opt/freeware/lib. These files will conflict with rpm. These files have caused issues for some packages for some time, but will certainly cause rpm failures due to missing libcrypto.so.3
19-Oct-2023 curl-8.4.0-1.aix7.1.ppc.rpm
This version of curl has a fix for the following security vulnerability.
CVE-2023-38039
CVE-2023-38545
CVE-2023-38546
It is recommended to use DNF to manage packages.
Reference in the forum announcement thread:
14-Aug-2023 Yum, ansible-core and others. Conditional requires have been added to ansible-core, and might be added to more packages. Yum is out of support by the community. Yum is based on python2 and python2 end of life was on Jan 1, 2020. Some packages, for example, Ansible, cannot be updated by yum Read more details in the forum announcement thread:Important: AIX Toolbox users, please use dnf instead of yum
12-Aug-2023 curl-8.1.2-1.aix7.1.ppc.rpm This version of curl has fixes for the following security vulnerabilities.

CVE-2023-28322
CVE-2023-28320
CVE-2023-28319
CVE-2023-28321
It is recommended to use DNF to manage packages.
Read more details in the forum announcement thread:
24-May-2023 python3.9 Python 3.7 will be EOL in June 2023. The AIX Toolbox default python3 will be python3.9 instead of python3-3.7.
IMPORTANT: Before running any DNF update commands, you must update rpm.rte to latest version. 
To get all of the latest changes, users should run "dnf update".  
Read more details in the forum announcement thread:
31-May-2023
AIX rpm.rte file sets.
AIX 71 and 72:     rpm.rte.4.15.1.1010

AIX 73:         rpm.rte.4.15.1.2009
The rpm.rte images are now available as AIX Web Download Pack Programs.
 Note: The fix for CVE-2022-37434 was added in:
4.15.1.1007 (7.1/7.2)
4.15.1.2007 (7.3)		 The downloads are hosted on the MRS (Marketing Registration Services) site.
https://www.ibm.com/resources/mrs/assets?source=aixbp&S_PKG=rpm
5-Aug-2022
krb5-libs-1.18.5-1 openldap-2.4.58-4
php-7.4.30-1
nginx-1.21.4-2
(and all updated OpenSSL dependent packages)
 All openssl dependent packages updated after Aug 5, 2022 require openssl 1.1, which can be installed from Marketing Registration Services (MRS)

Package updates (for example, 'dnf update') might report errors such as:
"nothing provides libssl.a(libssl.so.1.1)"
17-Sep-2020
Packages built after this date
Note: While the forum announcement was made in 2020, this table entry was added 15-Feb 2023, so subscribers might be reminded of this change before performing package updates.
 Going forward with each package update from the AIX toolbox, files and symlinks will not be created in /usr. 
If you use the /usr path for binaries, libraries, or include files from the AIX toolbox, change the paths to the appropriate /opt/freeware path. 

You can add /opt/freeware/bin and /opt/freeware/sbin to your PATH.
* For LIBPATH, see AIX LIBPATH Recommendations
 Forum Announcement:  Removal of symlink/files from /usr for AIX Toolbox packages
AIX LIBPATH Recommendations

[{"Type":"MASTER","Line of Business":{"code":"LOB66","label":"Technology Lifecycle Services"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSPV6X","label":"Open Source Software for AIX Toolbox"},"ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
15 February 2024

UID

ibm16833478

Page Feedback