IBM patches DB2 database

IBM has published a fix pack for its DB2 database to remedy several security vulnerabilities, in addition to numerous non-security flaws. The security issues include buffer overflows when handling the commands XQUERY, XMLQUERY, XMLEXISTS, and XMLTABLE. Furthermore, a privilege escalation hole and the storage of the database password as clear text have been remedied. The fix pack is available for Linux, UNIX, and Windows.

See also:

• DB2 Version 9.1 for Linux, UNIX and Windows APARs by fix pack, IBM security advisory

(mba)