Which PHP Versions Get Critical Security Updates?

PHPAlthough there are many reasons—including performance—to update to newer PHP releases, the number one reason is to avoid losing security updates.

Each version of PHP (7.4, 8.0, 8.1, 8.2, 8.3, etc.) has three years of support before it is considered end of life. For two years, it gets bug fixes and all security fixes. In the third year, it gets only critical security fixes. After that, nothing!

Read more

Node.js v20 and Other Updated Packages Require New IBM i Repositories

IBM i open source for businessAs we mentioned in our article on installing ODBC via yum, the latest IBM i open source packages require new repositories.

A notable example is Node.js v20. When we hear users say, “I don’t see Node.js v20 listed in available packages, and yum returns ‘No package nodejs20 available‘,” the reason invariably is that the new repositories, ibmi-base and ibmi-release, have not been installed.

Read more

What IBM i Users Should Check when Learning of an Open Source Security Vulnerability

API & web security on IBM iA client asked about a vulnerability found in libwebp, which is used by PHP’s image-handling gd extension.

My first step was to find a reputable source for details. According to this trusted article about the vulnerability, the issue affected only libwebp versions 1.3.1 and earlier. I checked our own system and found we had a patched version from IBM, so we were safe. The client was, too.

Here is the procedure you can use for checking the version of this or any other open source package on IBM i. Read more

Use grep to Search IBM i Source Members (RPG, CL, COBOL, more)

Updated: January 4, 2024

From the Seiden SmartSupport mailbag:

One issue I keep coming across is the inability to search for text in source members across all libraries. We use a commercial tool, but it is expensive and cumbersome. Coming from the Linux world, where I can “grep” for anything, I find this a ridiculous restriction.

Read more

IBM i Modernization Seminar at IBM France

On December 5, 2023, Alan joins fellow IBM Champions Koen Decorte and Charles Guarino at IBM France for a day-long seminar and networking event focused on IBM i modernization, AI, Business Intelligence (BI), and cyber resilience.

Sponsored by IBM and CD-Invest, the seminar agenda balances educational sessions with opportunities to ask questions and have informal discussions with the presenters and fellow attendees.

Read more

Rebuilding the Tomcat Plugin in IBM i 7.5

Apache Tomcat on IBM iOpen source saves the day once again.

When one of our open source support clients discovered that Tomcat plugin for Apache was not supported on their test IBM i 7.5 system, they needed a solution. They relied on Tomcat to serve their Java web applications.

Read more

How to Resolve Yum Command FTP Errors on IBM i

While installing packages from IBM’s original open source repository, ibm, users may encounter errors, including:

  • [​Errno 12] Timeout on: ftp://public.dhe.ibm.com/software/ibmi/products/pase/rpms/repo/repodata/repomd.xml: (28, ‘Connection time-out’) Trying other mirror. Error: Cannot retrieve repository metadata (repomd.xml) for repository: ibm. Please verify its path and try again.
  • [​Errno 14] FTP Error 451 – server did not report OK, got 451 Trying other mirror
  • [Errno 14] FTP Error 550 – Access denied: 550 Trying other mirror

Read more

How to Update the Code for i Extension

Code for IBM i has been moving quickly. As the popularity of this Visual Studio Code extension has grown, updates and enhancements have arrived regularly.

If you encounter a bug or issue, installing the latest update may resolve it. Updating Code for i requires only a restart of VS Code. Here are some details to clarify how to restart as well as how to roll back the update, if desired.

Read more

PHP 8.3 Coming to IBM i This Year

PHP on IBM iI had to chuckle when someone at a recent conference seemed surprised that PHP was still a vital force in web and API development. He hadn’t heard much about PHP lately at conferences.

My explanation: “It’s reliable and the major problems have been solved.”

I continued: “There’s a significant PHP update each year, plus monthly fixes. It’s evolving steadily, with attention to backward compatibility, all changes discussed in the open, easy to manage, no surprises.”

Read more

curl Your RPG Apps with QSHCURL

curlIn this post we’ll take a closer look at how IBM i developers can use the QSHCURL command to easily reach out from CL or RPG and talk to internet-based services and APIs, then consume the resulting data, without a lot of extra effort.

First we’ll provide a short curl intro, and then we’ll look at an example of how to use the PASE-based curl command with an RPG program.

Read more