IBM Informix vulnerability CVE-2020-4799 in Spatial Datablade Module

A security warning was issued on October 8, 2020 (CVE-2020-4799) for IBM Informix Dynamic Server.

This vulnerability affects the Spatial Datablade Module in Informix Server versions 12.10 and 14.10.

A specific function in the Spatial Datablade can be called with an out-of-range parameter. A local user logged on with SQL privileges could use this vulnerability to attempt to execute an SQL injection. If the attack is successful, the attacker would be able to grant himself extended user rights and execute his own code

Help provides a Fix Pack that IBM has released on Fix Central.

Informix Roadmap

IBM Informix Release Roadmap – Update March 2020

Planning for Q2 and the second half of 2020

• Informix 14.10 for IBM Cloud Pack available
• 14.10.xC4 Fixpack with improved backup functions for secondary’s
• LinuxONE Platform Support
• Last cumulative fix release for Informix 11.70
• ...

Innovations for 2021 (under investigation)

IBM Sub-Capacity licensing for Informix and Db2

Processor-based licensing with full- and sub-capacity in virtual environments

If Informix or DB2 are to be used in virtual environments, the question of how to calculate licenses quickly arises with processor-dependent licenses. Is a calculation based on logical resources sufficient or must the physical hardware be fully licensed?

This article is a brief summary of the various IBM sources for licensing Informix or Db2 in virtual environments. It introduces the common processor-based licensing and the associated definitions for full- and sub-capacity. This article also provides a summary of the general requirements and important information about the verification requirements when using sub-capacity licensing.

Informix V14.10.xC2 Editions offer extended Limits

Informix Release 14.10.xC2 of September 2019
For the Informix Developer-  and Informix Innovator-C Editions, IBM increases CPU and memory usage limits with release 14.10xC2.

The increase makes Informix even more attractive for small and medium-size applications.

The upgrade was made without a special announcement - through changes in the license terms with the release of Informix 14.10.xC2.

Customers who upgrade to this version with a new license or an update as part of their product maintenance, will benefit from the enhancements. The extensions do not apply to older releases, also because the limits are fixed in the source.