IBM i PTF Guide, Volume 24, Number 12

March 23, 2022 Doug Bidwell

And the security vulnerabilities just keep on a-coming. This time, it is with the WebSphere Application Server. Check out Security Bulletin: IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to Clickjacking (CVE-2021-39038), which you can read all about here. The affected products are WebSphere Application Server Liberty, versions 17.0.0.3 through 22.0.0.2 and WebSphere Application Server versions 9.0 through 9.0.5.11.

Also, here some information: The default location of ACS is updated whenever there is a Cumulative update or upgrade to a OS level. (\\&SystemName\root\QIBM\ProdData\Access\ACS\Base). Here are fixes for this:

IBM i 7.4: SI77377 – ACS 1.1.8.8
IBM i 7.3: SI77378 – ACS 1.1.8.8
IBM i 7.2: SI77379 – ACS 1.1.8.8

A reminder: To help you with the Log4j security vulnerability, we have created a supplemental spreadsheet as a companion to the IBM i PTF Guide that has the latest information on what you need to worry about and do about it when it comes to this vulnerability. You can down the Log4j spreadsheet at this link.

Here is the rundown of PTF Groups by IBM i release level since we last published:

PTF Groups 7.4:

Fix list for IBM WebSphere Application Server Liberty
WebSphere Application Server traditional V9.0

PTF Groups 7.3:

Fix list for IBM WebSphere Application Server Liberty
WebSphere Application Server traditional V9.0

PTF Groups 7.2:

None

PTF Groups 7.1:

None

New (or Updated) links added to the ‘Links’ tab in the guide this week:

Omnifind: OmniFind Text Search Server PTF information

New (or Updated) links added to the ‘QMGtools’ tab in the guide this week:

QMGTOOLS: DB2 for IBMi i MustGather Data Collection: 645221

New (or Updated) links added to the ‘ACS_NAV’ tab in the guide this week:

Transferring Data From Excel using Access Client Solutions: 667343
IBM i Access – ACS Updates: 6435227
Heritage Navigator Enable and Disable Instructions: 6556828

Tips/Definitions: Here are some no-cost versions of Java:

https://adoptopenjdk.net/
https://aws.amazon.com/corretto/
https://developer.ibm.com/languages/java/semeru-runtimes/downloads
https://adoptium.net/

The Guide at a glance: There are no new defectives this week (03/19/22). Here is the defective PTF rundown, which is the last defective for each release:

	Defect		Defective	APAR	Fixing
	Date		PTF			PTF
	--------	--------	-------	-------
7.4	2/16/22		MF69273		MA49558	MF69650	(Read the link in the guide!)
			MF89241
7.3	2/16/22		SI78508		SE77164	SI78674	(Read the link in the guide!)
7.2	12/08/21	SI77634		SE73420	SI78039	(Read the link in the guide!)
7.1	07/29/19	SI69653		SE71807	SI70603 (5733SC1, OpenSSH, available!)

Be sure to access the link in the Guide for further details.

Below is the usual archive of the IBM i PTF Guide to help you work through the PTFs in chronological order:

March 19, 2022: Volume 24, Number 12

March 12, 2022: Volume 24, Number 11

March 5, 2022: Volume 24, Number 10

February 26, 2022: Volume 24, Number 9

February 19, 2022: Volume 24, Number 8

February 12, 2022: Volume 24, Number 7

February 5, 2022: Volume 24, Number 6

January 29, 2022: Volume 24, Number 5

January 22, 2022: Volume 24, Number 4

January 15, 2022: Volume 24, Number 3