IBM i PTF Guide, Volume 24, Number 38

September 19, 2022 Doug Bidwell

It is a quiet week for PTFs, with two security vulnerabilities for the IBM i platform and not much else.

We will start with Security Bulletin: Samba for IBM i is vulnerable to attacker obtaining sensitive information due to a memory leak with SMB1 requests (CVE-2022-32742), which you can find out more about at this link. Here are the fixes:

IBM i Release	5770-SS1	PTF Number	
                7.4		SI80816	
                7.3		SI80815

And then there is Security Bulletin: IBM WebSphere Application Server Liberty for IBM i is vulnerable to identity spoofing with authenticated user and ability to bypass security restrictions due to Eclipse Paho Java client (CVE-2019-11777, CVE-2022-22476), which you can learn about at this link. Here are the fixes:

IBM i Release	5770-SS1	PTF Number	
		7.5		SI80972
		7.4		SI80973
		7.3		SI80974
		7.2		SI80975

Here is the rundown of PTF Groups by IBM i release level since we last published:

PTF Groups 7.5:

Nothing

PTF Groups 7.4:

Nothing here as well

PTF Groups 7.3:

Also nothing to report here

PTF Groups 7.2:

Nothing here, either

New (or Updated) links added to the ‘Links’ tab in the guide this week:

TLS: Enable TLS for HTTP Apache using the HTTP Admin ‘Configure TLS’ Wizard, 668113
PowerHA: PowerHA Tools Compatibility Information, 6560768
PowerHA: Smart Assist for PowerHA on IBM i, 1126371

New (or Updated) links added to the ‘QMGtools’ tab in the guide this week:

Nothing here.

New (or Updated) links added to the ‘ACS_NAV’ tab in the guide this week:

Error message MSGSOCK007 with Access Client Solutions, 687731

Tips/Definitions: Two events you need to be aware of. One, i on Security, Common.org event Oct 3-4, with a focus on Security Technical education event for IBM Common. Link here. And two, Navigate 2022 – Common.org event Oct 3-5 – Fall Technical Education Event for IBM Common. Link here.

The Guide at a glance: There are new defectives this week (09/17/22). Here is the defective PTF rundown, which is the last defective for each release:

	Defect		Defective	APAR	Fixing
	Date		PTF			PTF
	--------	--------	-------	-------
7.5	08/19/22	SI80863		SE78340	SI80882 (When available)
			SI79764		
7.4	08/19/22	SI80767		SE78340	SI80881 (When available)
			SI80738
			SI80452
			SI80418
			SI80416
			SI80346
			SI79812
			SI79760
7.3	08/19/22	SI80454		SE78308	SI80825 (When available)
			SI79787
			SI79395	
7.2	12/08/21	SI77634		SE73420	SI78039	(Read the link in the guide!)

Be sure to access the link in the Guide for further details.

Below is the usual archive of the IBM i PTF Guide to help you work through the PTFs in chronological order:

September 17, 2022: Volume 24, Number 38

September 10, 2022: Volume 24, Number 37

September 3, 2022: Volume 24, Number 36

August 27, 2022: Volume 24, Number 35

August 20, 2022: Volume 24, Number 34

August 13, 2022: Volume 24, Number 33

August 6, 2022: Volume 24, Number 32

July 30, 2022: Volume 24, Number 31

July 23, 2022: Volume 24, Number 30

July 16, 2022: Volume 24, Number 29