IBM i PTF Guide, Volume 24, Number 50
December 12, 2022 Doug Bidwell
It is another week of interesting security vulnerabilities in the IBM i world, so brace yourself for some research and patching. There are a slew of vulnerabilities that affect the Hardware Management Console for Power Systems, which means any of you IBM i shops that are using relatively large Power machines. There are five new ones, above and beyond the ones we have covered in recent weeks.
First, there is Security Bulletin: Vulnerability in Bind (CVE-2021-25219) affects Power HMC, which you can read about here.
Affected Product(s) Version(s) HMC V10.1.1010.0 V10.1.1010.0 and later HMC V9.2.950.0 V9.2.950.0 and later Product VRMF APAR Remediation/Fix Power HMC V9.2.950.0 SP3 ppc MB04373 MH01944 Power HMC V9.2.950.0 SP3 x86 MB04372 MH01943 Power HMC V10.1.1020.0 SP1 ppc MB04363 MF70302 Power HMC V10.1.1020.0 SP1 x86 MB04362 MF70301
Second, there is Security Bulletin: Vulnerabilities in Apache HTTP (CVE-2021-33193 and CVE-2021-44224) affects Power HMC, which you can see more about at this link. Same affected versions and APARs to remediate and fix.
Third, there is Security Bulletin: Vulnerability in Apache HTTP (CVE-2020-13950) affects Power HMC, which you can find out more about there. It has the same affected versions and remediations and fixes.
Fourth, there is Security Bulletin: Vulnerability in Kernel (CVE-2021-45485) affects Power HMC, which you can read more about here.
Affected Product(s) Version(s) HMC V10.1.1010.0 V10.1.1010.0 and later HMC V9.2.950.0 V9.2.950.0 and later Product VRMF APAR Remediation/Fix Power HMC V9.2.950.0 SP3 ppc MB04331 MH01925 Power HMC V9.2.950.0 SP3 x86 MB04330 MH01924 Power HMC V10.1.1020.0 SP1 ppc MB04335 MF69724 Power HMC V10.1.1020.0 SP1 x86 MB04334 MF69722
And finally, number five, there is Security Bulletin: Vulnerability in Kernel (CVE-2022-1012) affects Power HMC, which you can find out more about at this link and which has the same affected versions and fixes.
You should also check out the HMC V10 R2 M1030 Recovery Media – for 7063 Hardware, which you can see more about at this link.
Now, here is the rundown of PTF Groups by IBM i release level since we last published:
PTF Groups 7.5:
- IBM DB2 Mirror for i
- IBM MQ for IBM i – v9.2.0/v9.3.0
- SAP
- QMGTOOLS
PTF Groups 7.4:
- MQ for IBM i – v9.0.0/v9.1.0/v9.2.0/v9.3.0
- Memo to Users
- What’s New!
- SAP
- QMGTOOLS
PTF Groups 7.3:
- MQ for IBM i – v7.1.0/v8.0.0/V9.0.0/V9.1/V9.2
- SAP
- QMGTOOLS
PTF Groups 7.2:
- QMGTOOLS
New (or Updated) links added to the ‘Links’ tab in the guide this week:
- Nothing
New (or Updated) links added to the ‘QMGtools’ tab in the guide this week:
- None
New (or Updated) links added to the ‘ACS_NAV’ tab in the guide this week:
- None
New (or Updated) links added to the ‘Prtr Links’ tab in the guide this week:
- Nadda
Tips/Definitions: How long has it been since you did a SAVE 21?
The Guide at a glance: There are no new defectives this week (12/10/22). Here is the defective PTF rundown, which is the last defective for each release:
Defect Defective APAR Fixing Date PTF PTF -------- -------- ------- ------- 7.5 11/22/22 SI81328 SE78918 SI81867 (When available) 7.4 12/01/22 MF69086 MA49947 MF70500 (When available) 7.3 12/01/22 MF69085 MA49947 MF70499 (When available) 7.2 12/08/21 SI77634 SE73420 SI78039 (Read the link in the guide!)
Be sure to access the link in the Guide for further details.
Below is the usual archive of the IBM i PTF Guide to help you work through the PTFs in chronological order:
December 10, 2022: Volume 24, Number 51
December 3, 2022: Volume 24, Number 49
November 26, 2022: Volume 24, Number 48
November 19, 2022: Volume 24, Number 47
November 12, 2022: Volume 24, Number 46
November 5, 2022: Volume 24, Number 45
October 29, 2022: Volume 24, Number 44
October 22, 2022: Volume 24, Number 43
October 15, 2022: Volume 24, Number 42
October 8, 2022: Volume 24, Number 41
October 1, 2022: Volume 24, Number 40
September 24, 2022: Volume 24, Number 39
September 17, 2022: Volume 24, Number 38
September 10, 2022: Volume 24, Number 37
September 3, 2022: Volume 24, Number 36
August 27, 2022: Volume 24, Number 35
August 20, 2022: Volume 24, Number 34
August 13, 2022: Volume 24, Number 33
August 6, 2022: Volume 24, Number 32
July 30, 2022: Volume 24, Number 31
July 23, 2022: Volume 24, Number 30
July 16, 2022: Volume 24, Number 29
July 9, 2022: Volume 24, Number 28
June 25, 2022: Volume 24, Number 26
June 18, 2022: Volume 24, Number 25
June 11, 2022: Volume 24, Number 24
June 4, 2022: Volume 24, Number 23
May 28, 2022: Volume 24, Number 22
May 25, 2022: Volume 24, Number 21
May 14, 2022: Volume 24, Number 20
May 7, 2022: Volume 24, Number 19
April 30, 2022: Volume 24, Number 18
April 23, 2022: Volume 24, Number 17
April 16, 2022: Volume 24, Number 16
April 2, 2022: Volume 24, Number 14
March 26, 2022: Volume 24, Number 13
March 19, 2022: Volume 24, Number 12
March 12, 2022: Volume 24, Number 11
March 5, 2022: Volume 24, Number 10
February 26, 2022: Volume 24, Number 9
February 19, 2022: Volume 24, Number 8
February 12, 2022: Volume 24, Number 7
February 5, 2022: Volume 24, Number 6
January 29, 2022: Volume 24, Number 5
January 22, 2022: Volume 24, Number 4
January 15, 2022: Volume 24, Number 3
January 8, 2022: Volume 24, Number 2
January 1, 2022: Volume 24, Number 1
December 6, 2021: Volume 23, Number 48
November 20, 2021: Volume 23, Number 47
November 13, 2021: Volume 23, Number 46
November 6, 2021: Volume 23, Number 45
October 30, 2021: Volume 23, Number 44
October 23, 2021: Volume 23, Number 43
October 16, 2021: Volume 23, Number 42
October 9, 2021: Volume 23, Number 41
October 2, 2021: Volume 23, Number 40
September 25, 2021: Volume 23, Number 39
September 18, 2021: Volume 23, Number 38
September 11, 2021: Volume 23, Number 37
September 4, 2021: Volume 23, Number 36
August 28, 2021: Volume 23, Number 35
August 21, 2021: Volume 23, Number 34
August 14, 2021: Volume 23, Number 33
August 7, 2021: Volume 23, Number 32
July 31, 2021: Volume 23, Number 31
July 24, 2021: Volume 23, Number 30
July 17, 2021: Volume 23, Number 29
July 10, 2021: Volume 23, Number 28
July 3, 2021: Volume 23, Number 27
June 26, 2021: Volume 23, Number 26
June 19, 2021: Volume 23, Number 25
June 12, 2021: Volume 23, Number 24
June 5, 2021: Volume 23, Number 23
June 5, 2021: Volume 23, Number 22
May 22, 2021: Volume 23, Number 21
May 15, 2021: Volume 23, Number 20
May 8, 2021: Volume 23, Number 19
May 1, 2021: Volume 23, Number 18
April 24, 2021: Volume 23, Number 17
April 17, 2021: Volume 23, Number 16
April 10, 2021: Volume 23, Number 15
April 3, 2021: Volume 23, Number 14
March 27, 2021: Volume 23, Number 13
March 20, 2021: Volume 23, Number 12
March 13, 2021: Volume 23, Number 11
March 6, 2021: Volume 23, Number 10
February 27, 2021: Volume 23, Number 9
February 20, 2021: Volume 23, Number 8
February 13, 2021: Volume 23, Number 7
February 6, 2021: Volume 23, Number 6
January 31, 2021: Volume 23, Number 5
January 23, 2021: Volume 23, Number 4
January 16, 2021: Volume 23, Number 3
January 9, 2021: Volume 23, Number 2
January 2, 2021: Volume 23, Number 1
December 26, 2020: Volume 22, Number 52
December 19, 2020: Volume 22, Number 51
