IBM i PTF Guide, Volume 25, Number 22
June 5, 2023 Doug Bidwell
Welcome back after the Memorial Day holiday, and our thanks to all who have served and who currently serve.
There is a slew of security issues that you need to deal with on the IBM i platform. So let’s get to it.
First, we have Security Bulletin: IBM Java SDK and IBM Java Runtime for IBM i are vulnerable to exposing sensitive information due to flaws and configurations (CVE-2023-30441), which you can find out more about here. The vulnerability can be fixed by applying the latest Java Group PTF. Releases 7.5, 7.4, 7.3, and 7.2 of IBM i will be fixed:
IBM i Release 5770-JV1 Group PTF Number and Level 7.5 SF99955 Level 3 7.4 SF99665 Level 16 7.3 SF99725 Level 27 7.2 SF99716 Level 37
Second, we have Security Bulletin: Vulnerability in IBM Java (CVE-2022-21426) affects Power HMC, and more information is available about this security issue at this link.
Product VRMF APAR Remediation/Fix Power HMC V9.2.950.0 SP3 ppc MB04397 MH01954 Power HMC V9.2.950.0 SP3 x86 MB04396 MH01953 Power HMC V10.1.1020.0 SP1 ppc MB04403 MF70892 Power HMC V10.1.1020.0 SP1 x86 MB04402 MF70891
Third, the below links have been updated with the latest Firmware HIPER information – it is worth checking out!
Server Firmware for stand-alone IBM i systems: https://www.ibm.com/support/pages/server-firmware-stand-alone-ibm-i-systems.
POWER Code Matrix: https://esupport.ibm.com/customercare/flrt/mtm. (Verify HMC and server firmware combinations for IBM Systems that use Power processors.)
Fourth, we have Security Bulletin: Vulnerability in OpenSSL (CVE-2022-4304, CVE-2022-4450, CVE-2023-0215 and CVE-2023-0286 ) affects Power HMC, and you can find out more here. The following fixes are available on IBM Fix Central at: http://www-933.ibm.com/support/fixcentral/.
Product VRMF APAR Remediation/Fix Power HMC V9.2.950.0 SP3 ppc MB04397 MH01954 Power HMC V9.2.950.0 SP3 x86 MB04396 MH01953 Power HMC V10.1.1020.0 SP1 ppc MB04403 MF70892 Power HMC V10.1.1020.0 SP1 x86 MB04402 MF70891 Power HMC V10.2.1030.0 ppc MB04401 MF70890 Power HMC V10.2.1030.0 SP1 x86 MB04400 MF70889
And finally, announcing PTF MH01958 and MH01959 iFix for HMC V9 R2 M953, which you can find out more about here.
- PTF MH01958 – HMC V9 R2 953.5 for 7042-CR9 Hardware or vHMC for x86_64 hypervisors (5765-HMW)
- PTF MH01959 – HMC V9 R2 953.5 for 7063 Machine Types or vHMC for PowerVM (5765-HMB)
Here is the rundown of PTF Groups by IBM i release level since we last published:
PTF Groups 7.5:
- TCP/IP
- SAP support required PTF list for IBM i 7.5
- Temporary Storage PTFs
- Defective PTFs
- MustGather: How To Obtain and Install QMGTOOLS
- RPG Café
PTF Groups 7.4:
- TCP/IP
- Temporary Storage PTFs
- Defective PTFs
- MustGather: How To Obtain and Install QMGTOOLS
- RPG Café
PTF Groups 7.3:
- TCP/IP
- Defective PTFs
- MustGather: How To Obtain and Install QMGTOOLS
- RPG Café
Tip O’ The Week: The “Help” About, Check for Updates only checks the first three digits. If you are on ACS 1.1.9.1, checking for updates will not tell you about 1.1.9.2 . . . .
New (or Updated) links added to the ‘Links’ tab in the guide this week:
- QSHell The Basics of Qshell, 637079
- QSHell Redirecting Output in Qshell, 634541
- QSHell Printing output from IBM PASE for i applications, N/A
- QSHell Using the Jar Command to Unzip Files, 638015
New (or Updated) links added to the ‘QMGtools’ tab in the guide this week:
- Nothing new here.
New (or Updated) links added to the ‘ACS_NAV’ tab in the guide this week:
- Here neither.
New (or Updated) links added to the ‘Prtr Links’ tab in the guide this week:
New (or Updated) links Redbooks added this week:
- And nothing here as well.
The Guide at a glance: There are new defectives this week (05/27/23). Here is the defective PTF rundown, which is the last defective for each release:
Defect Defective APAR Fixing Date PTF PTF -------- -------- ------- ------- 7.5 05/26/23 SI79363 SE79905 SI83581 (When available) 7.4 05/26/23 SI79339 SE79905 SI83580 (When available) 7.3 05/26/23 SI79287 SE79905 SI83578 (When available)
Be sure to access the link in the Guide for further details.
Below is the usual archive of the IBM i PTF Guide to help you work through the PTFs in chronological order:
May 27, 2023: Volume 25, Number 22
May 20, 2023: Volume 25, Number 21
May 13, 2023: Volume 25, Number 20
May 6, 2023: Volume 25, Number 19
April 29, 2023: Volume 25, Number 18
April 22, 2023: Volume 25, Number 17
April 15, 2023: Volume 25, Number 16
April 8, 2023: Volume 25, Number 15
April 1, 2023: Volume 25, Number 14
March 25, 2023: Volume 25, Number 13
March 18, 2023: Volume 25, Number 12
March 11, 2023: Volume 25, Number 11
March 4, 2023: Volume 25, Number 10
February 25, 2023: Volume 25, Number 9
February 18, 2023: Volume 25, Number 8
February 13, 2023: Volume 25, Number 7
February 4, 2023: Volume 25, Number 6
January 28, 2023: Volume 25, Number 5
January 21, 2023: Volume 25, Number 4
January 14, 2023: Volume 25, Number 3
January 7, 2023: Volume 25, Number 2
January 1, 2023: Volume 25, Number 1
December 10, 2022: Volume 24, Number 50
December 3, 2022: Volume 24, Number 49
November 26, 2022: Volume 24, Number 48
November 19, 2022: Volume 24, Number 47
November 12, 2022: Volume 24, Number 46
November 5, 2022: Volume 24, Number 45
October 29, 2022: Volume 24, Number 44
October 22, 2022: Volume 24, Number 43
October 15, 2022: Volume 24, Number 42
October 8, 2022: Volume 24, Number 41
October 1, 2022: Volume 24, Number 40
September 24, 2022: Volume 24, Number 39
September 17, 2022: Volume 24, Number 38
September 10, 2022: Volume 24, Number 37
September 3, 2022: Volume 24, Number 36
August 27, 2022: Volume 24, Number 35
August 20, 2022: Volume 24, Number 34
August 13, 2022: Volume 24, Number 33
August 6, 2022: Volume 24, Number 32
July 30, 2022: Volume 24, Number 31
July 23, 2022: Volume 24, Number 30
July 16, 2022: Volume 24, Number 29
July 9, 2022: Volume 24, Number 28
June 25, 2022: Volume 24, Number 26
June 18, 2022: Volume 24, Number 25
June 11, 2022: Volume 24, Number 24
June 4, 2022: Volume 24, Number 23
May 28, 2022: Volume 24, Number 22
May 25, 2022: Volume 24, Number 21
May 14, 2022: Volume 24, Number 20
May 7, 2022: Volume 24, Number 19
April 30, 2022: Volume 24, Number 18
April 23, 2022: Volume 24, Number 17
April 16, 2022: Volume 24, Number 16
April 2, 2022: Volume 24, Number 14
March 26, 2022: Volume 24, Number 13
March 19, 2022: Volume 24, Number 12
March 12, 2022: Volume 24, Number 11
March 5, 2022: Volume 24, Number 10
February 26, 2022: Volume 24, Number 9
February 19, 2022: Volume 24, Number 8
February 12, 2022: Volume 24, Number 7
February 5, 2022: Volume 24, Number 6
January 29, 2022: Volume 24, Number 5
January 22, 2022: Volume 24, Number 4
January 15, 2022: Volume 24, Number 3
January 8, 2022: Volume 24, Number 2
January 1, 2022: Volume 24, Number 1
December 6, 2021: Volume 23, Number 48
November 20, 2021: Volume 23, Number 47
November 13, 2021: Volume 23, Number 46
November 6, 2021: Volume 23, Number 45
October 30, 2021: Volume 23, Number 44
October 23, 2021: Volume 23, Number 43
October 16, 2021: Volume 23, Number 42
October 9, 2021: Volume 23, Number 41
October 2, 2021: Volume 23, Number 40
September 25, 2021: Volume 23, Number 39
September 18, 2021: Volume 23, Number 38
September 11, 2021: Volume 23, Number 37
September 4, 2021: Volume 23, Number 36
August 28, 2021: Volume 23, Number 35
August 21, 2021: Volume 23, Number 34
August 14, 2021: Volume 23, Number 33
August 7, 2021: Volume 23, Number 32
July 31, 2021: Volume 23, Number 31
July 24, 2021: Volume 23, Number 30
July 17, 2021: Volume 23, Number 29
July 10, 2021: Volume 23, Number 28
July 3, 2021: Volume 23, Number 27
June 26, 2021: Volume 23, Number 26
June 19, 2021: Volume 23, Number 25
June 12, 2021: Volume 23, Number 24
June 5, 2021: Volume 23, Number 23
June 5, 2021: Volume 23, Number 22
May 22, 2021: Volume 23, Number 21
May 15, 2021: Volume 23, Number 20
Doug, be aware that the lead page for the CVE from IBM for the Java issue on 5770-JV1 is incorrect, the actual version of the package is higher than listed (you can check by looking at the page linked in the CVE.) Chris..