IBM i PTF Guide, Volume 25, Number 28

July 12, 2023 Doug Bidwell

It is still pretty quiet out there in when it comes to PTFs for the IBM i platform, excepting two important security vulnerabilities, one of which we reported on in Monday’s issue of The Four Hundred.

To reiterate, first we have Security Bulletin: IBM i is vulnerable to an attacker executing CL commands due to an exploitation of DDM architecture (CVE-2023-30990), which you can find out more about here. The IBM i PTF numbers for IBM i 5770-SS1 Base Operating System contain the fix for the vulnerability, as follows:

IBM i Release	PTF Number
7.5	SI83472	
7.4	SI83473	
7.3	SI83474	
7.2	SI83475

Second, we have Security Bulletin: IBM WebSphere Application Server could provide weaker than expected security (CVE-2023-35890), which you can get details about at this link.

Affected Product(s)			Version(s)
IBM WebSphere Application Server	9.0
IBM WebSphere Application Server	8.5

Remediation/Fixes: IBM strongly recommends addressing the vulnerability now by applying a currently available interim fix or fix pack that contains the APAR PH54406. Please note that this vulnerability only impacts versions 9.0.5.15, 9.0.5.16, and 8.5.5.23.

A reminder: Join COMMON in Virginia Beach, VA from October 9 – 11, 2023 for an IBM i educational event. NAViGATE will feature 100+ sessions presented by industry expert speakers, an Expo of leading solution providers in the IBM i space, and limitless networking opportunities to connect with peers and experts to maximize your learning opportunities. Register at this link.

Here is the rundown of PTF Groups by IBM i release level since we last published:

PTF Groups 7.5:

Hard to believe . . .

PTF Groups 7.4:

But there are no . . .

PTF Groups 7.3:

IBM i group updates this time around.

Tip O’ The Week: Potato flour attracts and holds water, producing moist yeast bread with a good shelf life. A teaspoon or so added to your baked goods lends a moist crumb, so it is especially useful in gluten free baking. Potato flour also works great in pancake and waffle recipes.

New (or Updated) links added to the ‘Links’ tab in the guide this week:

SSL/HTTP: SSL Considerations for QSYS2 HTTP Functions, 6567211

New (or Updated) links added to the ‘QMGtools’ tab in the guide this week:

Nothing here.

New (or Updated) links added to the ‘ACS_NAV’ tab in the guide this week:

Nothing here either

New (or Updated) links added to the ‘Prtr Links’ tab in the guide this week:

Nope

New (or Updated) links Redbooks added this week:

Nadda

The Guide at a glance: There are new defectives this week (07/08/23). Here is the defective PTF rundown, which is the last defective for each release:

	Defect		Defective	APAR	Fixing
	Date		PTF			PTF
	--------	--------	-------	-------
7.5	05/26/23	SI79363		SE79905	SI83581 (When available)
7.4	05/26/23	SI79339		SE79905	SI83580 (When available)
7.3	05/26/23	SI79287		SE79905	SI83578 (When available)

Be sure to access the link in the Guide for further details.

Below is the usual archive of the IBM i PTF Guide to help you work through the PTFs in chronological order:

July 8, 2023: Volume 25, Number 28

July 1, 2023: Volume 25, Number 27

June 24, 2023: Volume 25, Number 26

June 17, 2023: Volume 25, Number 25

June 10, 2023: Volume 25, Number 24

June 3, 2023: Volume 25, Number 23

May 27, 2023: Volume 25, Number 22

May 20, 2023: Volume 25, Number 21

May 13, 2023: Volume 25, Number 20

May 6, 2023: Volume 25, Number 19