IBM i PTF Guide, Volume 25, Number 35

September 11, 2023 Doug Bidwell

We have been on hiatus for a few weeks, and there is a lot of stuff to catch up on. There are a slew of security vulnerabilities and a whole bunch of PTFs for the current releases of IBM i that you need to deal with. Let’s start with the security issues.

First, we have Security Bulletin: IBM Java SDK and IBM Java Runtime for IBM i are vulnerable to denial of service, availability, integrity, and confidentiality impacts due to multiple vulnerabilities, which you can find out more about at this link. Here are the PTFs for this vulnerability:

IBM i Release	
5770-JV1 	Group PTF Number 	Level
7.5	SF99955 		Level 6
7.4	SF99665 		Level 19
7.3	SF99725 		Level 29

Second, we have Security Bulletin: Multiple Vulnerabilities in IBM Java SDK affect IBM WebSphere Application Server and IBM WebSphere Application Server Liberty due to July 2023 CPU, which you can find out more about here, with additional information available here.

Third, we have Security Bulletin: IBM Java SDK and IBM Java Runtime for IBM i are vulnerable to arbitrary code execution due to an unsafe deserialization flaw (CVE-2022-40609), with the details at this link. Here are the PTFs for this vulnerability:

IBM i Release	
5770-JV1 	Group PTF Number 	Level
7.5	SF99955 		Level 6
7.4	SF99665 		Level 19
7.3	SF99725 		Level 29

OK, now there are new PTF groups for IBM i 7.2 in this issue, too. SF99719 720 Group HIPER level 232 is new for 7.2 as of 8/22/23, which has all HIPERs since the announcement of V7R2M0. See this link for more information. Then there is SF99718 720 Group Security level 121, which is also new for IBM i 7.2 as of 8/22/23 and which contains Security PTFs released since General Availability of V7R2M0. This link has more information on that.

Here is the rundown of PTF Groups by IBM i release level since we last published:

PTF Groups 7.5:

HIPERs (High Impact/Pervasive)
Security
Backup Recovery Solutions
Content Manager OnDemand for i – 5770-RD1 7.5
Fix list for IBM WebSphere Application Server Liberty
WebSphere Application Server V8.5
Defective PTFs
MustGather: How To Obtain and Install QMGTOOLS

PTF Groups 7.4:

HIPERs (High Impact/Pervasive)
Security
Backup Recovery Solutions
Content Manager OnDemand for i – 5770-RD1 7.5
Fix list for IBM WebSphere Application Server Liberty
WebSphere Application Server V8.5
Defective PTFs
MustGather: How To Obtain and Install QMGTOOLS

PTF Groups 7.3:

HIPERs (High Impact/Pervasive)
Security
Backup Recovery Solutions
Content Manager OnDemand for i – 5770-RD1 7.5
Fix list for IBM WebSphere Application Server Liberty
WebSphere Application Server V8.5
Defective PTFs
MustGather: How To Obtain and Install QMGTOOLS

Tip O’ The Week: This is the last time I will remind you: IBM’s TechXchange 2023 conference is this week. This is a must-attend event for technologists using IBM products and solutions, with over a thousand technical breakout sessions, hands-on experiences, product demonstrations, instructor-led labs, and certifications tailored to your interests. The agenda is available here.

New (or Updated) links added to the ‘Links’ tab in the guide this week:

This Space Left Intentionally Blank

New (or Updated) links added to the ‘QMGtools’ tab in the guide this week:

This Space Left Intentionally Blank

New (or Updated) links added to the ‘ACS_NAV’ tab in the guide this week:

Configuring IBM i ACS for HMC Remote Console, 645239
Access Client Solutions and Windows 11 Version 22H2- Windows Default Console, 6831851

New (or Updated) links added to the ‘Prtr Links’ tab in the guide this week:

This Space Left Intentionally Blank

New (or Updated) links Redbooks added this week:

This Space Left Intentionally Blank

The Guide at a glance: There are new defectives this week (08/26/23). Here is the defective PTF rundown, which is the last defective for each release:

Defective PTF rundown (The last defective for each release):

Defective PTF rundown (The last defective for each release):
	Defect		Defective	APAR	Fixing
	Date		PTF			PTF
	--------	--------	-------	------------------------	
7.5	08/25/23	SI84098		SE80391	SI84411 (When available)
7.4	08/25/23	SI84153		SE80391	SI84419 (When available)
7.3	08/25/23	SI84157		SE80391	SI84438 (When available)

Be sure to access the link in the Guide for further details.

Below is the usual archive of the IBM i PTF Guide to help you work through the PTFs in chronological order:

August 26, 2023: Volume 25, Number 35

August 19, 2023: Volume 25, Number 34

August 12, 2023: Volume 25, Number 33

August 5, 2023: Volume 25, Number 32

July 29, 2023: Volume 25, Number 31

July 22, 2023: Volume 25, Number 30

July 15, 2023: Volume 25, Number 29

July 8, 2023: Volume 25, Number 28

July 1, 2023: Volume 25, Number 27

June 24, 2023: Volume 25, Number 26