IBM i PTF Guide, Volume 26, Number 14

April 10, 2024 Doug Bidwell

As we continue to “play ketchup” after the Easter holiday and have two issues of the IBM i PTF Guide this week, three is the actual magic number as we once again have three security vulnerabilities and an oddity that we became aware of over the weekend for the IBM i software stack. We will start with the security holes, as we always do.

First, we have Security Bulletin: IBM WebSphere Application Server could provide weaker than expected security (CVE-2023-50313), which you can find out more about at this link. The affected versions include WebSphere Application Server 8.5 and 9.0.

Second, we have Security Bulletin: IBM WebSphere Application Server Liberty is vulnerable to a denial of service (CVE-2024-27268), which you can get more details about here. IBM WebSphere Application Server Liberty versions 18.0.0.2 through 24.0.0.3 are affected by this issue.

And third, we have Security Bulletin: IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to a denial of service due to jose4j (CVE-2023-51775), with details at this link here. Affected products are as follows:

Affected Product(s)				Version(s)
IBM WebSphere Application Server Liberty		21.0.0.3 - 24.0.0.3
IBM WebSphere Application Server		9.0
IBM WebSphere Application Server		8.5

In addition to that, we repeat: Products are no longer listed in WRKLICINF but show in DSPLICKEY or CALL QSFWINV, which you can find out more about here. PTFs introduced through APAR SE79942 removed the need for licensing for several IBM i products as listed in IBM i Portfolio Simplification:

R710 SI84524 (PTF in Error) – Superseded and fixed by SI84890
R720 SI83645 (PTF in Error) – Superseded and fixed by SI84891
R730 SI83646 (PTF in Error) – Superseded and fixed by SI84892
R740 SI83647 (PTF in Error) – Superseded and fixed by SI84893
R750 SI83648 (PTF in Error) – Superseded and fixed by SI84894

Here is the rundown of PTF Groups by IBM i release level since we last published:

PTF Groups 7.5:

Backup Recovery Solutions
Temporary Storage PTFs

PTF Groups 7.4:

Temporary Storage PTFs

PTF Groups 7.3:

Nothing

Tip O’ The Week: PCAP/WireShark: How to format IBM i TRCCNN and CMNTRC communication traces to .pcap files (Wireshark format), 667611. Find out more at this link.

New (or Updated) links added to the ‘Links’ tab in the guide this week:

Problem: Deleting ALL Problems in the Problem Log , 642545

New (or Updated) links added to the ‘QMGtools’ tab in the guide this week:

Nothing

New (or Updated) links added to the ‘ACS_NAV’ tab in the guide this week:

Nothing

New (or Updated) links added to the ‘Prtr Links’ tab in the guide this week:

None

New (or Updated) links Redbooks added this week:

None

The Guide at a glance: There are new defectives this week (04/06/24). Here is the defective PTF rundown, which is the last defective for each release:

Defective PTF rundown (The last defective for each release):

	Defect		Defective	APAR	Fixing
	Date		PTF			PTF
	--------	--------	-------	------------------------	
7.5	01/10/24	SI85576		SE81023	SI85663 (When available)
7.4	03/05/24	MF71521		MA50510	MF71656 (When available)
7.3	01/10/24	SI85576		SE81023	SI85663 (When available)

Be sure to access the link in the Guide for further details.

Below is the usual archive of the IBM i PTF Guide to help you work through the PTFs in chronological order:

April 6, 2024: Volume 26, Number 14

March 30, 2024: Volume 26, Number 13

March 24, 2024: Volume 26, Number 12

March 16, 2024: Volume 26, Number 11

March 9, 2024: Volume 26, Number 10

March 2, 2024: Volume 26, Number 9

February 24, 2024: Volume 26, Number 8

February 17, 2024: Volume 26, Number 7

February 10, 2024: Volume 26, Number 6

February 3, 2024: Volume 26, Number 5