IBM i PTF Guide, Volume 27, Number 13

April 2, 2025 Doug Bidwell

Good day, good people of IBM i Land. This week we start out with two security vulnerabilities and a known issue to beware of the BLOB!

Let’s start with the security vulnerabilities.

First we have Security Bulletin: IBM WebSphere Application Server Liberty is vulnerable to a denial of service due to Netty (CVE-2025-25193), which you can find out more about at this link. IBM WebSphere Application Server Liberty versions 21.0.0.2 through 25.0.0.3 are affected.

Second, we have Security Bulletin: IBM WebSphere Application Server Liberty is vulnerable to a denial of service due to Apache CXF (CVE-2025-23184), and here is the link to get more information about that. IBM WebSphere Application Server Liberty versions 17.0.0.3 through 25.0.0.3 are affected.

Now, we have DT418231, a known issue called UNPRED BLOB DATA (ANSI) CONVERTED RESULTS IN GARBAGE DATA USING 1.1.0.28. (Why does IBM have to SHOUT these things?) If encountering BLOB problems, change ODBC driver to earlier version, 1.1.0.27 or earlier. (This issue is reported in Bug 37423668, Oracle JD Edwards Enterprise Tools – Version 9.2 or later.) Our thanks to Rob and Phil for this contribution!

Here is the rundown of PTF Groups by IBM i release level since we last published:

PTF Groups 7.5:

Fix list for IBM WebSphere Application Server Liberty
WebSphere Application Server traditional V9.0

PTF Groups 7.4:

Fix list for IBM WebSphere Application Server Liberty
WebSphere Application Server traditional V9.0

PTF Groups 7.3:

Fix list for IBM WebSphere Application Server Liberty
WebSphere Application Server traditional V9.0

Tip O’ The Week: I am not sure why we can’t seem to think of tips these days. Too much going on, I guess. . . .

New (or Updated) links added to the ‘Links’ tab in The Guide this week:

None

New (or Updated) links added to the ‘QMGtools’ tab in The Guide this week:

None

New (or Updated) links added to the ‘ACS_NAV’ tab in The Guide this week:

None

New (or Updated) links added to the ‘Prtr Links’ tab in The Guide this week:

None

New (or Updated) links Redbooks added this week:

None

New (or Updated) “Stuff” added to REF tab in The Guide this week:

None

The Guide at a glance:

There were new defectives the week of 03/29/25. Defective PTF rundown – the latest defective for each release. Click on the Defective PTF link for your release in the Guide:

	Defect		Defective	APAR		Fixing
	Date		PTF				PTF
	--------	--------	---------	-----------------------	
7.5	02/14/25	SJ03360	DT422644	SJ03833 (When available)(read the recommendations)
			SJ03138			Read the cover letter-prerequisites!
			SJ02952
			SJ02797
			SJ02479
			SJ02450
			SJ01867
			SJ01802
7.4	01/27/25	SJ03166	DT422373	SJ03785 (When available)(read the recommendations)
							Read the cover letter-prerequisites!
7.3	01/27/25	SJ03169	DT422375	SJ03786 (When available)(read the recommendations)

Be sure to access the link in The Guide for further details.

Below is the usual archive of the IBM i PTF Guide to help you work through the PTFs in chronological order:

March 29, 2025: Volume 27, Number 13

March 22, 2025: Volume 27, Number 12

March 15, 2025: Volume 27, Number 11

March 8, 2025: Volume 27, Number 10

March 1, 2025: Volume 27, Number 09

February 22, 2025: Volume 27, Number 08

February 15, 2025: Volume 27, Number 07

February 8, 2025: Volume 27, Number 06

February 1, 2025: Volume 27, Number 05

January 25, 2025: Volume 27, Number 04