IBM i PTF Guide, Volume 27, Number 37

September 15, 2025 Doug Bidwell

This week in IBM i Land, we have two security bulletins, and new System Planning Tool adding the Power11 machines, and a bunch of new microcode. Let’s start with the security vulnerabilities as we always do.

First, we have Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service due to Apache Commons FileUpload (CVE-2025-48976). The affected products are:

Affected Product(s)				Version(s)
IBM WebSphere Application Server		9.0
IBM WebSphere Application Server		8.5
IBM WebSphere Application Server Liberty		17.0.0.3 - 25.0.0.8

Second, we have Security Bulletin: IBM WebSphere Application Server Liberty could provide weaker than expected security due to crypto.js (CVE-2020-36732), which you can read more about here. The affected products are IBM WebSphere Application Server Liberty 17.0.0.3 – 25.0.0.9.

The System Planning Tool, version 6.25.252.0, is now available for download and covers the Power11 machines announced back in July. You can get it at this link.

Now the firmware updates:

New Microcode for Firmware 950 .. 950.E1, with more information here. The latest service pack 950.E1 is now available for system firmware levels VL950, VM950, and VH950. This service pack addresses HIPER Security issues: A security problem was fixed for CVE-2025-33211
New Microcode for Firmware 1060 … 1060.51, with more information there. The latest service pack 1060.51 is now available for system firmware levels, ML1060, MM1060, and MH1060. This service pack replaces 1060.50, which has been archived. A security problem was fixed for CVE-2025-33211
New Microcode for Firmware 1050 …. for 1050.51, with more information at this link. The latest service pack, 1050.51 is now available for system firmware levels, ML1050, MM1050 and MH1050. This service pack replaces 1050.50, which has been archived. A security problem was fixed for CVE-2025-33211

Here is the rundown of PTF Groups by IBM i release level since we last published:

PTF Groups 7.6:

760 IBM MQ for IBM i – v9.3.0/v9.4.0
Fix list for IBM WebSphere Application Server Liberty
WebSphere Application Server traditional Version 9.0.5.25
Temporary Storage PTFs
QMGTOOLS
Rational Developer for i

PTF Groups 7.5:

IBM MQ for IBM i – v9.2.0/v9.3.0/v9.4.0
Fix list for IBM WebSphere Application Server Liberty
WebSphere Application Server traditional Version 9.0.5.25
Temporary Storage PTFs
Defective PTFs
QMGTOOLS
Rational Developer for i

PTF Groups 7.4:

MQ for IBM i – v9.0.0/v9.1.0/v9.2.0/v9.3.0
Fix list for IBM WebSphere Application Server Liberty
WebSphere Application Server traditional Version 9.0.5.25
Temporary Storage PTFs
Defective PTFs
QMGTOOLS
Rational Developer for i

PTF Groups 7.3:

MQ for IBM i – v7.1.0/v8.0.0/V9.0.0/V9.1/V9.265
Fix list for IBM WebSphere Application Server Liberty
WebSphere Application Server traditional Version 9.0.5.25
Temporary Storage PTFs
QMGTOOLS
Rational Developer for i

Tip ‘O The Week: For those running PowerHA and/or using IASPS, please read the defective PTF’s below!!!

New (or Updated) links added to the ‘Links’ tab in The Guide this week:

JRN: Basics on Journal Cache, 685209

New (or Updated) links added to the ‘QMGtools’ tab in The Guide this week:

QMGTOOLS: Print DCM Application Definitions (PRTDCMAPPS), 6454859
MustGather: General Database Issues, 686337

New (or Updated) links added to the ‘ACS_NAV’ tab in The Guide this week:

5250: Customizing Menu Bar in Acess Client Solutions 5250 Session Manager, 688133
5250: How to Customize the Access Client Solutions 5250 Emulation Menu, 3539763

New (or Updated) links added to the ‘Prtr Links’ tab in The Guide this week:

None

New (or Updated) links Redbooks added this week:

None

New (or Updated) stuff added to REF tab in The Guide this week:

None

New (or Updated) links in the TAPE tab in The Guide this week:

None

New (or Updated) links in the WAS tab in The Guide this week:

None

The Guide at a glance: There were new defectives the week of 09/13/25. Defective PTF rundown – the latest defective for each release. Click on the Defective PTF link for your release in the Guide:

	Defect		Defective	APAR		Fixing
	Date		PTF				PTF
	--------	--------	---------	-----------------------	
7.6	No Entries										
7.5	09/11/25	MJ06225	DT450137	MJ07184 	(When available)(read the recommendations) Read the cover letter-prerequisites!                   
7.4	09/11/25	MJ06247	DT450137	MJ07181	Same as above, Please read the Cover letter - (When available)(read the recommendations) Read the cover letter-prerequisites!
7.3	01/27/25	SJ03169	DT422375	SJ03786 (When available)(read the recommendations)

Be sure to access the link in The Guide for further details.

Below is the usual archive of the IBM i PTF Guide to help you work through the PTFs in chronological order:

September 13, 2025: Volume 27, Number 37

September 6, 2025: Volume 27, Number 36

August 30, 2025: Volume 27, Number 35

August 23, 2025: Volume 27, Number 34

August 16, 2025: Volume 27, Number 33

August 9, 2025: Volume 27, Number 32

August 2, 2025: Volume 27, Number 31

July 26, 2025: Volume 27, Number 30

July 19, 2025: Volume 27, Number 29

July 12, 2025: Volume 27, Number 28