IBM i PTF Guide, Volume 28, Number 29

August 24, 2026 Doug Bidwell

IBM laid a lot of PTF work on you last week, and this week is also a heavy one. So brace yourself. There are six security vulnerabilities in the IBM i stack and several other issues that you should be aware of. Let’s start with the random issues and then do the security issues.

First, known issues (APARs) have been fixed for IBM i Access Client Solutions, ACS 1.1.9.15 (ACS11915), and here is the Klingon that describes it: DT498800 OSP-UNPRED MSGSSL007 – AN ERROR OCCURRED WITH AN SSL CERTIFICATE (JAVA.NIO.FILE.ATTRIBUTE.USERPRINCIPALNOTFOUNDEXCEPTION). I am not sure why they have to shout, but there you have it.

Then we have Linux mounts may fail to IBM i Netserver shares after applying latest CVE PTFs from August 2026, and you can get this link for more information.

Third, we have Security PTF Enhancements Can Prevent Connections from Older Versions of IBM i Access Client Solutions Windows Application Package Drivers, which you can read about here. There is an explanation, but no fixes as yet.

And then we have IBM i 7.6 Recommended Fixes for Cryptographic Services, DCM, and the Cryptographic Co-processor for Power Systems, which you can read about here. The fixes issued on July 24 are:

SJ09821: OSP-CRYPTO External Key Manager Description Support
SJ09830: OSP-CRYPTO External Key Management Enhancements
MJ09823: LIC-CRYPTO Improved master key protection
MJ09825: LIC-CRYPTO Enhancements to master key operations

And now the security bulletins.

First, we have Security Bulletin: IBM i is Affected By Denial of Service in Host Servers [CVE-2026-17015], with more information here. Affected Products and Versions:

IBM i Release 5770-SS1 PTF Number(s)

7.6 SJ11150

7.5 SJ11149

7.4 SJ11148

7.3 SJ11147

Second, we have Security Bulletin: IBM i is Affected By A Buffer Overflow Vulnerability [CVE-2026-18102], which you can read about here. Affected Products and Versions:

IBM i Release 5770-999 PTF Number(s)

7.6 MJ10886

7.5 MJ10885

7.4 MJ10884

7.3 MJ10883

Third, we have Security Bulletin: IBM Application Runtime Expert (ARE) for IBM i is vulnerable to a user gaining elevated privileges and sensitive information [CVE-2026-18527, CVE-2026-17203], with more information about this here. Affected Products and Versions:

Release 5733-ARE PTF Number(s)

V1R1M0 SJ11185

Fourth, we have Security Bulletin: IBM i is Affected By Holding Resources after Effective Lifetime Vulnerability in Electronic Service Agent [CVE-2026-64607], and you read all about it at this link. Affected Products and Versions:

IBM i Release 5770-SS1 Option 3 PTF Number(s)

7.6 SJ11008

7.5 SJ11021

Fifth, we have Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server Liberty, with more information at this link. Affected Products and Versions:

IBM i Release 5770-SS1 Option 3 PTF Number(s)

7.6 SJ11027

7.5 SJ11028

7.4 SJ11029

7.3 SJ11030

Here is the rundown of PTF Groups by IBM i release level since we last published:

PTF Groups 7.6:

HIPERs – High Impact Pervasive
Security
Fix list for IBM WebSphere Application Server Liberty
WebSphere Application Server Traditional Version
SAP Support Required PTF List for IBM i 7.6
IBM i Access Client Solutions V1.1.9.15
Rational Developer for i

PTF Groups 7.5:

HIPERs – High Impact Pervasive
Security
Fix list for IBM WebSphere Application Server Liberty
WebSphere Application Server Traditional Version
SAP Support Required PTF List for IBM i 7.5
IBM i Access Client Solutions V1.1.9.15
Rational Developer for i

PTF Groups 7.4:

HIPERs – High Impact Pervasive
Security
Fix list for IBM WebSphere Application Server Liberty
WebSphere Application Server Traditional Version
SAP Support Required PTF List for IBM i 7.4
IBM i Access Client Solutions V1.1.9.15
Rational Developer for i

PTF Groups 7.3:

HIPERs – High Impact Pervasive
Security
Fix list for IBM WebSphere Application Server Liberty
WebSphere Application Server Traditional Version
IBM i Access Client Solutions V1.1.9.15
Rational Developer for i

PTF Groups 7.2:

None

Tip O’ The Week: IBM is gradually introducing SMS notifications for selected support updates. This feature is being rolled out across additional countries and update types over time. Go to this link to learn more.

New (or Updated) links added to the ‘Links’ tab in The Guide this week:

ARE: Administration Runtime Expert (ARE), 7130982
Oracle: Oracle Critical Patch Update Advisory, N/A

New (or Updated) links added to the ‘QMGtools’ tab in The Guide this week:

None

New (or Updated) links added to the ‘ACS_NAV’ tab in The Guide this week:

ACS: IBM i Access Client Solutions, 1.1.9.15

New (or Updated) links added to the ‘Prtr Links’ tab in The Guide this week:

None

New (or Updated) links Redbooks added this week:

None

New (or Updated) stuff added to REF tab in The Guide this week:

None

New (or Updated) links in the TAPE tab in The Guide this week:

None

New (or Updated) links in the WAS tab in The Guide this week:

None

The Guide at a glance: There were new defectives the week of 08/08/26. Defective PTF rundown – the latest defective for each release. Click on the Defective PTF link for your release in the Guide:

	Defect		Defective	APAR		Fixing
	Date		PTF				PTF
	--------	--------	---------	-----------------------	
7.6	07/06/26	SJ10029	        DT475474	xxxxxxxx (When available)(read the recommendations)
			SJ09530					  Read the cover letter-prerequisites!		
      								  See above!!

7.5	08/13/26	SJ10844	        DT498871	xxxxxxxx (When available)(read the recommendations)
			 					  Read the cover letter-prerequisites!                					
See "Whats New" Entry above!!
7.4	04/10/26	SJ08675	        DT467722	SJ09201	  Same as above, Please read the Cover letter  
								 (When available)(read the recommendations)
								  Read the cover letter-prerequisites!
7.3	04/10/26	SJ08674	        DT467722	SJ09200  (When available)(read the recommendations)

Be sure to access the link in The Guide for further details.

Below is the usual archive of the IBM i PTF Guide to help you work through the PTFs in chronological order:

August 22, 2026: Volume 28, Number 29

August 15, 2026: Volume 28, Number 28

August 8, 2026: Volume 28, Number 27

August 1, 2026: Volume 28, Number 26

July 26, 2026: Volume 28, Number 25

July 18, 2026: Volume 28, Number 24

July 11, 2026: Volume 28, Number 23

July 4, 2026: Volume 28, Number 22

June 13, 2026: Volume 28, Number 21

June 6, 2026: Volume 28, Number 20