Doug Bidwell
-
IBM i PTF Guide, Volume 28, Number 36
October 19, 2026 Doug Bidwell
Just a reminder that with IBM i 7.6 TR2 and IBM i 7.5 TR8, there is a virtual Ethernet connectivity advisory. IBM is currently investigating a reported issue affecting systems running IBM i 7.6 TR2 or IBM i 7.5 TR8. Installing the Technology Refresh (TR) can cause a complete loss of network connectivity on partitions using Virtual Ethernet adapter type 268C. IBM is actively working to identify the root cause and appropriate corrective action.
Development has identified the root cause of the issue and has released the following HIPER PTFs to address it. You can read more about this issue …
Read more -
IBM i PTF Guide, Volume 28, Number 35
October 12, 2026 Doug Bidwell
Another week, another bunch of things to ponder about the IBM i platform and get fixed or re-fixed. This is ever the way with systems software, which is constantly changing, and despite the fact that Big Blue is not Meta Platforms and it is not interested in “moving fast and breaking things” sometimes things don’t work right or stop working due to unintended consequences.
This is life on an Earth with an icing of software on it.
First up, here is something to look out for: NTP Client job can’t start after applying latest PTF (SJ11498). More information is available …
Read more -
IBM i PTF Guide, Volume 28, Number 34
October 5, 2026 Doug Bidwell
This week, you have a bunch of things to look at and ponder, as well as patches to Rational Developer for i and a bunch of security bulletins.
First, there is a Virtual Ethernet Connectivity Advisory for IBM i 7.6 TR2 and IBM i 7.5 TR8. IBM is investigating a network connectivity issue that can affect IBM i 7.6 TR2 and 7.5 TR8 systems using Virtual Ethernet adapter type 268C. Read this link for further details and do so before putting on the latest cume and groups.
And in the whoops column, there is also a note that Security PTF …
Read more -
IBM i PTF Guide, Volume 28, Number 33
September 28, 2026 Doug Bidwell
Welcome to the 33rd edition of 2026 of the IBM i PTF Guide. The good news is that there are lot fewer security vulnerabilities for the IBM i platform that we reported on last week. There are, once again, updates to IBM i 7.3 through IBM i 7.6 for various PTF groups.
We will start with the security issues and patches, and count them off to keep track of them.
1. Security Bulletin: Multiple Vulnerabilities in IBM Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to August 2026 CPU, which is available to …
Read more -
IBM i PTF Guide, Volume 28, Number 32
September 21, 2026 Doug Bidwell
Another week, and another bunch of security vulnerabilities for the IBM i platform. Plus a slew of stuff to update IBM i 7.3 through IBM i 7.6. Let us start with the security issues and patches, as we always do, and count them off to 11 so we can keep track of them.
1. Security Bulletin: IBM Db2 Mirror for i is vulnerable to Authentication Bypass by Spoofing [CVE-2026-18065], which you can read HERE. Affected Products and Versions:
IBM i Release 5770-DBM PTF Numbers 7.6 SJ11475 7.5 SJ11474 7.4 SJ11471
2. Security Bulletin: IBM i Is Affected By Multiple …
Read more -
IBM i PTF Guide, Volume 28, Number 31
September 14, 2026 Doug Bidwell
Big Blue is dumping a bunch of security vulnerabilities into your lap again, this time just ahead of the Labor Day holiday in the United States. We did not publish that week because we were on holiday, so we are playing catch up just like you now will be.
Let’s start with the Security Bulletin: IBM i is Affected By Improper Authorization and Authentication Vulnerabilities in DDM / DRDA [CVE-2026-18175, CVE-2026-18221], which you can find HERE. Affected Products and Versions:
IBM i Release 5770-SS1 PTF Number(s) 7.6 SJ11231 SJ11230 7.5 SJ11232 SJ11233 7.4 SJ11262 SJ11261 7.3 SJ11234 SJ11235
Security …
Read more -
IBM i PTF Guide, Volume 28, Number 30
August 31, 2026 Doug Bidwell
After the deluge of the past two weeks with so many security vulnerabilities and patches for the IBM i platform, you are going to get an easier week now. This may or may not have to do with the vacation schedules of IBMers who try to kill bugs, or it may have to do with the impending Labor Day holiday in the United States.
Who knows? Take the easy week while you have it. We are off next week for the holiday, and we will catch you up on the patches and vulnerabilities when we return on September 14.
Here …
Read more -
IBM i PTF Guide, Volume 28, Number 28: A Crazy Number of Security Vulnerability Patches
August 24, 2026 Doug Bidwell
It looks like 28 is not your lucky number if you are an IBM i shop. The reason why is that in Volume 28 and Number 28 of the IBM i PTF Guide, Big Blue has released a truly amazing number of security vulnerabilities and patches for the IBM i platform. We counted 40 security vulnerabilities, some of which are still awaiting patches, plus 22 High Impact/Pervasive (HIPER) patches for firmware on Power9, Power10, and Power11 systems. But a few items before we dive into that.
First: The System Planning Tool, version 6.26.223.0, is now available for download at …
Read more -
IBM i PTF Guide, Volume 28, Number 29
August 24, 2026 Doug Bidwell
IBM laid a lot of PTF work on you last week, and this week is also a heavy one. So brace yourself. There are six security vulnerabilities in the IBM i stack and several other issues that you should be aware of. Let’s start with the random issues and then do the security issues.
First, known issues (APARs) have been fixed for IBM i Access Client Solutions, ACS 1.1.9.15 (ACS11915), and here is the Klingon that describes it: DT498800 OSP-UNPRED MSGSSL007 – AN ERROR OCCURRED WITH AN SSL CERTIFICATE (JAVA.NIO.FILE.ATTRIBUTE.USERPRINCIPALNOTFOUNDEXCEPTION). I am not sure why they have to shout, but …
Read more -
IBM i PTF Guide, Volume 28, Number 27
August 10, 2026 Doug Bidwell
Welcome to this week. You have some issues with IBM i Access Client Services to deal with as well as a new security bulletin.
Let’s start with the ACS updates, which are rolled up into ACS 1.1.9.14 and which you can read more about at this link. All prior versions are vulnerable to:
- Arbitrary code execution on Windows when installed for all users due to publicly writeable directory and configuration file.
- Injection of rogue certificate authority due to publicly writeable truststore.
- Zip slip path traversal exploit when importing a configuration.
- Versions 1.1.8.3 through 1.1.9.13 are vulnerable to downloading unverified