• The Four Hundred
  • Subscribe
  • Media Kit
  • Contributors
  • About Us
  • Contact
Menu
  • The Four Hundred
  • Subscribe
  • Media Kit
  • Contributors
  • About Us
  • Contact
  • IBM i PTF Guide, Volume 26, Number 16

    April 22, 2024 Doug Bidwell

    It is an interesting time out there in PTF Land, so brace yourself. There are four security bulletins and two security warnings about potential denial of service vulnerabilities. Let’s do the security bulletins first and then the denial of service issues.

    First, we have Security Bulletin: IBM i Access Client Solutions is vulnerable to an infinite loop or out of memory error due to vulnerabilities in Apache Commons Compress, which you can find out more about at this link. The affected product(s) include IBM i Access Family versions 1.1.2 – 1.1.4, and versions 1.1.4.3 – 1.1.9.4. The issue can …

    Read more
  • IBM i PTF Guide, Volume 26, Number 1

    January 15, 2024 Doug Bidwell

    Well, there are two new security vulnerabilities in the IBM i stack, as we report elsewhere in this issue of The Four Hundred. And there is also an update to the System Planning Tool. Let’s do the latter first and the former last.

    The System Planning Tool, version 6.23.340, is now available for download at this link. The System Planning Tool is used by customers and business partners to build valid system configurations for Power Systems machines and their software stacks. You can look at the release notes for various SPT generations here.

    Now on to the …

    Read more
  • IBM i PTF Guide, Volume 25, Number 17

    April 24, 2023 Doug Bidwell

    There are a lot of PTFs that you need to be aware of this week, but before we get into them, there are two security vulnerabilities, one affecting the IBM i platform’s integrated Apache Web server and the other affecting the combination of IBM i Access Client Solutions combined with the IBM Toolbox for Java. Let’s get into the security bulletins to start.

    First, we have Security Bulletin: IBM HTTP Server (powered by Apache) for IBM i is vulnerable to HTTP response splitting and denial of service attacks (CVE-2022-37436, CVE-2006-20001), which you can find out more about at this link …

    Read more
  • IBM i PTF Guide, Volume 24, Number 47

    November 28, 2022 Doug Bidwell

    It is a busy, busy week for the IBM i PTF Guide, folks. So get some coffee. There are a bunch of security vulnerabilities that you need to take a look at, and there are also some recommended fixes that are not included in either the PTF groups or the cumulative PTF updates.

    First, there is Security Bulletin: IBM Transform Services for IBM i is vulnerable to denial of service, buffer overflow, and allowing attacker to obtain sensitive information due to multiple vulnerabilities, which you can read more about at this link. The fixes for this vulnerability can …

    Read more
  • IBM Clarifies Java Options Following Oracle License Crackdown

    April 3, 2019 Alex Woodie

    IBM i shops that are wondering how to maintain their Java environments following Oracle’s recent decision to restrict access to Java runtimes and development tools should pay close attention to some recommendations that IBM is making concerning Java, particularly how it impacts Access Client Solutions (ACS).

    Oracle is slated to ship a critical security update for Java Standard Edition (SE) 8 in a week and a half. But unless you have bought a commercial license for Java SE 8, your business won’t be getting that update, which could leave your systems vulnerable. That’s because in late 2018, Oracle made some …

    Read more
  • Latest IBM i TRs To Ship Next Month

    August 15, 2018 Alex Woodie

    IBM unveiled a pair of out-of-bound technology refreshes (TRs) for the IBM i operating system last week. In addition to supporting the new Power Systems E980 server, IBM i 7.3 TR5 and 7.2 TR9 bring a set of enhancements to the platform’s database, development tools, and the administrative interface.

    The IBM i installed base has grown accustomed to seeing operating system updates in the spring and the fall. This twice-a-year pattern has been with us, more or less, since IBM shifted to the TR approach several years ago. But IBM broke with that tradition last week when it announced that …

    Read more

Content archive

  • The Four Hundred
  • Four Hundred Stuff
  • Four Hundred Guru

Recent Posts

  • POWERUp 2025 –Your Source For IBM i 7.6 Information
  • Maxava Consulting Services Does More Than HA/DR Project Management – A Lot More
  • Guru: Creating An SQL Stored Procedure That Returns A Result Set
  • As I See It: At Any Cost
  • IBM i PTF Guide, Volume 27, Number 19
  • IBM Unveils Manzan, A New Open Source Event Monitor For IBM i
  • Say Goodbye To Downtime: Update Your Database Without Taking Your Business Offline
  • i-Rays Brings Observability To IBM i Performance Problems
  • Another Non-TR “Technology Refresh” Happens With IBM i TR6
  • IBM i PTF Guide, Volume 27, Number 18

Subscribe

To get news from IT Jungle sent to your inbox every week, subscribe to our newsletter.

Pages

  • About Us
  • Contact
  • Contributors
  • Four Hundred Monitor
  • IBM i PTF Guide
  • Media Kit
  • Subscribe

Search

Copyright © 2025 IT Jungle