• IBM i PTF Guide, Volume 28, Number 31

  September 14, 2026 Doug Bidwell

  Big Blue is dumping a bunch of security vulnerabilities into your lap again, this time just ahead of the Labor Day holiday in the United States. We did not publish that week because we were on holiday, so we are playing catch up just like you now will be.

  Let’s start with the Security Bulletin: IBM i is Affected By Improper Authorization and Authentication Vulnerabilities in DDM / DRDA [CVE-2026-18175, CVE-2026-18221], which you can find HERE. Affected Products and Versions:

  IBM i Release	5770-SS1 	PTF Number(s)
  7.6			        SJ11231
  			        SJ11230
  7.5			        SJ11232
  			        SJ11233
  7.4			        SJ11262
  			        SJ11261	
  7.3			        SJ11234
  			        SJ11235
  

  Security …

  Read more

• IBM i PTF Guide, Volume 28, Number 30

  August 31, 2026 Doug Bidwell

  After the deluge of the past two weeks with so many security vulnerabilities and patches for the IBM i platform, you are going to get an easier week now. This may or may not have to do with the vacation schedules of IBMers who try to kill bugs, or it may have to do with the impending Labor Day holiday in the United States.

  Who knows? Take the easy week while you have it. We are off next week for the holiday, and we will catch you up on the patches and vulnerabilities when we return on September 14.

  Here …

  Read more

• IBM i PTF Guide, Volume 28, Number 27

  August 10, 2026 Doug Bidwell

  Welcome to this week. You have some issues with IBM i Access Client Services to deal with as well as a new security bulletin.

  Let’s start with the ACS updates, which are rolled up into ACS 1.1.9.14 and which you can read more about at this link. All prior versions are vulnerable to:

  • Arbitrary code execution on Windows when installed for all users due to publicly writeable directory and configuration file.
  • Injection of rogue certificate authority due to publicly writeable truststore.
  • Zip slip path traversal exploit when importing a configuration.
  • Versions 1.1.8.3 through 1.1.9.13 are vulnerable to downloading unverified

  …

  Read more

• IBM i PTF Guide, Volume 28, Number 26

  August 3, 2026 Doug Bidwell

  It is a relatively quiet week in IBM i PTF Land, which is a bit of a relief after all the stuff that was going on last week with s slew of updates and patches as well as the release of the summer batch of Technology Refreshes for the IBM i platform.

  To begin with, the latest System Planning Tool, version 6.26.212.0, is now available for download at https://www.ibm.com/support/pages/node/632531. So have at it and have fun configuring up those new Power11 machines. . . .

  We also have a new security vulnerability in the IBM i stack. Check it …

  Read more

• IBM i PTF Guide, Volume 28, Number 25

  July 27, 2026 Doug Bidwell

  Brace yourself, there is a lot of IBM i Technology Refreshes, patches, security vulnerabilities, and other stuff you need to deal with this week.

  Let’s start by pointing you to the Technology Refreshes. You can get more detailed information on the IBM i 7.6 Technology Refresh 2 enhancements at https://www.ibm.com/support/pages/ibm-i-76-tr2-enhancements and on the IBM i 7.5 Technology Refresh 8 enhancements at https://www.ibm.com/support/pages/ibm-i-75-tr8-enhancements.

  There are also cumulative packages for the currently supported IBM i releases, as follows:

  • The latest cumulative package for 7.6 is C6190760
  • The latest cumulative package for 7.5 is C6197750
  • The latest cumulative package for 7.4 is

  …

  Read more

• IBM i PTF Guide, Volume 28, Number 21

  June 15, 2026 Doug Bidwell

  The flow of security vulnerabilities and PTF patches has been kind of spotty for the past several weeks. Which is good, because we were in transit across the United States. We have successfully relocated from California to Pennsylvania, and are settling in. We are almost unpacked, and my Network Operations Center, or NOC, is coming together. Thanks for your patience!

  Here is the rundown of PTF Groups by IBM i release level since we last published:

  PTF Groups 7.6:

  • HIPERs (High Impact/Pervasive)
  • Security
  • WebSphere Application Server V8.5
  • QMGTOOLS
  • Visual Studio Code for IBM i

  PTF Groups 7.5:

  • HIPERs (High Impact/Pervasive)

  …

  Read more

• IBM i PTF Guide, Volume 28, Number 20

  June 8, 2026 Doug Bidwell

  Welcome to this week, where we are getting closer and closer to both the beginning of summer and the AS/400’s 38^th birthday. There are a bunch of changes that Big Blue is making to various technical support services that customers and partners need to be aware of. And a bug in Java you need to contemplate.

  First, let’s start with the Java bug, which is Java 21 (64-bit) Applications Fail After Updating IBM i 7.5 Java Group PTF SF99955 to Levels 19 or 20, which you can read about here. The affected IBM i Java Group PTF Levels …

  Read more

• IBM i PTF Guide, Volume 28, Numbers 18 And 19

  June 1, 2026 Doug Bidwell

  Welcome back to the IBM i PTF Guide! After traversing across the country to our new abode, we are ready to get back in the saddle and rustle up all of the patches and security vulnerabilities for you.

  Let’s start, as we often do, with the security stuff. First, we have Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-ins (CVE-2026-8633, CVE-2026-8620), which you can read about at this link. The affected products for this are Web Server Plug-ins for WebSphere Application Server and …

  Read more

• IBM i PTF Guide, Volume 28, Number 17

  May 4, 2026 Doug Bidwell

  We are in the middle of a house move right now, so the IBM i PTF Guide is running a little bit behind as we box and tape and lift and stack. In this week’s issue, we have two security vulnerabilities right off the bat.

  First, we have Security Bulletin: IBM WebSphere Application Server Liberty is affected by identity spoofing (CVE-2026-3621), which you can find out more about at this link. The issue affects WebSphere Application Server – Liberty versions 17.0.0.3 through 26.0.

  Second, we have Security Bulletin: IBM i is Affected by Improper Handling of Special Elements and …

  Read more

• IBM i PTF Guide, Volume 28, Number 16

  April 20, 2026 Doug Bidwell

  April showers are supposed to bring May flowers, but this is definitely not true in a lot of the United States right now. Mayflowers can, and possibly might, still bring Pilgrims.

  Meanwhile, back in IBM i Land, there are a thousand lakes and rolling farmland with the occasional city far off in the distance, plus a remediation of a bug in the Java PTF Group and a security vulnerability that you have to take a gander at.

  Let’s start with the security vulnerability, which is outlined in Security Bulletin: IBM i is affected by a privilege escalation vulnerability in Web …

  Read more

Previous Articles