• IBM i PTF Guide, Volume 27, Number 20

  May 19, 2025 Doug Bidwell

  Brace yourselves, everyone. There are seven security vulnerabilities that you have to pay attention to this week for the IBM i platform. Remember, as security guru Carol Woodbury is fond of saying: the IBM i platform is not the most secure platform in the world, but the most securable platform in the world. You must be ever-vigilant and keep it secure by patching holes and killing bugs.

  So, without further fuss, let’s dive in and take them in order.

  One is Security Bulletin: IBM i is vulnerable to a machine-in-the-middle attack due to mishandling error codes when verifying the host …

  Read more

• IBM i PTF Guide, Volume 27, Number 19

  May 12, 2025 Doug Bidwell

  Welcome to this week in IBM i Land. And we will start out by warning you to watch out for the defective PTFs listing this week.

  And now, to a security bulletin and a patches to fix it and a warning about a vulnerability that has not been patched.

  First the one that has been patched, which is in Security Bulletin: IBM i is vulnerable to an authentication and authorization attack due to incorrect validation processing in IBM i Netserver [CVE-2025-3218] and which you can see more about at this link. The IBM i PTF numbers for 5770-999 contain …

  Read more

• IBM i PTF Guide, Volume 27, Number 18

  May 5, 2025 Doug Bidwell

  Welcome to May, and we start out with PH65941, a notice from Big Blue that IBM WebSphere Application Server is vulnerable to server-side request forgery (CVE-2025-27907 CVSS 4.1). You can check out this link for more details. IBM says that the fix for this APAR is set to be included with WebSphere Application Server 8.5.5.28 and 9.0.5.24. We are not sure when that will happen.

  Here is the rundown of PTF Groups by IBM i release level since we last published:

  PTF Groups 7.6:

  • HIPERs – High Impact Pervasive
  • Group Security
  • Performance Tools
  • IBM HTTP Server for i
  • Content

  …

  Read more

• IBM i PTF Guide, Volume 27, Number 17

  April 28, 2025 Doug Bidwell

  Just a reminder that as part of the April 8 announcements, IBM Software Support content is changing to require entitlement check for software patches. See more at this link, but the gist of it is that IBM Software Support Troubleshooting, Question & Answer, and How To documents are changing to require entitlement. This means that you will be required to log on with an IBMid that has proper entitlement before viewing the entire document.

  Also this week, there is Security Bulletin: IBM WebSphere Application Server is vulnerable to server-side request forgery (CVE-2025-27907), which you can find out more about …

  Read more

• IBM i PTF Guide, Volume 27, Number 16

  April 23, 2025 Doug Bidwell

  This week, we bring you two security vulnerabilities and an import HIPER for firmware updates for Power Systems iron. Let’s start with the firmware.

  There is new microcode for Firmware 950 .. 950.D1, which you can find out more about at this link here, and new microcode for Firmware 950 .. 950.E0, which you can read all about at that link there. These are HIPERs and affect the following hardware:

  • Power System S914 Server (9009-41A)
  • Power System S922 Server (9009-22A)
  • Power System S924 Server (9009-42A)

  Now for the vulnerabilities. First, we have Security Bulletin: IBM i 7.6 is …

  Read more

• IBM i PTF Guide, Volume 27, Number 15

  April 14, 2025 Doug Bidwell

  There are so many announcements, and one of the big ones is ACS 1.1.9.8! We downloaded the new ACS and we have used this for a day, and so far there are no known issues at this time. We suggest treading lightly with this tool until after general availability on April 18. But it is looking good so far, though!

  There is also a new security vulnerability, which is Security Bulletin: IBM i is vulnerable to an out-of-bounds write in NTP services due to multiple vulnerabilities. More information available at this link. The issue can be addressed by applying …

  Read more

• IBM i PTF Guide, Volume 27, Number 14

  April 8, 2025 Doug Bidwell

  If you need a little something to wake you up, or a little night reading before you  drift off to sleep, check out the Known Issues And Fix Information database at Big Blue for the IBM platform, which you can see here. The IBM i PTF Guide is meant to save you from having to be familiar with this, of course. But it can’t hurt to be aware of this database.

  Here is the rundown of PTF Groups by IBM i release level since we last published:

  PTF Groups 7.5:

  • HIPERs (High Impact/Pervasive)
  • Java
  • Backup Recovery Solutions
  • Content Manager

  …

  Read more

• IBM i PTF Guide, Volume 27, Number 13

  April 2, 2025 Doug Bidwell

  Good day, good people of IBM i Land. This week we start out with two security vulnerabilities and a known issue to beware of the BLOB!

  Let’s start with the security vulnerabilities.

  First we have Security Bulletin: IBM WebSphere Application Server Liberty is vulnerable to a denial of service due to Netty (CVE-2025-25193), which you can find out more about at this link. IBM WebSphere Application Server Liberty versions 21.0.0.2 through 25.0.0.3 are affected.

  Second, we have Security Bulletin: IBM WebSphere Application Server Liberty is vulnerable to a denial of service due to Apache CXF (CVE-2025-23184), and here is …

  Read more

• IBM i PTF Guide, Volume 27, Number 12

  March 24, 2025 Doug Bidwell

  In this week’s IBM i PTF Guide, we contemplate the SF99741 patch and the following note from IBM:

  Recent change to contents – IBM Db2 Mirror for i (SF99668 Group PTF) has been removed from the order.

  Description:  This PTF group includes all PTF groups for the current IBM i release except the Cumulative PTF Package PTF group and WebSphere MQ PTF group. The PTF groups are included by listing them as related PTF groups. Use option 9 (Display related PTF groups) on the Work with PTF Groups (WRKPTFGRP) command to display the included PTF groups. Each time you order …

  Read more

• IBM i PTF Guide, Volume 27, Number 11

  March 17, 2025 Doug Bidwell

  Last week was a busy week for PTF patches, but not for security vulnerabilities. And this week is even quieter, but there are new defective PTF reports this week that you need to keep an eye on, as is usually the case in most weeks.

  Here is the rundown of PTF Groups by IBM i release level since we last published:

  PTF Groups 7.5:

  • None

  PTF Groups 7.4:

  • MQ for IBM i – v9.0.0/v9.1.0/v9.2.0/v9.3.0

  PTF Groups 7.3:

  • None

  Tip O’ The Week: We are thinking.

  New (or Updated) links added to the ‘Links’ tab in The Guide this week:

  • None

  …

  Read more

Previous Articles Next Articles