IBM i PTF Guide, Volume 28, Number 38

November 2, 2026 Doug Bidwell

Welcome to this week, where the IBM i platform has two issues you need to be aware of as well as a security bulletin. Yup, we said “a” there, meaning only one, meaning it looks like people were out trick or treating instead of bug hunting. Which is fine.

The first issue is related to Access Client Services. IBM has put out a note that warns: “Versions 1.1.9.1 through 1.1.9.16 are vulnerable to memory exhaustion via a malicious SFTP server sending unsolicited replies. The SFTP client (Apache MINA SSHD) did not verify that incoming replies corresponded to previously sent requests …