• Critical PHP2Shell Security Vulns Evoke ‘Black October’

  October 26, 2026 Alex Woodie

  AI helped uncover a pair of critical security vulnerabilities in PHP that can be used to execute code, including on IBM i servers, sent administrators around the world scrambling to install patches on a large swath of the Internet’s Web servers before cybercriminals can get to them. The flaws, along with the rapid dissemination of AI-based exploit code, led some organizations to simply unplug their websites, earning the whole episode the name “Black October.”

  On October 21, patches for two critical security vulnerabilities in PHP were released. The two vulns, CVE-2026-109619 and CVE-2026-109618, collectively called PHP2Shell, each garnered a …

  Read more

• Surprise! It’s 2024 Fall TR Time for IBM i

  October 9, 2024 Alex Woodie

  IBM announced the Technology Refreshes (TRs) for IBM i version 7.5 and 7.4 yesterday, bringing a host of new capabilities to the proprietary operating system. As expected, the surprise update covers a range of IBM i facilities, including Db2, Navigator, ACS, PowerHA, and the development tools.

  Navigator gets several more enhancements with the new TRs, including: a new dashboard with software licensing information; Web-based administration of network facilities; support for monitoring of Java 11 and Java 17 jobs; enhancements to the Performance Data Investigator (PDI); and new options for working with audit journals, among other capabilities.

  IBM also includes the …

  Read more

• More Critical Security Vulns Reported In IBM i Components

  March 4, 2024 Alex Woodie

  The run of serious security vulnerabilities in IBM i components continues in early 2024, as IBM reported 10 new flaws exist across OpenSSH, the Apache Web Server, ISC, and Facsimile Support for IBM i in February and early March. All of the flaws impact IBM i 7.2 through 7.5 and all have been patched by IBM via PTFs.

  The most critical of the recent batch of security flaws exists in OpenSSH, the open source security utility for establishing encrypted communications between hosts and clients. As described by IBM in this February 23 security bulletin, the vulnerability (CVE-2023-51385) is caused …

  Read more

• What the Fall ’23 TRs Bring Navigator for i

  October 18, 2023 Alex Woodie

  The releases of IBM i that ship next month will bring enhancements to Navigator for i, the Web-based interface for accessing, monitoring, and managing IBM i. However, without some functions that have yet to arrive, the transition from the legacy Navigator tool will take more time.

  It’s hard to believe, but the new Navigator for i offering is only two years old. You will recall that the introduction of New Nav, as IBM called it, was the biggest news with the launch of IBM i TR 7.3 TR11 and 7.4 TR5 in the fall of 2021. Not only was the …

  Read more

• SBOMs Will Come to IBM i, Eventually

  June 7, 2023 Alex Woodie

  The Biden Administration’s push to make software bills of material (SBOMs) mandatory may not be moving ahead as quickly as hoped. But the SBOM requirement is still marching ahead for federal agencies and the vendors who supply them with software – running on IBM i or any other platform – with a major self-attestation deadline.

  The federal government’s SBOM push began back in 2018, when the National Telecommunications and Information Administration’s (NTIA), an agency within the Department of Commerce, spearheaded SBOM work with private-sector partners in an attempt to get better visibility into security vulnerabilities.

  The SBOM movement got a …

  Read more

• IBM Bolsters New Nav With Job Scheduler And More

  April 24, 2023 Alex Woodie

  IBM i professionals finally can access the Advanced Job Scheduler from Navigator for i as a result of the new Technology Refreshes (TRs) that IBM unveiled on April 11. But the job scheduler is just one of a number of new capabilities that IBM is bringing to the snazzy new Web-based interface for administrators and power users, which Big Blue would very, very much like for you to use.

  When IBM debuted the new Navigator for i in the fall of 2021 with release of IBM i 7.3 TR11 and 7.4 TR5, it figured it had the luxury of time …

  Read more

• IBM i PTF Guide, Volume 25, Number 17

  April 24, 2023 Doug Bidwell

  There are a lot of PTFs that you need to be aware of this week, but before we get into them, there are two security vulnerabilities, one affecting the IBM i platform’s integrated Apache Web server and the other affecting the combination of IBM i Access Client Solutions combined with the IBM Toolbox for Java. Let’s get into the security bulletins to start.

  First, we have Security Bulletin: IBM HTTP Server (powered by Apache) for IBM i is vulnerable to HTTP response splitting and denial of service attacks (CVE-2022-37436, CVE-2006-20001), which you can find out more about at this link …

  Read more

• Big Blue Refreshes The Technology for IBM i 7.4 And 7.5

  April 12, 2023 Alex Woodie

  As expected, IBM yesterday unveiled its Technology Refreshes (TRs) for IBM i, including version 7.5 TR2 and 7.4 TR8. These are relatively minor releases that bring incremental improvements to core areas of the platform, including IBM i Navigator, IWS, PowerHA, and RPG, among others. There’s nothing groundbreaking here, but the enhancements are undoubtedly just what many users need.

  We’re going to dive into each of the enhancements and do full coverage of them in the coming weeks here at IT Jungle. For today, we’re going to provide a broad overview of the new stuff that IBM just announced this …

  Read more

• IBM i PTF Guide, Volume 25, Number 3

  January 16, 2023 Doug Bidwell

  Last week was pretty quiet in PTF Land, as many of you might have expected. And considering that we were dealing with the Log4J vulnerability nonsense this time last year, we will take that as a bonus and just have Volume 24, Number 2, of the IBM i PTF Guide as a placeholder of sorts. This week is a bit more interesting, but nothing too big as yet. We have another 49 weeks in the year, so no hurry.

  Just a reminder to read and heed: IBM Electronic Fix Distribution / IBM Fix Central systems will end support for unencrypted …

  Read more

• Top 5 New IBM i Features to Check Out Now That Fall TRs Are GA

  December 7, 2022 Alex Woodie

  All of the new features that IBM unveiled earlier this fall with the Technology Refreshes for IBM i 7.4 and 7.5 (as well as another stealth “non-TR” TR for 7.3) are now generally available. Some of them shipped before December 2, but pretty much all of them are now GA. With so much enterprise computing goodness ready to download, what will you adopt first?

  We know it’s not Christmas yet. But with so many new features, it can be hard to figure out what to do first. While everybody has their own computing priorities, we have our own ideas for …

  Read more

Previous Articles