• IBM i PTF Guide, Volume 28, Number 27

  August 10, 2026 Doug Bidwell

  Welcome to this week. You have some issues with IBM i Access Client Services to deal with as well as a new security bulletin.

  Let’s start with the ACS updates, which are rolled up into ACS 1.1.9.14 and which you can read more about at this link. All prior versions are vulnerable to:

  • Arbitrary code execution on Windows when installed for all users due to publicly writeable directory and configuration file.
  • Injection of rogue certificate authority due to publicly writeable truststore.
  • Zip slip path traversal exploit when importing a configuration.
  • Versions 1.1.8.3 through 1.1.9.13 are vulnerable to downloading unverified

  …

  Read more

• IBM i PTF Guide, Volume 28, Number 26

  August 3, 2026 Doug Bidwell

  It is a relatively quiet week in IBM i PTF Land, which is a bit of a relief after all the stuff that was going on last week with s slew of updates and patches as well as the release of the summer batch of Technology Refreshes for the IBM i platform.

  To begin with, the latest System Planning Tool, version 6.26.212.0, is now available for download at https://www.ibm.com/support/pages/node/632531. So have at it and have fun configuring up those new Power11 machines. . . .

  We also have a new security vulnerability in the IBM i stack. Check it …

  Read more

• IBM i PTF Guide, Volume 28, Number 25

  July 27, 2026 Doug Bidwell

  Brace yourself, there is a lot of IBM i Technology Refreshes, patches, security vulnerabilities, and other stuff you need to deal with this week.

  Let’s start by pointing you to the Technology Refreshes. You can get more detailed information on the IBM i 7.6 Technology Refresh 2 enhancements at https://www.ibm.com/support/pages/ibm-i-76-tr2-enhancements and on the IBM i 7.5 Technology Refresh 8 enhancements at https://www.ibm.com/support/pages/ibm-i-75-tr8-enhancements.

  There are also cumulative packages for the currently supported IBM i releases, as follows:

  • The latest cumulative package for 7.6 is C6190760
  • The latest cumulative package for 7.5 is C6197750
  • The latest cumulative package for 7.4 is

  …

  Read more

• IBM i PTF Guide, Volume 28, Numbers 23 And 24

  July 20, 2026 Doug Bidwell

  It is Ketchup Week here at the IBM i PTF Guide once again, and Big Blue made it a little more interesting by announcing the Technology Refreshes for IBM i 7.6 and IBM i 7.5 last week.

  Let’s dive in, starting with Volume 28, Number 23, dated July 11 and beginning with two bugs and two security vulnerabilities you need to be aware of.

  First, we have Security Bulletin: Multiple vulnerabilities in IBM Rational Developer for i, which you can find out more about here. IBM strongly recommends addressing the vulnerability now by upgrading. This upgrade fixes 15+ CVE …

  Read more

• IBM i PTF Guide, Volume 28, Number 21

  June 15, 2026 Doug Bidwell

  The flow of security vulnerabilities and PTF patches has been kind of spotty for the past several weeks. Which is good, because we were in transit across the United States. We have successfully relocated from California to Pennsylvania, and are settling in. We are almost unpacked, and my Network Operations Center, or NOC, is coming together. Thanks for your patience!

  Here is the rundown of PTF Groups by IBM i release level since we last published:

  PTF Groups 7.6:

  • HIPERs (High Impact/Pervasive)
  • Security
  • WebSphere Application Server V8.5
  • QMGTOOLS
  • Visual Studio Code for IBM i

  PTF Groups 7.5:

  • HIPERs (High Impact/Pervasive)

  …

  Read more

• IBM i PTF Guide, Volume 28, Number 20

  June 8, 2026 Doug Bidwell

  Welcome to this week, where we are getting closer and closer to both the beginning of summer and the AS/400’s 38^th birthday. There are a bunch of changes that Big Blue is making to various technical support services that customers and partners need to be aware of. And a bug in Java you need to contemplate.

  First, let’s start with the Java bug, which is Java 21 (64-bit) Applications Fail After Updating IBM i 7.5 Java Group PTF SF99955 to Levels 19 or 20, which you can read about here. The affected IBM i Java Group PTF Levels …

  Read more

• IBM i PTF Guide, Volume 28, Numbers 18 And 19

  June 1, 2026 Doug Bidwell

  Welcome back to the IBM i PTF Guide! After traversing across the country to our new abode, we are ready to get back in the saddle and rustle up all of the patches and security vulnerabilities for you.

  Let’s start, as we often do, with the security stuff. First, we have Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-ins (CVE-2026-8633, CVE-2026-8620), which you can read about at this link. The affected products for this are Web Server Plug-ins for WebSphere Application Server and …

  Read more

• IBM i PTF Guide, Volume 28, Number 17

  May 4, 2026 Doug Bidwell

  We are in the middle of a house move right now, so the IBM i PTF Guide is running a little bit behind as we box and tape and lift and stack. In this week’s issue, we have two security vulnerabilities right off the bat.

  First, we have Security Bulletin: IBM WebSphere Application Server Liberty is affected by identity spoofing (CVE-2026-3621), which you can find out more about at this link. The issue affects WebSphere Application Server – Liberty versions 17.0.0.3 through 26.0.

  Second, we have Security Bulletin: IBM i is Affected by Improper Handling of Special Elements and …

  Read more

• IBM i PTF Guide, Volume 28, Number 16

  April 20, 2026 Doug Bidwell

  April showers are supposed to bring May flowers, but this is definitely not true in a lot of the United States right now. Mayflowers can, and possibly might, still bring Pilgrims.

  Meanwhile, back in IBM i Land, there are a thousand lakes and rolling farmland with the occasional city far off in the distance, plus a remediation of a bug in the Java PTF Group and a security vulnerability that you have to take a gander at.

  Let’s start with the security vulnerability, which is outlined in Security Bulletin: IBM i is affected by a privilege escalation vulnerability in Web …

  Read more

• IBM i PTF Guide, Volume 28, Number 15

  April 13, 2026 Doug Bidwell

  Well, this week’s security vulnerability looks pretty serious, so you best not skip this one. And as usual, it is happing with open source software embedded in the IBM i platform. The vulnerability is outlined in Security Bulletin: IBM i is Affected by Security Control Bypass and Uncontrolled Resource Consumption Vulnerabilities in IBM Java SDK and IBM Java Runtime [CVE-2026-21925, CVE-2026-21933, CVE-2026-21932, CVE-2026-21945].

  You can read more about it at this link. Here is the list of remediations and fixes for the Java hole, which are available for IBM i 7.4, IBM i 7.5, and IBM i 7.6:

  Remediation/Fixes, 

  …

  Read more

Previous Articles