• IBM i PTF Guide, Volume 28, Number 14

  April 6, 2026 Doug Bidwell

  Happy Easter, everyone, and may the spring renew everyone. There’s only one security vulnerability this week, so let’s get to it.

  That would be Security Bulletin: IBM i is Affected by Use of Hard-coded Cryptographic Key, Cross-site Scripting, and Prototype Pollution Vulnerabilities in IBM WebSphere Application Server Liberty [CVE-2025-14923, CVE-2025-12635, CVE-2026-29063], which you can find out more about here. The affected releases and their PTFs are as follows:

  IBM i Release	5770-SS1 Option 3 	PTF Number(s)
  7.6					SJ09013	
  7.5					SJ09014
  7.4					SJ09015 
  7.3					SJ09016	
  7.2					SJ09017
  

  Here is the rundown of PTF Groups by IBM i release level since …

  Read more

• IBM i PTF Guide, Volume 28, Number 13

  March 30, 2026 Doug Bidwell

  Welcome to Monday and a whole new batch of security vulnerabilities with the IBM i platform, all thanks to the open source variant of the venerable Apache Web server embedded in the WebSphere Application Server Liberty edition.

  That’s the good thing about open source software: When there are problems, people find them and they fix them. The bad thing is that a lot of really smart people are constantly looking at the code for issues, and they are always find them. Think of it as Continuous Vulnerability/Continuous Patching, I guess.

  Let’s go through them, and all of the vulnerabilities affect …

  Read more

• IBM i PTF Guide, Volume 28, Number 12

  March 23, 2026 Doug Bidwell

  Happy Spring everyone! We are well into Daylight Savings Time and have longer – meaning brighter – evenings, so it is hard not to be optimistic about the spring, summer, and fall ahead. This week, we have one notice and two security vulnerabilities to start with. Let’s get to it.

  Let’s start with the OSP-Distribution requisite for Technology Refresh PTF, which you can find out more about at this link. The PTFs are as follows:

  • For IBM i 7.4: FI0138771, which is PTF SJ09037
  • For IBM i 7.5: FI0138772, which is PTF SJ09038

  Now, for the security vulnerabilities. First, …

  Read more

• IBM i PTF Guide, Volume 28, Number 11

  March 16, 2026 Doug Bidwell

  The Power11 processors and their systems have in the field since last summer, and for those of you fortunate enough to have a server with that “new car smell,” now is the time to learn about the new processor and systems and figure out how to optimize performance on these machines and take advantage of their special features.

  To that end, IBM has put out a new best practices guide called IBM Power11 Performance Optimization For IBM i to help you begin the processor of tuning up your new machine. You can download it here.

  In addition to this, …

  Read more

• IBM i PTF Guide, Volume 28, Number 10

  March 9, 2026 Doug Bidwell

  It was a super quiet week in IBM i Land this week. Seriously. Like, we have never seen it so quiet. No security vulnerabilities, no new PTF groups issued for any of the five supported IBM i releases. It has been very, very quiet indeed. So that probably means you need to brace yourself for a bunch of stuff in the next couple of weeks.

  We did want to point out that there are massive price changes coming for Power Systems main memory, which were announced to business partners on March 2 and which take effect on April. (This is …

  Read more

• IBM i PTF Guide, Volume 28, Number 9

  March 2, 2026 Doug Bidwell

  Welcome to March. You have five security vulnerabilities to take care of. The good news is that there is not a lot of other PTF stuff you have to worry about if you are on IBM i 7.3 through IBM i 7.6. There are Group HIPER and Group Security updates for IBM i 7.2, which is still under extended support.

  Let’s go through the security vulnerabilities to start, as we usually do.

  First, we have Security Bulletin: IBM Rational Developer for i is affected by a memory exhaustion loop (CVE-2024-4068), which you can read about here. (And for …

  Read more

• IBM i PTF Guide, Volume 28, Number 8

  February 23, 2026 Doug Bidwell

  This week, we start with three security vulnerabilities and a warning about media issues when you put your external LTO drives too close to the running Power Systems iron in your rack.

  Let’s start with the vulnerabilities, as we often do.

  First, we have Security Bulletin: IBM i is affected by denial of service vulnerabilities in Db2 JSON Store Technology Preview [CVE-2025-66453], which you can read more about here. The fixes for this vulnerability are as follows:

  IBM i Release	PTF Number(s)
  7.4	SJ08547
  7.3	SJ08546
  7.2	SJ08545
  

  Second, we have IBM i Java Development Kit 8 64 & …

  Read more

• IBM i PTF Guide, Volume 28, Number 7

  February 16, 2026 Doug Bidwell

  First, we wish you all a happy belated Valentine’s Day, which we were thinking about because we put the IBM i PTF Guide together on Saturday.

  Second, there is a new System Planning Tool, Version 6.26.041.0, which is available for download at this link. We also note that the link to the IBM Systems Workload Estimator and the link to the IBM Systems Energy Estimator no longer work and just take you to a generic IT Infrastructure page that is, how shall we say?, not particularly useful.

  And third, we have Security Bulletin: IBM WebSphere Application Server could provide …

  Read more

• IBM i PTF Guide, Volume 28, Number 6

  February 9, 2026 Doug Bidwell

  Here is something handy if you are contemplating moving to IBM i 7.6: A comparison of IBM i 7.5 to IBM i 7.6, from IBM Support and available at this link. If you are moving from releases earlier than IBM i 7.5 to IBM i 7.6, then you should definitely take a gander at this as well. We have added a link in the Guide tab “Links” for this should you need to get to it later and to keep it top of mind.

  Here is the rundown of PTF Groups by IBM i release level since we last …

  Read more

• IBM i PTF Guide, Volume 28, Number 5

  February 2, 2026 Doug Bidwell

  This week there’s another winter storm whacking the eastern half of the United States, and we are also putting together the IBM i PTF Guide a little early in case some of the people working on The Four Hundred lose power. If all goes well, and you are reading this on Monday, then we got it all done before anything bad happened.

  This week, we start off with two security vulnerabilities.

  First, we have Security Bulletin: Multiple Vulnerabilities in IBM Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the January 2026 CPU, which you …

  Read more

Previous Articles Next Articles