IBM i PTF Guide, Volume 24, Number 16

April 20, 2022 Doug Bidwell

It is a new week, and there are two new security vulnerabilities in the IBM i platform. First, there is Security Bulletin: IBM WebSphere Application Server Liberty for IBM i is vulnerable to spoofing and clickjacking attacks due to swagger-ui (CVE-2018-25031, CVE-2021-46708), which you can read more about here. The IBM i PTF numbers containing the fix for the CVEs:

IBM i Release 5770-SS1 PTF Number PTF Download Link

7.4 SI78971 https://www.ibm.com/support/pages/ptf/SI78971

7.3 SI78972 https://www.ibm.com/support/pages/ptf/SI78972

7.2 SI78973 https://www.ibm.com/support/pages/ptf/SI78973

Then there is Security Bulletin: OpenSSL for IBM i is vulnerable to a denial of service due to a flaw in the BN_mod_sqrt() function (CVE-2022-0778), which you can find out more about at this link.

BM i Release 5733-SC1 PTF Number PTF Download Link

7.4, 7.3, 7.2 SI79260 Fix Central

There is a new version of ACS. See IBM i Access — ACS Updates, which tells you what is new in Version 1.1.9.0, build date April 2022 at this link.

Here is the rundown of PTF Groups by IBM i release level since we last published:

PTF Groups 7.4:

High Availability for IBM i
Java
MQ for IBM i – v9.0.0/v9.1.0/V9.2.0
Db2 Web Query for i V2.3.0
DB2 Web Query for i V2.2.1
Recommended updates for WebSphere Application Server — Fix list for IBM WebSphere Application Server Liberty
IBM i Access Client Solutions V1.1.9.0
QMGTOOLS

PTF Groups 7.3:

High Availability for IBM i
Java
MQ for IBM i – v9.0.0/v9.1.0/V9.2.0
Db2 Web Query for i V2.3.0
DB2 Web Query for i V2.2.1
Recommended updates for WebSphere Application Server — Fix list for IBM WebSphere Application Server Liberty
IBM i Access Client Solutions V1.1.9.0
QMGTOOLS

PTF Groups 7.2:

High Availability for IBM i
Java
DB2 Web Query for i V2.2.1
IBM i Access Client Solutions V1.1.9.0
QMGTOOLS

PTF Groups 7.1:

HIPERs (High Impact/Pervasive)
Security
Db2 Web Query for i V2.2.1
IBM i Access Client Solutions V1.1.9.0

New (or Updated) links added to the ‘Links’ tab in the guide this week:

System/RFE: RFE (Request for Enhancement) for IBM i has moved to IBM Aha!
ODBC: Determining the IBM i Access ODBC Driver Version 638593

New (or Updated) links added to the ‘QMGtools’ tab in the guide this week:

New (or Updated) links added to the ‘ACS_NAV’ tab in the guide this week:

ODBC Driver for IBM i Access Client Solutions: 687455

Tips/Definitions: No time for this right now.

The Guide at a glance: There are no new defectives this week (04/16/22). Here is the defective PTF rundown, which is the last defective for each release:

	Defect		Defective	APAR	Fixing
	Date		PTF			PTF
	--------	--------	-------	-------
7.4	2/16/22		MF69373		MA49558	MF69650	(Read the link in the guide!)
			MF69241
7.3	2/16/22		SI78508		SE77164	SI78674	(Read the link in the guide!)
7.2	12/08/21	SI77634		SE73420	SI78039	(Read the link in the guide!)
7.1	07/29/19	SI69653		SE71807	SI70603 (5733SC1, OpenSSH, available!)

Be sure to access the link in the Guide for further details.

Below is the usual archive of the IBM i PTF Guide to help you work through the PTFs in chronological order:

April 16, 2022: Volume 24, Number 16

April 2, 2022: Volume 24, Number 14

March 26, 2022: Volume 24, Number 13

March 19, 2022: Volume 24, Number 12

March 12, 2022: Volume 24, Number 11

March 5, 2022: Volume 24, Number 10

February 26, 2022: Volume 24, Number 9

February 19, 2022: Volume 24, Number 8

February 12, 2022: Volume 24, Number 7

February 5, 2022: Volume 24, Number 6