IBM i PTF Guide, Volume 24, Number 25

June 22, 2022 Doug Bidwell

It is beginning to feel a bit a bit like Groundhog Day at the IBM i PTF Guide. Yet more security vulnerabilities are surfacing in the IBM i platform. While the number of new security bulletins for IBM i is nowhere near what we see with Windows Server and Linux platforms, it has become a constant game of Whack-a-mole. So get out your rubber mallet and get the Aspercreme ready to fight tendonitis. . . .

First, we have Security Bulletin: IBM WebSphere Application Server Liberty for IBM i is vulnerable to identity spoofing and port status query (CVE-2022-22475 CVE-2022-22393), which you can find out more about here. The IBM i PTF numbers contain the fixes for the vulnerabilities:

Lic Pgm Product		IBM i Release	PTF Number
5770-SS1		7.5		SI79987
			7.4		SI79988
			7.3		SI79990
			7.2		SI79991

The we have Security Bulletin: IBM i is vulnerable to denial of service and cache poisoning attacks due to flaws in ISC BIND (CVE-2022-0396, CVE-2021-25220), which you can find out more about at this link. The IBM i PTF numbers contain the fixes for the vulnerabilities as follows:

Lic Pgm Product		IBM i Release	PTF Number
5770-SS1		7.5		SI79935	
			7.4		SI79936	
			7.3		SI80013	
			7.2		SI79976

Here is the rundown of PTF Groups by IBM i release level since we last published, with IBM i 7.5 added in since it has been shipping for several weeks now:

PTF Groups 7.5:

HIPERs (High Impact/Pervasive)
Security
QMGTOOLS

PTF Groups 7.4:

HIPERs (High Impact/Pervasive)
Security
QMGTOOLS

PTF Groups 7.3:

HIPERs (High Impact/Pervasive)
Security
QMGTOOLS

PTF Groups 7.2:

HIPERs (High Impact/Pervasive)
Security
QMGTOOLS

PTF Groups 7.1:

Nothing here, of course

New (or Updated) links added to the ‘Links’ tab in the guide this week:

Nadda

New (or Updated) links added to the ‘QMGtools’ tab in the guide this week:

New (or Updated) links added to the ‘ACS_NAV’ tab in the guide this week:

Nothing here.

Tips/Definitions: It is hot around the Northern Hemisphere. Stay hydrated, don’t overdo it.

The Guide at a glance: There are no new defectives this week (06/18/22). Here is the defective PTF rundown, which is the last defective for each release:

	Defect		Defective	APAR	Fixing
	Date		PTF			PTF
	--------	--------	-------	-------
7.5	06/03/22	SI78809		SE78003	SI80094 (When available)
7.4	06/03/22	SI79097		SE78003	SI80093 (When available)
7.3	06/03/22	SI79186		SE78003	SI80092 (When available)
7.2	12/08/21	SI77634		SE73420	SI78039	(Read the link in the guide!)
7.1	07/29/19	SI69653		SE71807	SI70603 (5733SC1, OpenSSH, available!)

Be sure to access the link in the Guide for further details.

Below is the usual archive of the IBM i PTF Guide to help you work through the PTFs in chronological order:

June 18, 2022: Volume 24, Number 25

June 11, 2022: Volume 24, Number 24

June 4, 2022: Volume 24, Number 23

May 28, 2022: Volume 24, Number 22

May 25, 2022: Volume 24, Number 21

May 14, 2022: Volume 24, Number 20

May 7, 2022: Volume 24, Number 19

April 30, 2022: Volume 24, Number 18

April 23, 2022: Volume 24, Number 17

April 16, 2022: Volume 24, Number 16