IBM i PTF Guide, Volume 25, Number 7

February 13, 2023 Doug Bidwell

This week brought more security vulnerabilities in the airspace above us, and also around the world with weird sightings in the United States, Canada, China, and Russia. Now we have security vulnerabilities in open source code that is part of the IBM i stack.

First, we have a Security Bulletin. IBM Java SDK and IBM Java Runtime for IBM i are vulnerable to bypassing security restrictions, denial of service attacks, and data integrity impacts due to multiple vulnerabilities, which you can find out more about at this link. There are fixes as shown below by IBM i release and by 5770-JV1 Group PTF Number and Level:

IBM i 7.5 – SF99955 Level 4
IBM i 7.4 – SF99665 Level 17
IBM i 7.3 – SF99725 Level 28
IBM i 7.2 – SF99716 Level 38

Second, we have Security Bulletin: IBM WebSphere Application Server Liberty is vulnerable to information disclosure due to Apache James MIME4J (CVE-2022-45787), which you can find out more about at this link. IBM WebSphere Application Server Liberty releases 21.0.0.12 through 23.0.0.1.

Now, here is the rundown of PTF Groups by IBM i release level since we last published:

PTF Groups 7.5:

HIPERs (High Impact/Pervasive)

PTF Groups 7.4:

HIPERs (High Impact/Pervasive)
WebSphere App Server V8.5
Fix list for IBM WebSphere Application Server Liberty 23.0.0.1

PTF Groups 7.3:

HIPERs (High Impact/Pervasive)
WebSphere App Server V8.5
Fix list for IBM WebSphere Application Server Liberty 23.0.0.1

PTF Groups 7.2:

Nothing new

New (or Updated) links added to the ‘Links’ tab in the guide this week:

Nadda

New (or Updated) links added to the ‘QMGtools’ tab in the guide this week:

Nothing

New (or Updated) links added to the ‘ACS_NAV’ tab in the guide this week:

Nil

New (or Updated) links added to the ‘Prtr Links’ tab in the guide this week:

Nadda

New (or Updated) links Redbooks added this week:

IBM Power S1014, S1022s, S1022, and S1024 Technical Overview and Introduction, see https://www.redbooks.ibm.com/abstracts/redp5675.html

Tips/Definitions: How long has it been since you did a SAVE 21?

The Guide at a glance: There are new defectives this week (02/11/23). Here is the defective PTF rundown, which is the last defective for each release:

	Defect		Defective	APAR	Fixing
	Date		PTF			PTF
	--------	--------	-------	-------
7.5	02/08/23	MF70682		MA50037	MF70684 (When available)
			MF70583
			MF70581
			MF70504
			MF70402
7.4	02/08/23	MF70686		MA50037	MF70688 (When available)
			MF70573
			MF70571
			MF70506
			MF70457
7.3	01/13/23	MH01946		MB04386	MH01947 (5733-910, When available)
			MH01945
7.2	12/08/21	SI77634		SE73420	SI78039	(Read the link in the guide!)

Be sure to access the link in the Guide for further details.

Below is the usual archive of the IBM i PTF Guide to help you work through the PTFs in chronological order:

February 13, 2023: Volume 25, Number 7

February 4, 2023: Volume 25, Number 6

January 28, 2023: Volume 25, Number 5

January 21, 2023: Volume 25, Number 4

January 14, 2023: Volume 25, Number 3

January 7, 2023: Volume 25, Number 2

January 1, 2023: Volume 25, Number 1

December 10, 2022: Volume 24, Number 50

December 3, 2022: Volume 24, Number 49

November 26, 2022: Volume 24, Number 48