IBM i PTF Guide, Volume 25, Number 50

December 11, 2023 Doug Bidwell

Well, there are two new security vulnerabilities in the IBM i stack, as we report elsewhere in this issue of The Four Hundred. And there is also an update to the System Planning Tool. Let’s do the latter first and the former last.

The System Planning Tool, version 6.23.340, is now available for download at this link. The System Planning Tool is used by customers and business partners to build valid system configurations for Power Systems machines and their software stacks. You can look at the release notes for various SPT generations here.

Now on to the two security vulnerabilities.

First, we have Security Bulletin: IBM i Access Client Solutions is vulnerable to remote code execution and failing to secure passwords due to multiple vulnerabilities, which you can read about here. To paraphrase what IBM is saying – and this is important – all versions of ACS prior to this one have vulnerabilities! The products affected are:

Affected Product(s)		Version(s)
IBM i Access Family		1.1.2 - 1.1.4, 1.1.4.3 - 1.1.9.3

The issue can be fixed by upgrading to version 1.1.9.4 or later. So if you are thinking IBM is going to patch the older ACS releases, apparently not.

Second, we have Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is vulnerable to multiple vulnerabilities, about which you can find more at this link here. The affected products are:

Affected Product(s)					Version(s)
IBM i Modernization Engine for Lifecycle Integration	1.0.0 - 1.4.4

Here is the rundown of PTF Groups by IBM i release level since we last published:

PTF Groups 7.5:

Fix list for IBM WebSphere Application Server Liberty
IBM i Access Client Solutions V1.1.9.4
MustGather: How To Obtain and Install QMGTOOLS

PTF Groups 7.4:

Fix list for IBM WebSphere Application Server Liberty
IBM i Access Client Solutions V1.1.9.4
MustGather: How To Obtain and Install QMGTOOLS

PTF Groups 7.3:

Fix list for IBM WebSphere Application Server Liberty
IBM i Access Client Solutions V1.1.9.4
MustGather: How To Obtain and Install QMGTOOLS

Tip O’ The Week: Have the best holiday Season imaginable! And remember: It is never too late to start you capacity planning for the new year. If your system is off maintenance, either for the hardware or systems software or both, ask for help from your local IBM i business partner and if you don’t have one, reach out to us and we can help you get on the path to being current and keeping current to protect those valuable IBM i application and database assets that your company depends upon.

New (or Updated) links added to the ‘Links’ tab in the guide this week:

None

New (or Updated) links added to the ‘QMGtools’ tab in the guide this week:

None

New (or Updated) links added to the ‘ACS_NAV’ tab in the guide this week:

None

New (or Updated) links added to the ‘Prtr Links’ tab in the guide this week:

None

New (or Updated) links Redbooks added this week:

None

The Guide at a glance: There are new defectives this week (12/09/23). Here is the defective PTF rundown, which is the last defective for each release:

	Defect		Defective	APAR	Fixing
	Date		PTF			PTF
	--------	--------	-------	------------------------	
7.5	10/06/23	SI84569		SE80598	SI84813 (When available)
7.4	10/06/23	SI84583		SE80598	SI84817 (When available)
7.3	10/06/23	SI84586		SE80598	SI84842 (When available)

Be sure to access the link in the Guide for further details.

Below is the usual archive of the IBM i PTF Guide to help you work through the PTFs in chronological order:

December 9, 2023: Volume 25, Number 50

December 2, 2023: Volume 25, Number 49

November 25, 2023: Volume 25, Number 48

November 18, 2023: Volume 25, Number 47

November 11, 2023: Volume 25, Number 46

November 4, 2023: Volume 25, Number 45

October 28, 2023: Volume 25, Number 44

October 21, 2023: Volume 25, Number 43

October 14, 2023: Volume 25, Number 42

October 7, 2023: Volume 25, Number 41