IBM i PTF Guide, Volume 26, Number 11
March 18, 2024 Doug Bidwell
This week in IBM i is sponsored by security vulnerabilities and precious little else. There are three security vulnerabilities that are new that you need to be aware of, so let’s get to it and let you get back to work.
First, we have Security Bulletin: IBM Db2 Web Query for i is vulnerable to a remote attacker bypassing security restrictions or to denial of service, which you can read more about here. The fixes are as follows:
IBM Db2 Web Query for i Release OS Release 5733WQX 2.4.0 7.4 and 7.5 SI85982 SI85987
Second, we have Security Bulletin: IBM HTTP Server (powered by Apache) for IBM i is vulnerable to a denial of service attack using HTTP/2 protocol. [CVE-2023-44487], which you can find out more about at this link.
IBM i Release 5770-DG1 PTF Number 7.5 SI86128 7.4 SI86127 7.3 SI86126
And third, we have Security Bulletin: IBM i is vulnerable to a privilege elevation due to an unqualified library call in Db2 for IBM i. [CVE-2024-22346], which is a much more serious thing as judged by the number of PTFs and the fact that Big Blue has patched IBM i 7.2 through IBM i 7.5. You can read more about this Db2 vulnerability at this link, and here is the rundown on patches to plug this hole:
IBM i Release PTF Numbers 7.5 SF99950 750 Db2 for IBM i Level 6 7.4 SF99704 740 Db2 for IBM i Level 27 7.3 SI85678, SI85716, SI85731, SI85769, SI85776, SI85779, SI85781, SI85789, SI85798, SI85800, SI85802, SI85804, SI85811 7.2 SI85679, SI85715, SI85732, SI85770, SI85775, SI85777, SI85780, SI85788, SI85797, SI85799, SI85801, SI85803, SI85810
Here is the rundown of PTF Groups by IBM i release level since we last published:
PTF Groups 7.5:
- Nothing
PTF Groups 7.4:
- Nothing
PTF Groups 7.3:
- Nothing
Tip O’ The Week: Latest IBM Pre-upgrade Verification (PRUV) tool for IBM i for MacOS or Windows is dated 2024-01-24. Find out more at this link.
New (or Updated) links added to the ‘Links’ tab in the guide this week:
- IPL: Causes of Abnormal IPLs, 638517
New (or Updated) links added to the ‘QMGtools’ tab in the guide this week:
- Nothing
New (or Updated) links added to the ‘ACS_NAV’ tab in the guide this week:
- Nothing
New (or Updated) links added to the ‘Prtr Links’ tab in the guide this week:
- None
New (or Updated) links Redbooks added this week:
- None
The Guide at a glance: There are new defectives this week (03/16/24). Here is the defective PTF rundown, which is the last defective for each release:
Defective PTF rundown (The last defective for each release):
Defect Defective APAR Fixing Date PTF PTF -------- -------- ------- ------------------------ 7.5 01/10/24 SI85576 SE81023 SI85663 (When available) 7.4 03/05/24 HF71521 MA50510 MF71656 (When available) 7.3 01/10/24 SI85576 SE81023 SI85663 (When available)
Be sure to access the link in the Guide for further details.
Below is the usual archive of the IBM i PTF Guide to help you work through the PTFs in chronological order:
March 16, 2024: Volume 26, Number 11
March 9, 2024: Volume 26, Number 10
March 2, 2024: Volume 26, Number 9
February 24, 2024: Volume 26, Number 8
February 17, 2024: Volume 26, Number 7
February 10, 2024: Volume 26, Number 6
February 3, 2024: Volume 26, Number 5
January 27, 2024: Volume 26, Number 4
January 20, 2024: Volume 26, Number 3
January 13, 2024: Volume 26, Number 2
January 6, 2024: Volume 26, Number 1
December 30, 2023: Volume 25, Number 53
December 30, 2023: Volume 25, Number 53
December 23, 2023: Volume 25, Number 52
December 16, 2023: Volume 25, Number 51
December 9, 2023: Volume 25, Number 50
December 2, 2023: Volume 25, Number 49
November 25, 2023: Volume 25, Number 48
November 18, 2023: Volume 25, Number 47
November 11, 2023: Volume 25, Number 46
November 4, 2023: Volume 25, Number 45
October 28, 2023: Volume 25, Number 44
October 21, 2023: Volume 25, Number 43
October 14, 2023: Volume 25, Number 42
October 7, 2023: Volume 25, Number 41
September 30, 2023: Volume 25, Number 40
September 23, 2023: Volume 25, Number 39
September 16, 2023: Volume 25, Number 38
September 9, 2023: Volume 25, Number 37
September 2, 2023: Volume 25, Number 36
August 26, 2023: Volume 25, Number 35
August 19, 2023: Volume 25, Number 34
August 12, 2023: Volume 25, Number 33
August 5, 2023: Volume 25, Number 32
July 29, 2023: Volume 25, Number 31
July 22, 2023: Volume 25, Number 30
July 15, 2023: Volume 25, Number 29
July 8, 2023: Volume 25, Number 28
July 1, 2023: Volume 25, Number 27
June 24, 2023: Volume 25, Number 26
June 17, 2023: Volume 25, Number 25
June 10, 2023: Volume 25, Number 24
June 3, 2023: Volume 25, Number 23
May 27, 2023: Volume 25, Number 22
May 20, 2023: Volume 25, Number 21
May 13, 2023: Volume 25, Number 20
May 6, 2023: Volume 25, Number 19
April 29, 2023: Volume 25, Number 18
April 22, 2023: Volume 25, Number 17
April 15, 2023: Volume 25, Number 16
April 8, 2023: Volume 25, Number 15
April 1, 2023: Volume 25, Number 14
March 25, 2023: Volume 25, Number 13
March 18, 2023: Volume 25, Number 12
March 11, 2023: Volume 25, Number 11
March 4, 2023: Volume 25, Number 10
February 25, 2023: Volume 25, Number 9
February 18, 2023: Volume 25, Number 8
February 13, 2023: Volume 25, Number 7
February 4, 2023: Volume 25, Number 6
January 28, 2023: Volume 25, Number 5
January 21, 2023: Volume 25, Number 4
January 14, 2023: Volume 25, Number 3
January 7, 2023: Volume 25, Number 2
January 1, 2023: Volume 25, Number 1
December 10, 2022: Volume 24, Number 50
December 3, 2022: Volume 24, Number 49
November 26, 2022: Volume 24, Number 48
November 19, 2022: Volume 24, Number 47
November 12, 2022: Volume 24, Number 46
November 5, 2022: Volume 24, Number 45
October 29, 2022: Volume 24, Number 44
October 22, 2022: Volume 24, Number 43
October 15, 2022: Volume 24, Number 42
October 8, 2022: Volume 24, Number 41
October 1, 2022: Volume 24, Number 40
September 24, 2022: Volume 24, Number 39
September 17, 2022: Volume 24, Number 38
September 10, 2022: Volume 24, Number 37
September 3, 2022: Volume 24, Number 36
August 27, 2022: Volume 24, Number 35
August 20, 2022: Volume 24, Number 34
August 13, 2022: Volume 24, Number 33
August 6, 2022: Volume 24, Number 32
July 30, 2022: Volume 24, Number 31
July 23, 2022: Volume 24, Number 30
July 16, 2022: Volume 24, Number 29
July 9, 2022: Volume 24, Number 28
June 25, 2022: Volume 24, Number 26
June 18, 2022: Volume 24, Number 25
June 11, 2022: Volume 24, Number 24
June 4, 2022: Volume 24, Number 23
May 28, 2022: Volume 24, Number 22
May 25, 2022: Volume 24, Number 21
May 14, 2022: Volume 24, Number 20
May 7, 2022: Volume 24, Number 19
April 30, 2022: Volume 24, Number 18
April 23, 2022: Volume 24, Number 17
April 16, 2022: Volume 24, Number 16
April 2, 2022: Volume 24, Number 14
March 26, 2022: Volume 24, Number 13
March 19, 2022: Volume 24, Number 12