IBM i PTF Guide, Volume 26, Number 22

June 19, 2024 Doug Bidwell

Right off the bat we have recommended fixed for the IBM Cryptographic Services/DCM/Cryptographic Co-processor for both IBM i 7.4 and IBM i 7.5. You can check out this link for more information.

We also have two security vulnerabilities that you need to be aware of.

First, we have Security Bulletin: IBM WebSphere Application Server Liberty for IBM i is vulnerable to weak TLS security, cross-site scripting, denial of service, and a server-side request forgery due to multiple vulnerabilities. You can find out more about this at this particular link. The affected releases and their PTFs are as follows:

IBM i Release	5770-SS1 Option 3	PTF Numbers
7.5				SJ00187
7.4				SJ00190
7.3				SJ00188
7.2				SJ00189

Second, we have Security Bulletin: IBM i Service Tools Server (SST) is vulnerable to SST user profile enumeration [CVE-2024-31878], which you can find out more about here.

IBM i Release	5770-999		PTF Numbers
7.5				MJ00301
7.4				MJ00300
7.3				MJ00299
7.2				MJ00286

Here is the rundown of PTF Groups by IBM i release level since we last published:

PTF Groups 7.5:

MustGather: How To Obtain and Install QMGTOOLS

PTF Groups 7.4:

MustGather: How To Obtain and Install QMGTOOLS

PTF Groups 7.3:

MustGather: How To Obtain and Install QMGTOOLS

Tip O’ The Week: IBM Power Facts and Features: https://www.ibm.com/downloads/cas/YXJOGJRK.

New (or Updated) links added to the ‘Links’ tab in the guide this week:

SAV/RST: Saving changed objects in directories, N/A
SAV/RST: Saving Changed Objects in the Integrated File System, 636915
Content Manager: Secure Sockets Layer (SSL) setup instructions for use with Content Manager OnDemand for i, 595101

New (or Updated) links added to the ‘QMGtools’ tab in the guide this week:

None

New (or Updated) links added to the ‘ACS_NAV’ tab in the guide this week:

None

New (or Updated) links added to the ‘Prtr Links’ tab in the guide this week:

None

New (or Updated) links Redbooks added this week:

None

New (or Updated) “Stuff” added to REF tab in the guide this week:

None

The Guide at a glance: There are new defectives this week (06/08/24). Here is the defective PTF rundown, which is the last defective for each release:

	Defect		Defective	APAR		Fixing
	Date		PTF				PTF
	--------	--------	-------	-	-----------------------	
7.5	04/23/24		SI85693		DT378886	SJ00269 (When available)
			SI84240
7.4	04/23/24		SI85692		DT378886	SJ00268 (When available)
			SI84239
7.3	01/10/24		SI85576		SE81023	SI85663 (When available)

Be sure to access the link in the Guide for further details.

Below is the usual archive of the IBM i PTF Guide to help you work through the PTFs in chronological order:

June 8, 2024: Volume 26, Number 22

June 1, 2024: Volume 26, Number 21

May 25, 2024: Volume 26, Number 20

May 18, 2024: Volume 26, Number 19

May 11, 2024: Volume 26, Number 18

May 4, 2024: Volume 26, Number 17

April 20, 2024: Volume 26, Number 16

April 13, 2024: Volume 26, Number 15

April 6, 2024: Volume 26, Number 14

March 30, 2024: Volume 26, Number 13