• Exploring Security Applications for IBM i OLAP

  July 13, 2022 Alex Woodie

  The IBM i platform is typically thought of as a transactional server, and it does that job very well. But it also has solid analytical capabilities, thanks in large part to new OLAP features added many years ago with IBM i 7.3. Now the platform’s database guru, Scott Forstie, is looking for ways to promote greater use of these OLAP capabilities, and security is emerging as a top application.

  Sometimes it takes a while to figure out what a good thing you have. This appears to be the case with IBM i 7.3, which launched way back in 2016 and …

  Read more

• More IBM i Security Flaws Revealed

  July 13, 2022 Alex Woodie

  The summer slowdown might have started in your particular business, but things are just getting warmed up IBM security researchers, who disclosed a series of new vulnerabilities across IBM i products over the past couple of weeks, including IBM i Merlin, WAS Liberty, OpenSSL, the Digital Certificate Manager, and Zlib.

  On June 27, IBM disclosed that the collection of open source and proprietary tools and technology it’s brought together as IBM i Modernization Engine for Lifecycle Integration (Merlin) suffers from no fewer than 16 separate security flaws.

  Among the most series of these flaws is a CVE-2022-22965, a data binding …

  Read more

• IBM i PTF Guide, Volume 24, Number 22

  June 1, 2022 Doug Bidwell

  Well, there is a lot of stuff going on with IBM i PTFs this week, with cumulative patch rollups, or Cumes as we call them, Technology Refreshes, and other goodies. Specifically, IBM i 7.3 and IBM i 7.2 have Cume rollups, as well as their respective TR6 and TR12 updates of new functionality.

  There are also two new security vulnerabilities. First, there is Security Bulletin: IBM Navigator for i is vulnerable to an SQL injection (CVE-2022-22495), which you can read about at this link. The patches for this vulnerability are as follows:

  IBM i Release	HTTP Server for i 

  …

  Read more

• IBM i 7.3 TR12: The Non-TR Tech Refresh

  May 16, 2022 Alex Woodie

  The launches of IBM i version 7.5 and 7.4 Technology Refresh 6 a few of weeks ago garnered a lot of attention from the IBM i community, thanks to the new capabilities they bring to the platform. But IBM is also bringing some of the same enhancements to IBM i 7.3. And while it is bundling the PTFs that deliver the enhancements for version 7.3 in a package labeled TR12, it is not an official TR, IBM officials say.

  IBM plans to release IBM i 7.3 TR12 on May 24, according to IBM i TR page for version 7.3 on …

  Read more

• Database And Developer Enhancements In IBM i 7.5 And 7.4 TR6

  May 9, 2022 Alex Woodie

  IBM has made a number of enhancements to the Db2 for i database with the launch of IBM i 7.5, which becomes generally available tomorrow. It also is bringing new features for developers, including changes to Integrated Web Services (IWS), which will improve REST integration.

  Most of the new features added to Db2 for i are only available in IBM i 7.5, which will give users a reason to adopt it. However, there are a few enhancements added in IBM i 7.4 Technology Release 6, which doesn’t ship until May 24.

  As we previously reported, IBM i 7.5 expands …

  Read more

• IBM Accelerates New Nav Development Following Log4j Issue

  February 23, 2022 Alex Woodie

  When IBM launched the new version of Navigator for i last fall, executives figured they had time to fill out the new product’s functionality as customers gradually adopted it. But those plans were upended when Log4j rendered the old version vulnerable to a serious security flaw, and now IBM finds itself needing to accelerate the build out of New Nav while simultaneously ramping up promotion and outreach.

  IBM launched the new version of Navigator for i back in September 2021, when it announced the latest Technology Refreshes (TRs) for IBM i 7.3 and 7.4. New Nav, as the product …

  Read more

• The State Of The IBM i Base 2022, Part Two: Upgrade Plans

  February 23, 2022 Timothy Prickett Morgan

  It is always good for the IBM i ecosystem when there are new machines on the horizon with new processors, a lot more performance, and much better bang for the buck. This is, in many ways, what has drive the System/3X, AS/400, and IBM i midrange business forward for more than four decades.

  But you have to admit, the kind of excitement that we used to have in the early years of the AS/400, when performance needs often outstripped what Big Blue – and indeed, any system supplier – could afford, is not prevalent in the IBM i base today. …

  Read more

• The State Of The IBM i Base 2022, Part One: The Operating System

  February 14, 2022 Timothy Prickett Morgan

  You probably already figured this out, but we love data here at The Four Hundred, and we are always particularly keen on any data that helps us to understand the IBM i ecosystem better. And that is why we always look forward to the annual IBM i Marketplace Survey report that comes out in January each year from HelpSystems, and because we are thankful for the data they gather, we help push the survey every year and also participate in the webinar for it as well as a donation to the IBM i community.

  IT Jungle co-editor Alex Woodie …

  Read more

• Some Good Advice About Log4j Mitigation Gotchas

  January 24, 2022 Timothy Prickett Morgan

  The Apache Log4j logging utility written in Java and available since the end of the Dot Com Boom in early 2001, has been installed far and wide into many systems and systems software packages in the more than two decades it has been available. And that is why the zero-day security vulnerability discovered by Chinese computing giant Alibaba on November 24 last year and revealed on December 9 has caused so much concern.

  Log4j is everywhere and that means the Log4Shell vulnerability that Alibaba described makes it particularly scary. But before we get into some of the mitigation advice that …

  Read more

• No Plan To Support New Nav on Older IBM i Releases, IBM Says

  January 19, 2022 Alex Woodie

  IBM has no plans to support the new version of Navigator for i (i.e., “New Nav”) with older releases of the operating system, despite the existence of the severe Log4j security flaw in the heritage version of Navigator (“Old Nav”). The early, unexpected death of Old Nav also will hasten the adoption of New Nav for customers on current releases, and New Nav will become the default version with an update in March, IBM says.

  Earlier this month, IBM announced that no security patches would be forthcoming for Old Nav, which uses the Log4j code at the heart of a …

  Read more

Previous Articles Next Articles