IBM i PTF Guide, Volume 24, Number 49

IBM i PTF Guide, Volume 24, Number 49

December 7, 2022

Doug Bidwell

It is another one of those weeks when there are a slew of security vulnerabilities to attend to. Four that we know of, to be precise.

First, there is Security Bulletin: IBM WebSphere Application Server Liberty is vulnerable to a denial of service due to Google protobuf-java (CVE-2022-3171, CVE-2022-3509), which you can read more about at this link. This vulnerability affects IBM WebSphere Application Server Liberty versions 21.0.0.2 through 22.0.0.12.

Second, there is Security Bulletin: ISC BIND on IBM i is vulnerable to denial of service due to memory leaks and a flaw in resolver code (CVE-2022-2795, CVE-2022-38177, CVE-2022-38178), which you can find out more about here. The IBM i PTF numbers contain the fix for the vulnerabilities:

IBM i Release 5770-SS1 PTF Number
7.5 SI81706
7.4 SI81707
7.3 SI81708
7.2 SI81709

Third, there is Security Bulletin: Digital Certificate Manager for IBM i is vulnerable to cross-site scripting (CVE-2022-34358), which you can see more about here. The IBM i PTF numbers contain the fix for the vulnerability:

IBM i Release 5770-SS1 PTF Number
7.5 SI80415
7.4 SI80414
7.3 SI80413
7.2 SI80412

<pre class=”code”>

Additional URLs were identified that can be used for a cross-site scripting attack resulting in superseded PTFs. The IBM i superseding PTF numbers contain the fix for the vulnerability:

IBM i Release 5770-SS1 PTF Number
7.5 SI81854
7.4 SI81853
7.3 SI81852
7.2 SI81845

It is recommended that the heritage version of Digital Certificate Manager not be used. PTFs are available that disable the heritage version of Digital Certificate Manager. IBM i releases 7.5, 7.4, and 7.3 will be disabled. The IBM i PTF numbers to disable heritage version of Digital Certificate Manager:

IBM i Release 5770-DG1 PTF Number
7.5 SI81417
7.4 SI81418
7.3 SI81419

And fourth, there is Security Bulletin: ISC DHCP server for IBM i is vulnerable to a denial of service attack due to a memory leak and reference count overflow (CVE-2022-2928, CVE-2022-2929), which you can get more information about at this link here. The IBM i PTF numbers contain the fix for the vulnerabilities.

IBM i Release 5770-SS1 PTF Number
7.5 SI81438
7.4 SI81439
7.3 SI81440
7.2 SI81441

Now, here is the rundown of PTF Groups by IBM i release level since we last published:

PTF Groups 7.5:

Latest Cumulative PTF Package
HIPERs (High Impact/Pervasive)
Security
Technology Refresh
DB2 for IBM i

PTF Groups 7.4:

Latest Cumulative PTF Package
HIPERs (High Impact/Pervasive)
Security
Technology Refresh
DB2 for IBM i
IBM Db2 Mirror for i
Temporary Storage PTFs

PTF Groups 7.3:

Latest Cumulative PTF Package
HIPERs (High Impact/Pervasive)
Security
Technology Refresh

PTF Groups 7.2:

HIPERs (High Impact/Pervasive)
Security

New (or Updated) links added to the ‘Links’ tab in the guide this week:

DBU: ProData – Home of DBU

New (or Updated) links added to the ‘QMGtools’ tab in the guide this week:

New (or Updated) links added to the ‘ACS_NAV’ tab in the guide this week:

New (or Updated) links added to the ‘Prtr Links’ tab in the guide this week:

Tips/Definitions: How long has it been since you did a SAVE 21?

The Guide at a glance: There are no new defectives this week (12/03/22). Here is the defective PTF rundown, which is the last defective for each release:

Defect Defective APAR Fixing
Date PTF PTF
——– ——– ——- ——-
7.5 11/22/22 SI81328 SE78918 SI81867 (When available)
7.4 12/01/22 MF69286 MA49947 MF70500 (When available)
7.3 12/01/22 MF69085 MA49947 MF70499 (When available)
7.2 12/08/21 SI77634 SE73420 SI78039 (Read the link in the guide!)

Be sure to access the link in the Guide for further details.

Below is the usual archive of the IBM i PTF Guide to help you work through the PTFs in chronological order:

December 3, 2022: Volume 24, Number 49

November 26, 2022: Volume 24, Number 48

November 19, 2022: Volume 24, Number 47

November 12, 2022: Volume 24, Number 46

November 5, 2022: Volume 24, Number 45

October 29, 2022: Volume 24, Number 44

October 22, 2022: Volume 24, Number 43

October 15, 2022: Volume 24, Number 42

October 8, 2022: Volume 24, Number 41

October 1, 2022: Volume 24, Number 40

September 24, 2022: Volume 24, Number 39

September 17, 2022: Volume 24, Number 38

September 10, 2022: Volume 24, Number 37

September 3, 2022: Volume 24, Number 36

August 27, 2022: Volume 24, Number 35

August 20, 2022: Volume 24, Number 34

August 13, 2022: Volume 24, Number 33

August 6, 2022: Volume 24, Number 32

July 30, 2022: Volume 24, Number 31

July 23, 2022: Volume 24, Number 30

July 16, 2022: Volume 24, Number 29

July 9, 2022: Volume 24, Number 28

June 25, 2022: Volume 24, Number 26

June 18, 2022: Volume 24, Number 25

June 11, 2022: Volume 24, Number 24

June 4, 2022: Volume 24, Number 23

May 28, 2022: Volume 24, Number 22

May 25, 2022: Volume 24, Number 21

May 14, 2022: Volume 24, Number 20

May 7, 2022: Volume 24, Number 19

April 30, 2022: Volume 24, Number 18

April 23, 2022: Volume 24, Number 17

April 16, 2022: Volume 24, Number 16

April 2, 2022: Volume 24, Number 14

March 26, 2022: Volume 24, Number 13

March 19, 2022: Volume 24, Number 12

March 12, 2022: Volume 24, Number 11

March 5, 2022: Volume 24, Number 10

February 26, 2022: Volume 24, Number 9

February 19, 2022: Volume 24, Number 8

February 12, 2022: Volume 24, Number 7

February 5, 2022: Volume 24, Number 6

January 29, 2022: Volume 24, Number 5

January 22, 2022: Volume 24, Number 4

January 15, 2022: Volume 24, Number 3

January 8, 2022: Volume 24, Number 2

January 1, 2022: Volume 24, Number 1

December 6, 2021: Volume 23, Number 48

November 20, 2021: Volume 23, Number 47

November 13, 2021: Volume 23, Number 46

November 6, 2021: Volume 23, Number 45

October 30, 2021: Volume 23, Number 44

October 23, 2021: Volume 23, Number 43

October 16, 2021: Volume 23, Number 42

October 9, 2021: Volume 23, Number 41

October 2, 2021: Volume 23, Number 40

September 25, 2021: Volume 23, Number 39

September 18, 2021: Volume 23, Number 38

September 11, 2021: Volume 23, Number 37

September 4, 2021: Volume 23, Number 36

August 28, 2021: Volume 23, Number 35

August 21, 2021: Volume 23, Number 34

August 14, 2021: Volume 23, Number 33

August 7, 2021: Volume 23, Number 32

July 31, 2021: Volume 23, Number 31

July 24, 2021: Volume 23, Number 30

July 17, 2021: Volume 23, Number 29

July 10, 2021: Volume 23, Number 28

July 3, 2021: Volume 23, Number 27

June 26, 2021: Volume 23, Number 26

June 19, 2021: Volume 23, Number 25

June 12, 2021: Volume 23, Number 24

June 5, 2021: Volume 23, Number 23

June 5, 2021: Volume 23, Number 22

May 22, 2021: Volume 23, Number 21

May 15, 2021: Volume 23, Number 20

May 8, 2021: Volume 23, Number 19

May 1, 2021: Volume 23, Number 18

April 24, 2021: Volume 23, Number 17

April 17, 2021: Volume 23, Number 16

April 10, 2021: Volume 23, Number 15

April 3, 2021: Volume 23, Number 14

March 27, 2021: Volume 23, Number 13

March 20, 2021: Volume 23, Number 12

March 13, 2021: Volume 23, Number 11

March 6, 2021: Volume 23, Number 10

February 27, 2021: Volume 23, Number 9

February 20, 2021: Volume 23, Number 8

February 13, 2021: Volume 23, Number 7

February 6, 2021: Volume 23, Number 6

January 31, 2021: Volume 23, Number 5

January 23, 2021: Volume 23, Number 4

January 16, 2021: Volume 23, Number 3

January 9, 2021: Volume 23, Number 2

January 2, 2021: Volume 23, Number 1

December 26, 2020: Volume 22, Number 52

December 19, 2020: Volume 22, Number 51

December 12, 2020: Volume 22, Number 50

December 5, 2020: Volume 22, Number 49

Generated by Feedzy