IBM i PTF Guide, Volume 25, Number 7

February 13, 2023

Doug Bidwell

This week brought more security vulnerabilities in the airspace above us, and also around the world with weird sightings in the United States, Canada, China, and Russia. Now we have security vulnerabilities in open source code that is part of the IBM i stack.

First, we have a Security Bulletin. IBM Java SDK and IBM Java Runtime for IBM i are vulnerable to bypassing security restrictions, denial of service attacks, and data integrity impacts due to multiple vulnerabilities, which you can find out more about at this link. There are fixes as shown below by IBM i release and by 5770-JV1 Group PTF Number and Level:

IBM i 7.5 – SF99955 Level 4
IBM i 7.4 – SF99665 Level 17
IBM i 7.3 – SF99725 Level 28
IBM i 7.2 – SF99716 Level 38

Second, we have Security Bulletin: IBM WebSphere Application Server Liberty is vulnerable to information disclosure due to Apache James MIME4J (CVE-2022-45787), which you can find out more about at this link. IBM WebSphere Application Server Liberty releases 21.0.0.12 through 23.0.0.1.

Now, here is the rundown of PTF Groups by IBM i release level since we last published:

PTF Groups 7.5:

HIPERs (High Impact/Pervasive)

PTF Groups 7.4:

HIPERs (High Impact/Pervasive)
WebSphere App Server V8.5
Fix list for IBM WebSphere Application Server Liberty 23.0.0.1

PTF Groups 7.3:

HIPERs (High Impact/Pervasive)
WebSphere App Server V8.5
Fix list for IBM WebSphere Application Server Liberty 23.0.0.1

PTF Groups 7.2:

New (or Updated) links added to the ‘Links’ tab in the guide this week:

New (or Updated) links added to the ‘QMGtools’ tab in the guide this week:

New (or Updated) links added to the ‘ACS_NAV’ tab in the guide this week:

New (or Updated) links added to the ‘Prtr Links’ tab in the guide this week:

New (or Updated) links Redbooks added this week:

Tips/Definitions: How long has it been since you did a SAVE 21?

The Guide at a glance: There are new defectives this week (02/11/23). Here is the defective PTF rundown, which is the last defective for each release:

Defect Defective APAR Fixing
Date PTF PTF
——– ——– ——- ——-
7.5 02/08/23 MF70682 MA50037 MF70684 (When available)
MF70583
MF70581
MF70504
MF70402
7.4 02/08/23 MF70686 MA50037 MF70688 (When available)
MF70573
MF70571
MF70506
MF70457
7.3 01/13/23 MH01946 MB04386 MH01947 (5733-910, When available)
MH01945
7.2 12/08/21 SI77634 SE73420 SI78039 (Read the link in the guide!)

Be sure to access the link in the Guide for further details.

Below is the usual archive of the IBM i PTF Guide to help you work through the PTFs in chronological order:

February 13, 2023: Volume 25, Number 7

February 4, 2023: Volume 25, Number 6

January 28, 2023: Volume 25, Number 5

January 21, 2023: Volume 25, Number 4

January 14, 2023: Volume 25, Number 3

January 7, 2023: Volume 25, Number 2

January 1, 2023: Volume 25, Number 1

December 10, 2022: Volume 24, Number 50

December 3, 2022: Volume 24, Number 49

November 26, 2022: Volume 24, Number 48