IBM i PTF Guide, Volume 24, Number 50

December 12, 2022

Doug Bidwell

It is another week of interesting security vulnerabilities in the IBM i world, so brace yourself for some research and patching. There are a slew of vulnerabilities that affect the Hardware Management Console for Power Systems, which means any of you IBM i shops that are using relatively large Power machines. There are five new ones, above and beyond the ones we have covered in recent weeks.

First, there is Security Bulletin: Vulnerability in Bind (CVE-2021-25219) affects Power HMC, which you can read about here.

Affected Product(s) Version(s)
HMC V10.1.1010.0 V10.1.1010.0 and later
HMC V9.2.950.0 V9.2.950.0 and later
Product VRMF APAR Remediation/Fix
Power HMC V9.2.950.0 SP3 ppc MB04373 MH01944
Power HMC V9.2.950.0 SP3 x86 MB04372 MH01943
Power HMC V10.1.1020.0 SP1 ppc MB04363 MF70302
Power HMC V10.1.1020.0 SP1 x86 MB04362 MF70301

Second, there is Security Bulletin: Vulnerabilities in Apache HTTP (CVE-2021-33193 and CVE-2021-44224) affects Power HMC, which you can see more about at this link. Same affected versions and APARs to remediate and fix.

Third, there is Security Bulletin: Vulnerability in Apache HTTP (CVE-2020-13950) affects Power HMC, which you can find out more about there. It has the same affected versions and remediations and fixes.

Fourth, there is Security Bulletin: Vulnerability in Kernel (CVE-2021-45485) affects Power HMC, which you can read more about here.

Affected Product(s) Version(s)
HMC V10.1.1010.0 V10.1.1010.0 and later
HMC V9.2.950.0 V9.2.950.0 and later
Product VRMF APAR Remediation/Fix
Power HMC V9.2.950.0 SP3 ppc MB04331 MH01925
Power HMC V9.2.950.0 SP3 x86 MB04330 MH01924
Power HMC V10.1.1020.0 SP1 ppc MB04335 MF69724
Power HMC V10.1.1020.0 SP1 x86 MB04334 MF69722

And finally, number five, there is Security Bulletin: Vulnerability in Kernel (CVE-2022-1012) affects Power HMC, which you can find out more about at this link and which has the same affected versions and fixes.

You should also check out the HMC V10 R2 M1030 Recovery Media – for 7063 Hardware, which you can see more about at this link.

Now, here is the rundown of PTF Groups by IBM i release level since we last published:

PTF Groups 7.5:

IBM DB2 Mirror for i
IBM MQ for IBM i – v9.2.0/v9.3.0
SAP
QMGTOOLS

PTF Groups 7.4:

MQ for IBM i – v9.0.0/v9.1.0/v9.2.0/v9.3.0
Memo to Users
What’s New!
SAP
QMGTOOLS

PTF Groups 7.3:

MQ for IBM i – v7.1.0/v8.0.0/V9.0.0/V9.1/V9.2
SAP
QMGTOOLS

PTF Groups 7.2:

New (or Updated) links added to the ‘Links’ tab in the guide this week:

New (or Updated) links added to the ‘QMGtools’ tab in the guide this week:

New (or Updated) links added to the ‘ACS_NAV’ tab in the guide this week:

New (or Updated) links added to the ‘Prtr Links’ tab in the guide this week:

Tips/Definitions: How long has it been since you did a SAVE 21?

The Guide at a glance: There are no new defectives this week (12/10/22). Here is the defective PTF rundown, which is the last defective for each release:

Defect Defective APAR Fixing
Date PTF PTF
——– ——– ——- ——-
7.5 11/22/22 SI81328 SE78918 SI81867 (When available)
7.4 12/01/22 MF69086 MA49947 MF70500 (When available)
7.3 12/01/22 MF69085 MA49947 MF70499 (When available)
7.2 12/08/21 SI77634 SE73420 SI78039 (Read the link in the guide!)

Be sure to access the link in the Guide for further details.

Below is the usual archive of the IBM i PTF Guide to help you work through the PTFs in chronological order:

December 10, 2022: Volume 24, Number 51

December 3, 2022: Volume 24, Number 49

November 26, 2022: Volume 24, Number 48

November 19, 2022: Volume 24, Number 47

November 12, 2022: Volume 24, Number 46

November 5, 2022: Volume 24, Number 45

October 29, 2022: Volume 24, Number 44

October 22, 2022: Volume 24, Number 43

October 15, 2022: Volume 24, Number 42

October 8, 2022: Volume 24, Number 41