IBM i Global

IBM i Global

Connect, learn, share, and engage with IBM Power.

 View Only

  • 1.  PTFs vs Domino

    Posted Sat October 07, 2023 09:55 AM

    Domino users:

    Do NOT put these PTFs on:

    Security Bulletin: IBM i is vulnerable to a local privilege escalation due to a flaw in IBM Directory Server for i (CVE-2023-40378).
    https://www.ibm.com/support/pages/node/7047240?myns=swgother&mynp=OCSWG60&mynp=OCSSTS2D&mynp=OCSSB23CE&mynp=OCSS9QQS&mynp=OCSSC5L9&mync=E&cm_sp=swgother-_-OCSWG60-OCSSTS2D-OCSSB23CE-OCSS9QQS-OCSSC5L9-_-E
    I tried them on IBM i 7.5
    PTF Group             Level
    SF99959                  36
    SF99958                  20
    SF99957                   2
    SF99956                   1
    SF99955                   6
    SF99954                  10
    SF99953                   2
    SF99952                  10
    SF99951                   4
    SF99950                   4
    SF99751                   4
    SF99750               23110
    When I dropped my Domino servers for maintenance and tried to bring them back up again 
    LNT0928
    Error 2 occurred while running the Domino server. 
    2 -- The Domino server stopped running because an exception occurred.
    2 -- Check the job log of the Domino server for possible errors. (nothing but this)
    Nothing on the Domino console.
    "What changed?"
    Those PTF's.
    RMVPTF LICPGM(5770SS1) SELECT(SI84231 SI84569 SI84578) RMV(*PERM)
    STRDOMSVR ...
    success!
    HCL Domino (r) Server (Release 12.0.2 for i5/OS)
    Not sure if the following applies.
    **Domino 12.0.2 Fix Pack 2 or higher recommended but not required.
    I may open a case on Monday but why bother now because if it's not a system supporting a power grid for the eastern seaboard and a bank of life support machines I will catch endless grief trying to get them to work on it over a weekend.  Especially since I have a workaround.


    ------------------------------
    Robert Berendt IBMChampion
    ------------------------------


  • 2.  RE: PTFs vs Domino

    Posted Tue October 10, 2023 02:30 AM
    Edited by Kim Clausen Tue October 10, 2023 02:30 AM

    Hi,

    IBM have updated the security bulletin and stated that the ptf's should not be installed due to issues:

    https://www.ibm.com/support/pages/node/7047240?myns=swgother&mynp=OCSWG60&mynp=OCSSTS2D&mynp=OCSSB23CE&mynp=OCSS9QQS&mynp=OCSSC5L9&mync=E&cm_sp=swgother-_-OCSWG60-OCSSTS2D-OCSSB23CE-OCSS9QQS-OCSSC5L9-_-E



    ------------------------------
    Kim Clausen
    ------------------------------

    Original Message


  • 3.  RE: PTFs vs Domino

    Posted Thu October 19, 2023 10:34 AM

    IBM has put new PTF's on the link at https://www.ibm.com/support/pages/node/7047240?myns=swgother&mynp=OCSWG60&mynp=OCSSTS2D&mynp=OCSSB23CE&mynp=OCSS9QQS&mynp=OCSSC5L9&mync=E&cm_sp=swgother-_-OCSWG60-OCSSTS2D-OCSSB23CE-OCSS9QQS-OCSSC5L9-_-E
    I put this on one of my Domino lpars and this time the Domino server could be restarted successfully. 



    ------------------------------
    Robert Berendt IBMChampion
    ------------------------------

    Original Message