Re: Avoid these PTF's:

Appreciate the heads up Rob, thanks!




From:   "Rob Berendt" <[email protected]>
To:     "domino400 domino400 domino400, domino400" 
<[email protected]>
Date:   10/07/2023 03:54 PM
Subject:        Avoid these PTF's:
Sent by:        "Domino400" <domino400-bounces-+hD5IHI5Xscn3HwCXmMcX9BPR1lH4CV8@public.gmane.org>



Warning! This message was sent from outside your organization and we are 
unable to verify the sender.

Do NOT put these PTFs on:
Security Bulletin: IBM i is vulnerable to a local privilege escalation due
to a flaw in IBM Directory Server for i (CVE-2023-40378).
https://us-west-2.protection.sophos.com?d=ibm.com&u=aHR0cHM6Ly93d3cuaWJtLmNvbS9zdXBwb3J0L3BhZ2VzL25vZGUvNzA0NzI0MD9teW5zPXN3Z290aGVyJm15bnA9T0NTV0c2MCZteW5wPU9DU1NUUzJEJm15bnA9T0NTU0IyM0NFJm15bnA9T0NTUzlRUVMmbXlucD1PQ1NTQzVMOSZteW5jPUUmY21fc3A9c3dnb3RoZXItXy1PQ1NXRzYwLU9DU1NUUzJELU9DU1NCMjNDRS1PQ1NTOVFRUy1PQ1NTQzVMOS1fLUU=&i=NjNhZWUwZjNlNWVlYWIxMzQzYzg3MTRj&t=QUJ0bGtONUlEaGt1eVVIK1BwSnc4OVRnOGpRYnpXSkdaQUVWNVEwYmhGbz0=&h=051f82d93ba745fcbe5c0f3f3c787a12&s=AVNPUEhUT0NFTkNSWVBUSVZY4udrrmk3ESP52jpBpMsKLPlKx3JNh9mz6nCgdQXTw-xuO0sVvXsYVc8bA6BaWxCkfX0aBkB9q7zaWXsc1g1w


I tried them on IBM i 7.5
PTF Group             Level
SF99959                  36
SF99958                  20
SF99957                   2
SF99956                   1
SF99955                   6
SF99954                  10
SF99953                   2
SF99952                  10
SF99951                   4
SF99950                   4
SF99751                   4
SF99750               23110

When I dropped my Domino servers for maintenance and tried to bring them
back up again
LNT0928
Error 2 occurred while running the Domino server.
2 -- The Domino server stopped running because an exception occurred.
2 -- Check the job log of the Domino server for possible errors. (nothing
but this)

Nothing on the Domino console.
"What changed?"
Those PTF's.
RMVPTF LICPGM(5770SS1) SELECT(SI84231 SI84569 SI84578) RMV(*PERM)
STRDOMSVR ...
success!
HCL Domino (r) Server (Release 12.0.2 for i5/OS)

Not sure if the following applies.
 
https://us-west-2.protection.sophos.com?d=hcltechsw.com&u=aHR0cHM6Ly9zdXBwb3J0LmhjbHRlY2hzdy5jb20vY3NtP2lkPWtiX2FydGljbGUmc3lzcGFybV9hcnRpY2xlPUtCMDEwMTQ0Nw==&i=NjNhZWUwZjNlNWVlYWIxMzQzYzg3MTRj&t=LzB6RWp3UksrMmxjbWJGRitDZ0ZoZzJ5T3RQbGJPY2xMZmczbFgzY2Q2OD0=&h=051f82d93ba745fcbe5c0f3f3c787a12&s=AVNPUEhUT0NFTkNSWVBUSVZY4udrrmk3ESP52jpBpMsKLPlKx3JNh9mz6nCgdQXTw-xuO0sVvXsYVc8bA6BaWxCkfX0aBkB9q7zaWXsc1g1w

**Domino 12.0.2 Fix Pack 2 or higher recommended but not required.

I may open a case on Monday but why bother now because if it's not a 
system
supporting a power grid for the eastern seaboard and a bank of life 
support
machines I will catch endless grief trying to get them to work on it over 
a
weekend.  Especially since I have a workaround.
-- 
This is the Lotus Domino on the IBM i (AS/400 and iSeries) (Domino400) 
mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: 
https://us-west-2.protection.sophos.com?d=midrange.com&u=aHR0cHM6Ly9saXN0cy5taWRyYW5nZS5jb20vbWFpbG1hbi9saXN0aW5mby9kb21pbm80MDA=&i=NjNhZWUwZjNlNWVlYWIxMzQzYzg3MTRj&t=MGN5eVFJb1pLSDgrRnpIY1E1d2lKUDM3UVNvejN5aDN5Rk9IdzJzZkRvaz0=&h=051f82d93ba745fcbe5c0f3f3c787a12&s=AVNPUEhUT0NFTkNSWVBUSVZY4udrrmk3ESP52jpBpMsKLPlKx3JNh9mz6nCgdQXTw-xuO0sVvXsYVc8bA6BaWxCkfX0aBkB9q7zaWXsc1g1w

or email: Domino400-request-+hD5IHI5Xscn3HwCXmMcX9BPR1lH4CV8@public.gmane.org
Before posting, please take a moment to review the archives
at 
https://us-west-2.protection.sophos.com?d=midrange.com&u=aHR0cHM6Ly9hcmNoaXZlLm1pZHJhbmdlLmNvbS9kb21pbm80MDA=&i=NjNhZWUwZjNlNWVlYWIxMzQzYzg3MTRj&t=S3RmMXhnM0FTMnFGSWNiUEpuVDZ0Qlc2d1lRVGQxNUk0MGloZ05jRWZ3Zz0=&h=051f82d93ba745fcbe5c0f3f3c787a12&s=AVNPUEhUT0NFTkNSWVBUSVZY4udrrmk3ESP52jpBpMsKLPlKx3JNh9mz6nCgdQXTw-xuO0sVvXsYVc8bA6BaWxCkfX0aBkB9q7zaWXsc1g1w
.



-- 
This is the Lotus Domino on the IBM i (AS/400 and iSeries) (Domino400) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request-+hD5IHI5Xscn3HwCXmMcX9BPR1lH4CV8@public.gmane.org
Before posting, please take a moment to review the archives
at https://archive.midrange.com/domino400.