Re: Avoid these PTF's:

[Rob Berendt <robertowenberendt@xxxxxxxxx>]

IBM has changed the link to say:
ATTENTION:  Valid use cases are negatively impacted by the vulnerability
fix.  DO NOT APPLY THE FIXES.

On Sun, Oct 8, 2023 at 5:31 AM Kim Greene <kim@xxxxxxxxxxxxx> wrote:

> Appreciate the heads up Rob, thanks!
>
>
>
>
> From:   "Rob Berendt" <robertowenberendt@xxxxxxxxx>
> To:     "domino400 domino400 domino400, domino400"
> <domino400@xxxxxxxxxxxxxxxxxx>
> Date:   10/07/2023 03:54 PM
> Subject:        Avoid these PTF's:
> Sent by:        "Domino400" <domino400-bounces@xxxxxxxxxxxxxxxxxx>
>
>
>
> Warning! This message was sent from outside your organization and we are
> unable to verify the sender.
>
> Do NOT put these PTFs on:
> Security Bulletin: IBM i is vulnerable to a local privilege escalation due
> to a flaw in IBM Directory Server for i (CVE-2023-40378).
>
> https://us-west-2.protection.sophos.com?d=ibm.com&u=aHR0cHM6Ly93d3cuaWJtLmNvbS9zdXBwb3J0L3BhZ2VzL25vZGUvNzA0NzI0MD9teW5zPXN3Z290aGVyJm15bnA9T0NTV0c2MCZteW5wPU9DU1NUUzJEJm15bnA9T0NTU0IyM0NFJm15bnA9T0NTUzlRUVMmbXlucD1PQ1NTQzVMOSZteW5jPUUmY21fc3A9c3dnb3RoZXItXy1PQ1NXRzYwLU9DU1NUUzJELU9DU1NCMjNDRS1PQ1NTOVFRUy1PQ1NTQzVMOS1fLUU=&i=NjNhZWUwZjNlNWVlYWIxMzQzYzg3MTRj&t=QUJ0bGtONUlEaGt1eVVIK1BwSnc4OVRnOGpRYnpXSkdaQUVWNVEwYmhGbz0=&h=051f82d93ba745fcbe5c0f3f3c787a12&s=AVNPUEhUT0NFTkNSWVBUSVZY4udrrmk3ESP52jpBpMsKLPlKx3JNh9mz6nCgdQXTw-xuO0sVvXsYVc8bA6BaWxCkfX0aBkB9q7zaWXsc1g1w
>
>
> I tried them on IBM i 7.5
> PTF Group             Level
> SF99959                  36
> SF99958                  20
> SF99957                   2
> SF99956                   1
> SF99955                   6
> SF99954                  10
> SF99953                   2
> SF99952                  10
> SF99951                   4
> SF99950                   4
> SF99751                   4
> SF99750               23110
>
> When I dropped my Domino servers for maintenance and tried to bring them
> back up again
> LNT0928
> Error 2 occurred while running the Domino server.
> 2 -- The Domino server stopped running because an exception occurred.
> 2 -- Check the job log of the Domino server for possible errors. (nothing
> but this)
>
> Nothing on the Domino console.
> "What changed?"
> Those PTF's.
> RMVPTF LICPGM(5770SS1) SELECT(SI84231 SI84569 SI84578) RMV(*PERM)
> STRDOMSVR ...
> success!
> HCL Domino (r) Server (Release 12.0.2 for i5/OS)
>
> Not sure if the following applies.
>
>
> https://us-west-2.protection.sophos.com?d=hcltechsw.com&u=aHR0cHM6Ly9zdXBwb3J0LmhjbHRlY2hzdy5jb20vY3NtP2lkPWtiX2FydGljbGUmc3lzcGFybV9hcnRpY2xlPUtCMDEwMTQ0Nw==&i=NjNhZWUwZjNlNWVlYWIxMzQzYzg3MTRj&t=LzB6RWp3UksrMmxjbWJGRitDZ0ZoZzJ5T3RQbGJPY2xMZmczbFgzY2Q2OD0=&h=051f82d93ba745fcbe5c0f3f3c787a12&s=AVNPUEhUT0NFTkNSWVBUSVZY4udrrmk3ESP52jpBpMsKLPlKx3JNh9mz6nCgdQXTw-xuO0sVvXsYVc8bA6BaWxCkfX0aBkB9q7zaWXsc1g1w
>
> **Domino 12.0.2 Fix Pack 2 or higher recommended but not required.
>
> I may open a case on Monday but why bother now because if it's not a
> system
> supporting a power grid for the eastern seaboard and a bank of life
> support
> machines I will catch endless grief trying to get them to work on it over
> a
> weekend.  Especially since I have a workaround.
> --
> This is the Lotus Domino on the IBM i (AS/400 and iSeries) (Domino400)
> mailing list
> To post a message email: Domino400@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit:
>
> https://us-west-2.protection.sophos.com?d=midrange.com&u=aHR0cHM6Ly9saXN0cy5taWRyYW5nZS5jb20vbWFpbG1hbi9saXN0aW5mby9kb21pbm80MDA=&i=NjNhZWUwZjNlNWVlYWIxMzQzYzg3MTRj&t=MGN5eVFJb1pLSDgrRnpIY1E1d2lKUDM3UVNvejN5aDN5Rk9IdzJzZkRvaz0=&h=051f82d93ba745fcbe5c0f3f3c787a12&s=AVNPUEhUT0NFTkNSWVBUSVZY4udrrmk3ESP52jpBpMsKLPlKx3JNh9mz6nCgdQXTw-xuO0sVvXsYVc8bA6BaWxCkfX0aBkB9q7zaWXsc1g1w
>
> or email: Domino400-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at
>
> https://us-west-2.protection.sophos.com?d=midrange.com&u=aHR0cHM6Ly9hcmNoaXZlLm1pZHJhbmdlLmNvbS9kb21pbm80MDA=&i=NjNhZWUwZjNlNWVlYWIxMzQzYzg3MTRj&t=S3RmMXhnM0FTMnFGSWNiUEpuVDZ0Qlc2d1lRVGQxNUk0MGloZ05jRWZ3Zz0=&h=051f82d93ba745fcbe5c0f3f3c787a12&s=AVNPUEhUT0NFTkNSWVBUSVZY4udrrmk3ESP52jpBpMsKLPlKx3JNh9mz6nCgdQXTw-xuO0sVvXsYVc8bA6BaWxCkfX0aBkB9q7zaWXsc1g1w
> .
>
>
>
> --
> This is the Lotus Domino on the IBM i (AS/400 and iSeries) (Domino400)
> mailing list
> To post a message email: Domino400@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/domino400
> or email: Domino400-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/domino400.