Re: Avoid these PTF's:

Appreciate the heads up Rob, thanks!




From: "Rob Berendt" <robertowenberendt@xxxxxxxxx>
To: "domino400 domino400 domino400, domino400"
<domino400@xxxxxxxxxxxxxxxxxx>
Date: 10/07/2023 03:54 PM
Subject: Avoid these PTF's:
Sent by: "Domino400" <domino400-bounces@xxxxxxxxxxxxxxxxxx>



Warning! This message was sent from outside your organization and we are
unable to verify the sender.

Do NOT put these PTFs on:
Security Bulletin: IBM i is vulnerable to a local privilege escalation due
to a flaw in IBM Directory Server for i (CVE-2023-40378).
https://us-west-2.protection.sophos.com?d=ibm.com&u=aHR0cHM6Ly93d3cuaWJtLmNvbS9zdXBwb3J0L3BhZ2VzL25vZGUvNzA0NzI0MD9teW5zPXN3Z290aGVyJm15bnA9T0NTV0c2MCZteW5wPU9DU1NUUzJEJm15bnA9T0NTU0IyM0NFJm15bnA9T0NTUzlRUVMmbXlucD1PQ1NTQzVMOSZteW5jPUUmY21fc3A9c3dnb3RoZXItXy1PQ1NXRzYwLU9DU1NUUzJELU9DU1NCMjNDRS1PQ1NTOVFRUy1PQ1NTQzVMOS1fLUU=&i=NjNhZWUwZjNlNWVlYWIxMzQzYzg3MTRj&t=QUJ0bGtONUlEaGt1eVVIK1BwSnc4OVRnOGpRYnpXSkdaQUVWNVEwYmhGbz0=&h=051f82d93ba745fcbe5c0f3f3c787a12&s=AVNPUEhUT0NFTkNSWVBUSVZY4udrrmk3ESP52jpBpMsKLPlKx3JNh9mz6nCgdQXTw-xuO0sVvXsYVc8bA6BaWxCkfX0aBkB9q7zaWXsc1g1w


I tried them on IBM i 7.5
PTF Group Level
SF99959 36
SF99958 20
SF99957 2
SF99956 1
SF99955 6
SF99954 10
SF99953 2
SF99952 10
SF99951 4
SF99950 4
SF99751 4
SF99750 23110

When I dropped my Domino servers for maintenance and tried to bring them
back up again
LNT0928
Error 2 occurred while running the Domino server.
2 -- The Domino server stopped running because an exception occurred.
2 -- Check the job log of the Domino server for possible errors. (nothing
but this)

Nothing on the Domino console.
"What changed?"
Those PTF's.
RMVPTF LICPGM(5770SS1) SELECT(SI84231 SI84569 SI84578) RMV(*PERM)
STRDOMSVR ...
success!
HCL Domino (r) Server (Release 12.0.2 for i5/OS)

Not sure if the following applies.

https://us-west-2.protection.sophos.com?d=hcltechsw.com&u=aHR0cHM6Ly9zdXBwb3J0LmhjbHRlY2hzdy5jb20vY3NtP2lkPWtiX2FydGljbGUmc3lzcGFybV9hcnRpY2xlPUtCMDEwMTQ0Nw==&i=NjNhZWUwZjNlNWVlYWIxMzQzYzg3MTRj&t=LzB6RWp3UksrMmxjbWJGRitDZ0ZoZzJ5T3RQbGJPY2xMZmczbFgzY2Q2OD0=&h=051f82d93ba745fcbe5c0f3f3c787a12&s=AVNPUEhUT0NFTkNSWVBUSVZY4udrrmk3ESP52jpBpMsKLPlKx3JNh9mz6nCgdQXTw-xuO0sVvXsYVc8bA6BaWxCkfX0aBkB9q7zaWXsc1g1w

**Domino 12.0.2 Fix Pack 2 or higher recommended but not required.

I may open a case on Monday but why bother now because if it's not a
system
supporting a power grid for the eastern seaboard and a bank of life
support
machines I will catch endless grief trying to get them to work on it over
a
weekend. Especially since I have a workaround.