Fix list for IBM MQ Version 9.1 LTS

Product Readmes

Abstract

IBM MQ provides periodic maintenance for release 9.1. The following is a complete listing of available fixes grouped by maintenance delivery.

Content

This document describes both types of maintenance delivery - fix packs and cumulative security updates. For more information on the types of maintenance, refer to the IBM MQ release types section of the product documentation.

Lifecycle dates:

GA for IBM MQ 9.1 was 23rd July 2018.
Start of Extended Support for IBM MQ 9.1 was 30th September 2023.
Extended support for IBM MQ 9.1 is available until 30th September 2027. Critical defect support as described by the extended support terms and conditions is available until 30th September 2026.

	Release Type	Release Date	Total fixes	Security fixes	HIPER fixes
IBM MQ 9.1.0.32	Cumulative security update	23 October 2025	3	2	0
IBM MQ 9.1.0.31	Cumulative security update	04 September 2025	7	2	0
IBM MQ 9.1.0.29	Cumulative security update	27 June 2025	4	3	0
IBM MQ 9.1.0.28	Cumulative security update	01 May 2025	1	0	0
IBM MQ 9.1.0.27	Cumulative security update	27 February 2025	4	3	0
IBM MQ 9.1.0.26	Cumulative security update	17 December 2024	2	1	0
IBM MQ 9.1.0.24	Cumulative security update	29 October 2024	3	2	0
IBM MQ 9.1.0.23	Cumulative security update	05 September 2024	4	2	0
IBM MQ 9.1.0.22	Cumulative security update	26 June 2024	8	5	0
IBM MQ 9.1.0.21	Cumulative security update	25 April 2024	7	3	2
IBM MQ 9.1.0.20	Fix pack	29 February 2024	21	3	0
IBM MQ 9.1.0.19	Cumulative security update	14 December 2023	4	2	0
IBM MQ 9.1.0.18	Cumulative security update	30 October 2023	4	3	1
IBM MQ 9.1.0.17	Cumulative security update	31 August 2023	4	3	0
IBM MQ 9.1.0.16	Cumulative security update	28 June 2023	4	3	0
IBM MQ 9.1.0.15	Fix pack	10 May 2023	29	7	3
IBM MQ 9.1.0.13	Cumulative security update	26 January 2023	7	4	0
IBM MQ 9.1.0.12	Fix pack	18 October 2022	61	10	4
IBM MQ 9.1.0.11	Fix pack	29 March 2022	76	6	17
IBM MQ 9.1.0.10	Fix pack	15 December 2021	49	5	3
IBM MQ 9.1.0.9	Fix pack	25 August 2021	59	9	4
IBM MQ 9.1.0.8	Fix pack	2 June 2021	89	6	8
IBM MQ 9.1.0.7	Fix pack	7 December 2020	101	9	4
IBM MQ 9.1.0.6	Fix pack	20 July 2020	71	11	7
IBM MQ 9.1.0.5	Fix pack	6 April 2020	92	10	6
IBM MQ 9.1.0.4	Fix pack	4 December 2019	117	11	29
IBM MQ 9.1.0.3	Fix pack	31 July 2019	102	14	12
IBM MQ 9.1.0.2	Fix pack	9 April 2019	120	8	8
IBM MQ 9.1.0.1	Fix pack	15 November 2018	55	3	7

To download IBM MQ Fix and Refresh Packs follow this link. http://www.ibm.com/support/docview.wss?uid=swg27006037.

Vulnerability risk information for IBM MQ can be found at Security Bulletin for WebSphere MQ

IBM MQ planned maintenance release dates

Glossary of Terms

Example table

Is Security	Is HIPER	APAR / known issue	Description
✓		AB12345	CVE-XXXX-XXXXX (security/integrity exposure) [CVSS base score 5.3]
	✓	DT123456	Description of HIPER

IBM MQ cumulative security update 9.1.0.32 IBM i, Windows, UNIX®

(Last modified: October 2025)

Is Security	Is HIPER	known issue	Description
✓		DT448803	IBM MQ CVE-2025-36047 and IBM MQ CVE-2025-48976 [CVSS base score 7.5]
✓		DT451207	IBM MQ CVE-2020-36732 [CVSS base score 5.3]
		DT452870	Third party component updates for cumulative security update 9.1.0.32

IBM MQ cumulative security update 9.1.0.31 IBM i, Windows, UNIX®

(Last modified: September 2025)

Is Security	Is HIPER	known issue	Description
✓		DT444585	IBM MQ CVE-2025-36100 [CVSS base score 5.1]
✓		DT448473	IBM MQ CVE-2025-30754 and CVE-2025-30754 [CVSS base score 4.8]
		DT434353	Changes to the IBM MQ classes for Java and classes for JMS to support Java 17 and later.
		DT434354	Update the IBM MQ Bridge to Salesforce to use Eclipse Jetty 12
		DT438481	Removal of the IBM MQ 9.1 Bridge to blockchain component
		DT440402	IBM MQ Bridge to Salesforce fails to connect due to deprecated Salesforce API version.
		DT448610	Third party component updates for cumulative security update 9.1.0.31

IBM MQ cumulative security update 9.1.0.29 IBM i, Windows, UNIX®

(Last modified: June 2025)

Is Security	Is HIPER	known issue	Description
✓		DT438705	IBM MQ CVE-2025-21587, CVE-2025-4447 [CVSS base score 7.4]
✓		DT438713	IBM MQ CVE-2025-21587, CVE-2025-30698, CVE-2025-2900 [CVSS base score 7.5]
✓		DT439059	IBM MQ CVE-2025-30472 [highest CVSS 9.8]
		DT442277	Third party component updates for cumulative security update 9.1.0.29

IBM MQ cumulative security update 9.1.0.28 IBM i, Windows, UNIX®

(Last modified: May 2025)

Is Security	Is HIPER	known issue	Description
		DT428778	Third party component updates for cumulative security update 9.1.0.28

IBM MQ cumulative security update 9.1.0.27 IBM i, Windows, UNIX®

(Last modified: March 2025)

Security APAR	HIPER APAR	APAR	Description
✓		IT43835	IBM MQ CVE-2025-23225 [CVSS base score 6.5]
✓		IT47396	IBM MQ CVE-2024-21235, CVE-2024-21217, CVE-2024-21210, CVE-2024-21208, CVE-2024-10917 [CVSS base score 5.3]
✓		IT47597	IBM MQ CVE-2025-0975 [CVSS base score 8.8]
		IT47448	Third party component updates for cumulative security update 9.1.0.27

IBM MQ cumulative security update 9.1.0.26 IBM i, Windows, UNIX®

(Last modified: December 2024)

Security APAR	HIPER APAR	APAR	Description
✓		IT46250	IBM MQ CVE-2024-51470 [CVSS base score 6.5]
		IT47129	Third party component updates for cumulative security update 9.1.0.26

IBM MQ cumulative security update 9.1.0.24 IBM i, Windows, UNIX®

(Last modified: October 2024)

Security APAR	HIPER APAR	APAR	Description
✓		IT46890	IBM MQ CVE-2023-50314 [CVSS base score 5.3]
✓		IT46892	IBM MQ CVE-2024-21147, CVE-2024-21140, CVE-2024-21144, CVE-2024-21138 [CVSS base score 7.4]
		IT46887	Thirdparty component updates for cumulative security update 9.1.0.24

IBM MQ cumulative security update 9.1.0.23 IBM i, Windows, UNIX®

(Last modified: September 2024)

Security APAR	HIPER APAR	APAR	Description
✓		IT46080	IBM MQ CVE-2024-2511 [CVSS base score 3.7]
✓		IT46501	IBM MQ CVE-2024-40681 [CVSS base score 7.5]
		IT46435	Thirdparty component updates for cumulative security update 9.1.0.23
		IT46492	Altering an object to set cluster namelist with non existent namelist fails with AMQ8103E after applying APAR IT45710

IBM MQ cumulative security update 9.1.0.22 IBM i, Windows, UNIX®

(Last modified: March 2025)

Security APAR	HIPER APAR	APAR	Description
✓		IT45510	IBM MQ CVE-2024-31919 [CVSS base score 5.9]
✓		IT45710	IBM MQ CVE-2024-35116 [CVSS base score 5.9]
✓		IT45816	IBM MQ CVE-2024-22201 [CVSS base score 7.5]
✓		IT46058	IBM MQ CVE-2024-27268, CVE-2023-51775, CVE-2024-22353, CVE-2024-22329, CVE-2024-22354, CVE-2024-22329, CVE-2024-22354, CVE-2024-25026 [CVSS base score 7.5]
✓		IT46155	IBM MQ CVE-2024-21085 [CVSS base score 5.9]
		IT38931	Client REST API does not allow newline (CRLF) characters to be delivered to the destination.
		IT45156	HTTP POST requests submitted to the MQ REST API (mqweb) without Content-Type header "charset=UTF-8" are processed incorrectly
		IT45919	Thirdparty component updates for cumulative security update 9.1.0.22

IBM MQ 9.1.0.21 cumulative security update for IBM i, Windows, UNIX®

(Last modified: April 2024)

Security APAR	HIPER APAR	APAR	Description
✓	✓	IT45110	IBM MQ CVE-2024-25048 [CVSS base score 7.5]
✓		IT45762	IBM MQ CVE-2024-20952 and CVE-2023-33850 [CVSS base score 7.5]
✓		SE81096	IBM MQ CVE-2024-0727 and CVE-2023-6237 [CVSS base score 3.1]
		IT45007	Thirdparty component updates for cumulative security update 9.1.0.21
		IT45788	Upgrade the JRE level for IBM MQ V9.x to Java 8.0.8.20 for AIX, Linux, and Windows
	✓	IT45890	IBMJCEPlusFIPS RSA FIPS 140-2 cipher suites have been removed inthe latest Java runtime shipped with IBM MQ
		SE81342	MESSAGE AMQ9917 NOT DEFINED IN MQ 9.3.0.15+ ON IBM I

IBM MQ Fix Pack 9.1.0.20 IBM i, Windows, UNIX®

(Last modified: February 2024)

	APAR	Description
	IT34804	Subscription messages are delivered out of sequence when using clustered pub/sub with multiple receiver channels
	IT37819	MQ Java and .NET clients may receive duplicate messages after rolling back a transaction
	IT40977	IBM MQ create subscription fails with 'AMQ8135E: Not authorized'
	IT41300	strmqm with incorrect file permissions and ownership hangs during queue manager startup
	IT42126	Channel intermittently enters Initializing/Retrying loop and will not restart
	IT42851	Memory leak in the IBM MQ amqzlaa0 process
	IT43016	MQ Classes for Java throws a MQRC 2019 exception 'MQRC_HOBJ_ERROR' when attempting to close a queue
	IT43342	SIGFPE divide by zero in xruQueryDiskUsageVolumeGroup when RDQM volume group has zero size
	IT43740	MQ Bridge to SalesForce reports NullPointerExceptions when reconnecting to Salesforce
	IT44205	Third party component updates in fix pack 9.1.0.20
	IT44412	Enhancements to the modver utility
	IT44717	Allow suppression of protocol error caused by v5 Java/JMS clients
	IT44798	A ICH408I error can occur after upgrading the WebSphere Liberty Profile used by the IBM MQ Console to 22.0.0.12 on z/OS
	IT44910	MQ trace on server incorrectly captures user message data duringclient MQGET when using the "-d 0" flag on strmqtrc
✓	IT45026	IBM MQ CVE-2024-25016 [CVSS base score 7.5]
✓	IT45240	IBM MQ CVE-2023-4218 [CVSS Base score 5]
✓	IT45350	IBM MQ CVE-2023-44487 [CVSS Base score 7.5]
	SE79868	5725A49 MQ client connection fails with 2071 AMQ9211 on 65th connection within same job
	SE79913	MQ client application failure 3452
	SE80208	MQ FDC XC006001 XCSFREEMEMFN ON FIRST STRMQM AT V9.3
	SE80990	Keystores created using the default runmqckm settings are not compatible with IBM i

IBM MQ 9.1.0.19 cumulative security update for IBM i, Windows, UNIX®

(Last modified: December 2023)

Security APAR	HIPER APAR	APAR	Description
		IT43731	Thirdparty component updates for cumulative security update 9.1.0.19
✓		IT44821	IBM MQ CVE-2023-5072 [CVSS Base score 7.5]
✓		IT44961	IBM MQ CVE-2023-22081, CVE-2023-5676 [CVSS Base score 5.3]
		SE80793	Update OpenSSL from 1.1.1 to 3.0

IBM MQ 9.1.0.18 cumulative security update for IBM i, Windows, UNIX®

(Last modified: October 2023)

Security APAR	HIPER APAR	APAR	Description
✓	✓	IT41871	IBM MQ CVE-2023-45177 (security/integrity exposure) [CVSS Base score 5.3]
		IT44483	Thirdparty component updates for cumulative security update 9.1.0.18
✓		IT44585	IBM MQ CVE-2023-38039 (security/integrity exposure) [CVSS Base score 7.5]
✓		IT44623	IBM MQ CVE-2023-22045 (security/integrity exposure) [CVSS Base score 3.7]

IBM MQ 9.1.0.17 cumulative security update for IBM i, Windows, UNIX®

(Last modified: August 2023)

Security APAR	HIPER APAR	APAR	Description
✓		IT43737	IBM MQ CVE-2023-26048, CVE-2023-26049 [CVSS base score 5.3]
✓		IT44043	IBM MQ CVE-2023-21930, CVE-2023-21967, CVE-2023-21939, CVE-2023-21938 [CVSS base score 7.4]
		IT44057	Thirdparty component updates for cumulative security update 9.1.0.17
✓		SE80122	IBM MQ CVE-2023-2650 for OpenSSL (IBM i ) [CVSS base score 7.5]

IBM MQ 9.1.0.16 cumulative security update for IBM i, Windows, UNIX®

(Last modified: June 2023)

Security APAR	HIPER APAR	APAR	Description
✓		IT42945	IBM MQ CVE-2023-28513 [CVSS base score 5.9]
		IT43038	Thirdparty component updates for cumulative security update 9.1.0.16
✓		IT43717	IBM MQ CVE-2023-24998 [CVSS base score 7.5]
✓		IT43802	IBM MQ CVE-2023-32342 [CVSS base score 7.5]

Fix Pack 9.1.0.15 IBM i, Windows, UNIX®

(Last modified: May 2023)

Security APAR	HIPER APAR	APAR	Description
		IT34707	MQ classes for Java generated MQSTR format messages with messageproperties are always encoded in CCSID 1208
		IT35334	MQRC 2019 'MQRC_HOBJ_ERROR' when opening a queue using the MQ classes for Java
		IT35455	Provide feedback in the MQ error log when LDAP connection is slow
		IT36555	AMQ9635 error message displays arbitrary characters at the end of the CipherSpec in the MQ queue manager error logs
		IT38726	IBM MQ process amqzmuc0 may consume 100% CPU
		IT40332	amqrmppa generates FDC XC006001 from xcsFreeMemFn with error xecS_I_PRIVATE_MEMORY_ERROR and Comment "invalid head tag"
		IT41753	ENDMQM does not stop queue manager
		IT41964	IBM MQ generates corrupted file paths for .TRS files when a longMQ data path has been set
		IT42128	AMS PROTECTED MESSAGES LOSE MESSAGE PROPERTIES WHEN INVOLVED WITH SYSTEM.PROTECTION.ERROR.QUEUE
		IT42142	Error message AMQ9575 is incorrect for non-English languages
✓	✓	IT42194	IBM MQ CVE-2022-40237 [CVSS base score 6.5]
		IT42384	MQ-JMS application hangs when consuming a message from a v6.0 queue manager
✓	✓	IT42674	IBM MQ CVE-2022-43919 [CVSS base score 5.3]
		IT42810	Many ZM013000 ztmTidyUpXASessions trcE_UNEXPECTED_RM_ERROR FDCs from MQ code in application
		IT42940	Update level of libcurl supplied with MQ v9.2 LTS to 7.87.0
✓		IT43079	IBM MQ CVE-2023-28514 [CVSS base score 6.2]
		IT43183	IBM MQ resource adapter leaks LocalServer objects if an MDB's ejbCreate() method throws an exception
✓		IT43273	IBM MQ CVE-2023-27535, CVE-2023-23916 [CVSS base scores 7.5 - 9.1]
		IT43317	Third party component updates for Fixpack 9.1.0.15
✓		IT43335	IBM MQ CVE-2023-28950 [CVSS base score 5.1]
✓		IT43381	IBM MQ CVE-2023-26285 [CVSS base score 5.9]
	✓	IT43654	Queue manager might generate FDC RN189010 with error code rrcE_FILE_CORRUPT after applying fix of APAR IT42194.
		PH51546	Managed File Transfer (MFT) agent ABENDs with a B37-04 condition while transferring to a sequential data set.
		SE78231	Possible memory overwrite in job AMQZMUC0
		SE78457	ENDMQM looping in QUIESCING state when utility manager thread ended unexpectly
		SE78600	MQ authority record not shown.
		SE78659	Command WRKMQMQSTS with *CONNAME filter may hang or crash MQ manager.
		SE79052	MQGET in syncpoint return code variance
✓		SE79414	IBM MQ CVE-2022-4450, CVE-2023-0216, CVE-2023-0401, CVE-2022-4203, CVE-2023-0217, CVE-2022-4304 [CVSS base score 7.5]

Cumulative security update 9.1.0.13 IBM i, Windows, UNIX®

(Last modified: January 2023)

Security APAR	HIPER APAR	APAR	Description
✓		IT42204	IBM MQ CVE-2022-42436 (security/integrity exposure)[CVSS base score 4]
		IT42418	Update the WebSphere Liberty Profile to 22.0.0.12
		IT42456	Update the IBM JRE to level 8.0.7.20 (AIX, Linux, Solaris, and Windows) for IBM MQ
✓		IT42457	IBM MQ CVE-2022-21626, CVE-2022-21624 [CVSS base score 5.3]
✓		IT42613	IBM MQ CVE-2022-43902 [CVSS base score 6.5]
✓		IT42724	IBM MQ CVE-2021-37533 [CVSS base score 6.5]
		IT42725	Update Apache Commons Net level to 3.9.0 for IBM MQ

Fix Pack 9.1.0.12 IBM i, Windows, UNIX®

(Last modified: October 2022)

Security APAR	HIPER APAR	APAR	Description
✓		IT33206	IBM MQ CVE-2022-31772 [CVSS base score 5.3]
	✓	IT33299	When applying a fix pack, the "web\installations" folder will bedeleted if the "Installation Path" and "Data Path" are the same.
		IT35772	The Message BFGUB0068E does not reflect the error of MFT data directory doesn't have write permission
		IT36414	FDC with probe ID XC130003 is generated when an IBM MQ C client tries to connect
		IT36647	Enable allow lists for the IBM MQ JMS deserialization code
		IT36669	Set the Liberty web security property sameSiteCookie to "strict" on the mqweb server.
		IT36755	Intermittent problem where a duplicate message id is generated by the queue manager.
		IT37148	FDCs with probe identifiers RM632001/RM632002 are generated while running an IBM MQ C client application
		IT37895	The 'dspmq -x' command displays incorrect output when the current node is restarted as standby
		IT37969	The "ValidateAuth= No" qm.ini tuning parameter is not honored when AMQERR01.LOG is rolled over
		IT38158	Connection handle leak when a MQ-JMS application security exit reports an error
		IT38478	In MQ 9105, the output message of dmpmqaut with -p and -e optionwas misleading when authority is defined at the group level.
		IT38664	In IBM MQ RDQM, if a resource fails to start during boot then attempts to start the remaining DRBD resources are skipped
		IT38696	The Time Format in the Error Logs for an RDQM Queue Manager changes depending on how the Queue Manager is started .
		IT39548	Error message reported by crtmqm at MQ 9.1 needs to include additional diagnostic information
		IT39802	MQ-Java/JMS application appears to hang when connecting to a non-responsive queue manager
		IT39850	MQ managed .NET client using uppercase certificatelabel via hashtable or MQEnvironment property fails.
		IT39859	Clustered QALIAS/QREMOTE incorrectly republished as changed following queue manager restart
		IT39876	IBM MQ client connection on Linux causes internal error (Probe ID ZD061030)
		IT39919	MQ resource adapter logs large MQJCA4023 messages if an activation specification fails to connect to a queue manager
		IT39940	MQ Explorer adds an additional "/" to topic string when creatingSubscription with empty topic string
		IT39972	MQ Classes for Java/MQ JMS for Java with trace enabled can result in unexpected increased indentation for methods
	✓	IT40017	IBM MQ channels might go unresponsive with high CPU usage in channel process if channel synchronization record is corrupted
		IT40168	fteDeleteAgent with the -f option does not remove resource monitor publications from coordination queue manager
		IT40296	The DISPLAY CHSTATUS command incorrectly provides output for inactive channels
		IT40418	Agent incorrectly deletes all of the messages from a source queue at the end of a message-to-file transfer.
	✓	IT40467	FDC with Probe Id RM033006 and Message sequence number error AMQ9526E are generated when pipelining is enabled
✓	✓	IT40513	IBM MQ CVE-2018-25032 (security/integrity exposure) [CVSS base score 7.5]
		IT40648	FDCs generated in user application with ProbeId ZT424000 from component zutLookupRelease
		IT40791	IBM MQ Classes for JMS - Messages are not going to the backout queue after the backout threshold is hit.
		IT40968	Error: "AMQ8147E IBM MQ object SYSTEM.DEF.AMQP not found" is reported when using MQSC to recreate SYSTEM.DEF.AMQP
✓		IT40933	IBM MQ CVE-2022-27780, CVE-2022-30115 (security/integrity exposure) [CVSS base score 7.5]
✓		IT40979	IBM MQ CVE-2022-22475 and IBM MQ Appliance CVE-2022-22475 [CVSS base score 7.1]
		IT41012	IBM MQ agent process (amqzlaa0) terminates unexpectedly in queuefull scenario
		IT41047	Reconnectable client MQGET returned MQRC_CONNECTION_BROKEN without retrying the connection
✓		IT41133	IBM MQ CVE-2022-21496, CVE-2022-21434, CVE-2022-21443, CVE-2021-35561 (security/integrity exposure) [CVSS base score 5.3]
		IT41424	Update the JRE to level 8.0.7.15 on AIX, Linux, Solaris,Windows, and 8.0.7.10 on HP-UX for IBM MQ
		IT41438	Update the JSON Java library to level 20220320 for IBM MQ
✓		IT41495	IBM MQ CVE-2022-32206 (security/integrity exposure) [CVSS base score 4.3]
✓		IT41579	IBM MQ CVE-2022-22476 (security/integrity exposure) [CVSS base score 5]
		IT41589	Update the IBM MQ embedded Websphere Liberty Server to 22.0.0.6 plus APAR PH48187
		IT41650	Upgrade Eclipse Jetty to version 9.4.48
		IT41743	Update Bouncy Castle shipped by IBM MQ 9.1 LTS to version 1.71
		IT41744	Upgrade ICU4J for IBM MQ MFT to 71.1.
		IT41745	Update the Jetty library supplied with IBM MQ 9.1 LTS for use with the IBM MQ Bridge to Salesforce
		IT41746	Update IBM Sterling Connect:Direct Application Interface for Java (CDJAI) to 1.1.0.1
		IT41777	IBM MQ-RA activation specification running in non-ASF mode in WebSphere Application Server pauses prematurely
		IT41868	Update level of zlib supplied with IBM MQ 9.1 LTS to 1.2.12
		IT41881	Update level of JSON-C supplied with IBM MQ 9.1 LTS to 0.16-20220414
		IT41914	Update level of libcurl supplied with IBM MQ 9.1 LTS to libcurl 7.85.0
✓		IT42021	IBM MQ CVE-2022-34165 (security/integrity exposure)[CVSS base score 5.4]
		IT42024	Update the WebSphere Liberty Profile to 22.0.0.9 plus Interim Fixes PH46816 and PH48810
✓		IT42100	IBM MQ CVE-2021-2163 and IBM MQ CVE-2023-30441 [CVSS base score 7.5]
✓		IT42209	IBM MQ CVE-2022-24839 (security/integrity exposure)[CVSS base score 7.5]
		SE77537	Update Openssl to 1.1.1n
		SE77699	Add early check to AMS certificate and add more public key data to FFSTs
		SE77700	SETMQMSPL throws AMQ8916 message with DN with mixed case attributes on IBM i
		SE77770	AMS DN validation fails if a camel cased DN attribute appears before CN
		SE77839	Update OpenSSL to 1.1.1o
		SE78032	AMS reports error message incorrectly when journaling on PEM files.
		SE78353	Update OpenSSL to 1.1.1q

Fix Pack 9.1.0.11 IBM i, Windows, UNIX®

(Last modified: March 2022)

Security APAR	HIPER APAR	APAR	Description
		IT32558	DEFCLXQ(CHANNEL) is not honored if the CLUSSDR has multiple hostnames in the CONNAME attribute
		IT33130	IBM MQ explorer remote connection fails with SSL and FIPS enabled
		IT33764	IVT run on Wildfly-20 ignored DestinationLookup and ConnectionFactoryLookup activation properties
	✓	IT34083	Messages stuck in the cluster transmit queue intermittently due to cluster channel in use (AMQ9514E)
		IT34091	FDCs with ProbeIDs ZC004062 and ZC004040 from zcpCreateMessage
		IT34173	Defining a topic with PROXYSUB(FORCE) results in an incomplete set of proxy subscriptions.
	✓	IT34213	sethagrp -u command incorrectly reports 'High Availability configuration already migrated' when command actually fails.
		IT34422	Managed File Transfer schema Monitor.xsd incorrectly states that directory monitors can monitor more than 1 directory
	✓	IT34796	MQRC_TRUNCATED_MSG_ACCEPTED (2079) received unexpectedly by client
	✓	IT35080	When MQPUT is ready to give a message to a waiting MQGET, there is a timing window where a message can be malformed.
		IT35089	XMS .NET client applications fail to connect to queue manager when using tls and JNDI connectionFactory
		IT35254	Managed file transfer agent generates an FDC and terminates whenmultiple messages are processed having the same message id.
	✓	IT35258	Channels remain in initializing state for longer time while starting and message build up on SYSTEM.CHANNEL.INITQ
		IT35323	Queue manager does not release secondary log extents after log full condition (AMQ7463)
		IT35366	Memory leak using Publish/Subscribe with large RFH2 headers
		IT35434	AMQ6174 message is generated for MQSTR_r during an async consumewith convert
		IT35688	In IBM MQ if the permissions of blockaddr.ini are changed while the queue manager is running runmqsc does not report any error.
		IT35736	FDCs ZF089191 on queue manager startup or ZF177092 on dmpmqaut
	✓	IT35889	The rdqmdr command might revert queue manager to an earlier date
		IT35974	Managed transfers get stuck if a recoverable error occurs at the same time as a full frame of data has been transferred
		IT36174	QM configured with a large value for MaxChannels generates errors and FDCs
		IT36438	IBM MQ AMQ8079 warning message "ACTION" section is incomplete
		IT36584	"Unable to display an error message" error reported when installing or uninstalling RDQM packages
		IT36805	MQ trace not generated after failure in opening trace files
		IT36990	Queue manager not releasing media recovery log extents
		IT37008	Message data conversion from CCSID 1390/1399 TO 943 fails with error AMQ6047: Conversion not supported
		IT37199	Failure data capture (FDC) record header contains the first linefrom mqpatch.dat but it should be the last line
		IT37324	Applying fix pack from start menu fails with error "Windows cannot access the specified device, path, or file [...]"
		IT37502	WebSphere Application Server transaction recovery fails when activation specs are configured to use BINDINGS_THEN_CLIENT
	✓	IT37723	Mishandling of return codes from OS calls might result in Q filecorruption after file descriptor limit is hit
		IT37747	SIGSEGV: address not mapped when MQDISC is issued after automatic client reconnection
		IT37861	xtmTimerThread might fail to release memory when it ends
		IT37878	WebSphere Application Server activation specifications do not pause when an MDB calls setRollbackOnly()
		IT37881	SYSTEM.MQTT.TRANSMIT.QUEUE fills up with messages for MQTT clients that are no longer connected
✓		IT37896	IBM MQ CVE-2021-39034 [CVSS base score 5.3]
		IT37973	MQ internal program amqoampx hangs which prevents MQ REST web server from restarting
		IT37974	MQ REST web server ends after receiving SIGSEGV after running internal program amqoampx
		IT38146	When using CONNAUTH TYPE(IDPWOS) the queue manager is unable to authenticate a user account with no password
	✓	IT38375	Shared memory segments grow without limit in some MQ usage scenarios
		IT38420	Possible memory leak in amqrmppa or amqzlaa0 process when using secure connection to LDAP repository
		IT38491	dmpmqcfg objects missing when used with a z/OS queue manager
		IT38577	MQ Telemetry channel status shows incorrect values for the indoubtout and pending attributes.
		IT38733	A "STOP CHANNEL" request may fail when the channel is configuredwith multiple addresses.
		IT38752	Update IBM Sterling Connect:Direct Application Interface for Java (CDJAI) to 1.1.0.0 iFix27.
	✓	IT38799	Queue manager ends unexpectedly with FDC Probe Id HL214091 and error code hrcE_MQLP_NOSPACE
	✓	IT38839	RDQM queue manager fails due to an I/O error
		IT39029	MQCONN fails in application using isolated bindings. FDC probe ZC037020, component zcsAllocateAgent is written
	✓	IT39045	MQ media image incorrect and cannot be used to restore a queue
	✓	IT39093	Queue still damaged after being recovered from media image. FDC probe AQ123002 with arcE_OBJECT_DAMAGED error code
		IT39107	RDQM fail over is blocked if the queue manager is unable to end in a timely manner
✓		IT39183	IBM MQ CVE-2022-22489 (security/integrity exposure) [CVSS base score 8.2]
		IT39234	Access violation in MQDISC causes timeouts with IBM Integration Bus (IIB) on Windows
		IT39356	Many AT041015 atxStart arcE_XAER_PROTO FDCs but the error is in the external TM software
		IT39506	FDC with probe ID XC006001 with xcsFreeMemFn and XECS_I_PRIVATE_MEMORY_ERROR
✓		IT39558	IBM MQ CVE-2022-22316 [CVSS base score 5.3]
		IT39579	FDCs XC721050 and ZS142010 generated from the amqiclen process when uninstalling IBM MQ
	✓	IT39620	Queue manager fails to start with FDC XY465009 from component xcsCreateSimplePipe
	✓	IT39632	Queue manager fails to start due to amqzmuc0 crash while generating FDC KN467078 in ReconcileDurableSubscribers
		IT39666	Triggered channel does not start
		IT39751	Partial repository queue managers erroneously report AMQ9456 forremote queue managers
✓		IT39770	IBM MQ CVE-2021-39031 [CVSS base score 7.5]
		IT39821	Update the IBM MQ embedded angular.js to 1.8.2
		IT39822	Update Bouncy Castle shipped with IBM MQ 9.1 LTS to version 1.70
		IT39823	Update the SLF4J and Jetty libraries supplied with IBM MQ Bridgefor Blockchain/Salesforce
		IT39824	Update the IBM MQ embedded WebSphere Liberty Profile to 21.0.0.12 + PH42489
		IT39843	Update level of libcurl supplied with IBM MQ 9.1 LTS to 7.81.0
		IT39858	Update level of LDAP client supplied with IBM MQ 9.1 LTS to 6.4.0.25
		IT39888	Update level of Libedit supplied with IBM MQ 9.1 LTS to 0:68:0 (20210910-3.1)
		IT39910	Update DRBD and pacemaker packages supplied with IBM MQ 9.1
		IT40044	Update the JRE to level 8.0.7.5 on AIX, Linux, Solaris and Windows for IBM MQ
✓	✓	IT40099	IBM MQ CVE-2022-22325 [CVSS base score 5.1]
		IT40109	The rdqmstatus command fails with 'status not available'
✓	✓	IT40192	IBM MQ CVE-2022-21305, CVE-2022-21291, CVE-2021-35550, CVE-2021-35603 (security/integrity exposure) [CVSS base score 5.3]
	✓	IT40254	Slowdown in distributed queuing and high CPU usage on the receiver queue manager after applying fix for the APAR IT35383
		SE76719	MQ in transaction may error with AMQ7435: The MQ commit control exit program failed.
		SE76953	Update openSSL level to 1.1.1m

Fix Pack 9.1.0.10 IBM i, Windows, UNIX®

(Last modified: December 2021)

Security APAR	HIPER APAR	APAR	Description
		IT32667	Sender channel does not stop as expected
		IT32681	IBM MQ clustering allows an out-of-order internal cluster subscription to incorrectly replace a newer one
		IT33937	FDC records with probe ID XC035007 and XC364030 are generated during shutdown of MQ C/ C++ application
		IT34525	The amqsrua utility might fail with reason code 2033 (MQRC_NO_MSG_AVAILABLE)
		IT34994	Issuing MQCMD_CHANGE_TOPIC using the MQ Administration Interfacefails with MQRC_PARAMETER_MISSING
	✓	IT35378	Queue manager fails to started with FDC AQ234004 from aqlGetLogHdrOrigin
		IT35383	IBM MQ cluster receiver channel not responding due to loop caused byMQRC_OBJECT_CHANGED error
		IT35443	Queue manager hangs and becomes unresponsive. An FDC record is generated which reports xecS_E_NO_MEM
		IT35624	IBM MQ v9.0 LTS on HP/UX: A memory leak can occur in the amqrmppa process when TLS communication is used
		IT35687	In IBM MQ if qmstatus.ini permissions are changed while the queue manager is running, endmqm does not return an error.
		IT35827	amqcgskv32 triggered by runmqras creates zero-byte FDCs continuously
		IT36047	The destination queue of the durable subscription might change when an MQTT application restarts
		IT36233	IBM MQ MFT: Agent property monitorGroupRetryLimit=-1 not behaving asexpected
		IT36500	Transfer item fails with a BFGIO0006E error if the source agent abends and restarts partway through a transfer
		IT36684	Expired global units of work will now be logged via AMQ7497W in the queue manager error logs
		IT36740	AMQ9620E: Internal error on call to SSL function on channel withrc=5 from gsk_secure_soc_write
	✓	IT36756	Memory leak in amqrmppa process
		IT36824	The AMQ7472W message is unclear about automatic recovery of a damaged object
		IT36885	Enhancements to runmqras utility
		IT37357	Handle EINVAL error from AIX getuserattr call without writing FDC when username is longer than OS limit
		IT37576	IBM MQ runmqlsr process might enter an infinite loop and consume a high amount of CPU
		IT37622	Update level of LDAP client supplied with IBM MQ 9.1 LTS to 6.4.0.24
		IT37625	Client MQGET can return before the whole message has been received from the server
		IT37726	IBM MQ AMQP channel stops due to an OutOfMemoryError, and an FDC containing probe identifier XR10072014 is generated
		IT37745	AMQ9797E message might contain incorrect validation error code if local certificate validation fails
		IT38204	IBM MQ client applications stop consuming messages from a queue protected with AMS MCA interception.
		IT38312	Missing trace while processing secure socket read and write, andSIGSEGV memory exception
✓		IT38413	IBM MQ CVE-2021-22946, CVE-2021-22947 [CVSS base score 7.5]
		IT38451	Update level of Libcurl supplied with IBM MQ 9.1 to 7.79.1
		IT38452	Update level of Libedit supplied with IBM MQ 9.1 to 20210714-3.1
	✓	IT38477	MQ appliance firmware upgrade fails with error "Destination write failed"
		IT38488	Update the JRE to level 8.0.7.0 on AIX, Linux, Solaris Windows for IBM MQ
		IT38490	Update the IBM MQ embedded Websphere Liberty Profile to 21.0.0.9including APARs PH38929 and PH39418
✓		IT38503	IBM MQ CVE-2021-29842 [CVSS base score 3.7], CVE-2021-35517 [CVSS base score 5.5] & CVE-2021-36090 [CVSS base score 7.5]
		IT38575	Update level of GSKit supplied with IBM MQ 9.1 to GSKit 8.0.55.26
✓		IT38605	IBM MQ CVE-2021-28169, CVE-2021-34428, CVE-2021-34429 [CVSS base score 5.3]
		IT38643	Update DRBD and Pacemaker packages supplied with IBM MQ 9.1
		IT38693	On IBM MQ Explorer, the IBM MQ Knowledge Center link does not work.
		IT38793	IBM MQ v9.2 fix packs do not update the Bridge to Salesforce prereq .jar files
		IT38933	Upgrade Apache Ant for IBM MQ 9.1 to the latest version (Apache Ant 1.10.12)
		IT38934	Update Apache Commons IO library to version 2.11.0 for IBM MQ 9.1 LTS
		IT38935	Update SLF4J and Jetty shipped with IBM MQ V9.1 for the IBM MQ Bridge for Blockchain/Salesforce
		IT38989	Upgrade the Apache qpid proton-j level for IBM MQ to qpid proton-j 0.33.10
✓		IT39209	IBM MQ CVE-2021-35578, CVE-2021-35588, CVE-2021-41035 (security/integrity exposure) [CVSS base score 5.3]
		IT39219	fteShowAgentDetails can output incorrect/inconsistent information
✓		IT40901	IBM MQ CVE-2021-28169, CVE-2021-34428, CVE-2021-28163, CVE-2021-28164, CVE-2021-34429, CVE-2021-28165 [CVSS base score 7.5]
		SE75874	RUNMQRAS may not collect definitions when mqs.ini CCSID is not 37 from MQ 9.1.
		SE75994	Running strmqweb command has authority problem when submitting by different user profiles.
		SE76150	Update OpenSSL to 1.1.1l

Fix Pack 9.1.0.9 IBM i, Windows, UNIX®

(Last modified: August 2021)

Security APAR	HIPER APAR	APAR	Description
		IT32295	MQ classes for Java application hangs when using the BINDINGS transport and getting messages with the MQGMO_CONVERT option
		IT32415	Specifying the invalid -zipfile argument to runmqras on the MQ Appliance causes the current mqcli instance to exit
		IT33571	Channel Status bytesent and bytesrcvd attributes show incorrect value
		IT33849	MQSC DISPLAY command shows "Not authorized" multiple times
		IT33961	TX series application fails with SIGSEGV in check_target when used with MQ
		IT34004	xcsFreeMemFn xecS_I_PRIVATE_MEMORY_ERROR from amqrmppa during thread cleanup.
		IT34118	Miscalculation of expiry time for SYSTEM.CLUSTER.HISTORY.QUEUE messages.
		IT34230	Memory overwrite error using amqssslc sample
		IT34391	RDQM resource probe fails during "stop" action which then prevents auto-restart of the queue manager
		IT34867	Managed File Transfer agents hang when a managed transfer goes into recovery and subsequently times out.
		IT34897	The pmap command used by runmqras is incorrect on HP-UX
	✓	IT35027	MQ appliance may unexpectedly reload while accessing an SSL session
		IT35190	Enhancements to runmqras utility
		IT35459	The dmpmqcfg -c command fails with MQRC_ENVIRONMENT_ERROR when SHARECNV(0) set on SVRCONN
✓		IT35489	IBM MQ CVE-2021-29843 [CVSS base score 5.3] & IBM MQ Appliance CVE-2021-29843 [CVSS base score 5.3]
		IT35519	When using an IBM MQ 9.1 multi-instance queue manager a memory leak may be seen from the amqzlaa0 process
		IT35701	Messages left on source queue at the end of a successful message-to-file transfer.
✓		IT35704	CVE-2020-4938 for IBM MQ Appliance
		IT35941	Running fteCreateTransfer for a message-to-file transfer, where the source queue is empty, results in a failed transf
	✓	IT36110	Many PCF status messages flow through the channels of a Uniform Cluster even though no reconnectable applications are present
		IT36134	Vi editor key bindings unavailable within the runmqsc console
✓		IT36179	IBM MQ CVE-2021-38875 [CVSS base score 6.5] & IBM MQ Appliance CVE-2021-38875 [CVSS base score 6.5]
		IT36442	After reporting a AMQXR1016W warning, the MQ Telemetry service generates FDCs containing MQ reason code 2219
		IT36686	IBM MQ client or channel process reports 2195 and 2009 errors along with FDC with PROBE ID CO383010
		IT36700	SIGSEGV within TXSeries cicsas process when trying to get/convert a message
		IT36701	MQ-JMS applications connected to EBCDIC character set queue managers fail to move messages to BOQ or DLQ
		IT36702	Source disposition for transfer items is incorrectly processed if a managed transfer fails due to a transfer recovery timeout
		IT36707	Potential SIGSEGV in xcsFFSTS code
		IT36729	FDC from xcsFreeMemFn in amqrmppa process reporting xecS_I_PRIVATE_MEMORY_ERROR FROM during thread cleanup
		IT36750	The amqicfil utility fails when installing an interim fix of some components such as libcurl
		IT36752	MQ generates unnecessary Informational FDC reporting AT040010 atxClose arcE_XAER_PROTO
		IT36960	Transfer items transferred successfully before a transfer recovery timeout occurs may not be deleted.
		IT37089	Channel socket error detection logic can generate invalid internal protocol flow
		IT37135	Memory exceptions when JSON API calls such as json_object_iter_next are called from user code
✓		IT37174	IBM MQ Appliance CVE-2020-5008 [CVSS base score 3.7]
		IT37224	java.lang.NullPointerException thrown when multiple threads connecting to the QMGR concurrently
	✓	IT37251	MQ appliance might reload while processing RBM requests
✓		IT37277	172544, CVE-2020-7676, CVE-2019-14863, 172550, 172543, CVE-2019-10768 for IBM MQ Appliance
✓		IT37279	CVE-2020-25648 and CVE-2020-25692 for IBM MQ Appliance
	✓	IT37359	IBM MQ channel process amqrmppa hangs after memory exception
		IT37463	Update level of libedit supplied with IBM MQ 9.1 LTS to 0:66:0 (20210522-3.1)
✓		IT37465	IBM MQ CVE-2021-28165 [CVSS base score 7.5]
		IT37484	Upgrade Apache Ant for IBM MQ 9.1 to the latest level (1.10.10)
		IT37485	Upgrade Apache Commons IO for IBM MQ 9.1 to the latest level (2.10.0)
		IT37486	Update Bouncy Castle to level 1.69 on IBM MQ
		IT37487	Update the JRE to level 8.0.6.35 on AIX, Linux, Solaris and Windows for IBM MQ
		IT37488	Update SLF4J and Jetty shipped with IBM MQ V9.1 for the IBM MQ Bridge for Blockchain/Salesforce
		IT37489	Update the IBM MQ embedded WebSphere Liberty Profile server to v21.0.0.6
		IT37519	Update level of GSKit supplied with IBM MQ 9.1 to GSKit 8.0.55.24
		IT37565	Update level of libcurl supplied with IBM MQ 9.1 LTS to 7.78.0
		IT37645	Update DRBD and Pacemaker packages supplied with IBM MQ 9.1
✓		IT37719	IBM MQ CVE-2021-28165 [CVSS base score 7.5]
✓		IT38523	IBM MQ CVE-2021-2388, CVE-2021-2432 [CVSS base score 7.5]
		PH37175	MQ REST API reports MQWB0002E error message when requesting to list the queue manager status
		SE75505	IBM i COBOL APPs linked to AMQ0STUB and ILE C & RPG APPs linked to LIBMQM failed to co-exist in commit control
		SE75506	Update openssl to 1.1.1k
		SE75562	BLOCKADDR.INI should be created with CCSID 37 even in multi languages environment on IBM i
		SE75821	CPF9803 when receivers are being switched
		SE75918	MQ 9.1.0.8 transaction failure CPD83DE CPF8363 at commit or rollback

Fix Pack 9.1.0.8 IBM i, Windows, UNIX®

(Last modified: June 2021)

Security APAR	HIPER APAR	APAR	Description
		IT29638	The DISPLAY CHSTATUS command output for an AMQP client instance always shows AMQPKA(0) instead of the actual value
		IT29963	The JMSAdmin tool is partially shipped by the redistributable Java client "{version}-IBM-MQC-Redist-Java.zip"
		IT30755	IBM MQ web console browse messages panel does not show 1024 characters of message data
		IT31885	Output from the amqrfdm utility shows invalid value on the "Exp" or "Upd" attributes for a cluster object
		IT31909	MQTT Channel ends unexpectedly due to NullPointerException
		IT32137	A valid windows user ID with a space character in 12th position fails to connect to queue manager
		IT32321	Intermittent hang in dltdrsecondary command when run after making the queue manager secondary on the HA node
		IT32554	Channel exits written in Java are unable to access the local address used by the channel
		IT32860	Misleading errors reported by the redistributable client when user does not have write permissions for $HOME
		IT32871	A queue manager terminates due to a SIGSEGV within the execution controller process amqzxma0
		IT33209	dltdrprimary command does not completely remove DR definition from HA secondary appliance.
		IT33213	IBM MQ Appliance link aggregation interface goes down when LLDP is enabled on network switch
	✓	IT33261	The amqrmppa process terminates with memory exception in rppAdjustPool or rppLockPool
		IT33439	Memory leak in IBM MQ when using AMS
		IT33500	IBM MQ-JMS Connection's ExceptionListener is not called when a JMS Session's TCP/IP socket is disconnected
		IT33539	WeakCiphersEnabled field is not shown when dumping the channel configuration in FDC records
		IT33575	ProbeID XC130031 from kpiCancelWaiter when ending the queue manager
		IT33648	Runmqsc console on RHEL 8 reports error AMQ8521I: command completion and history unavailable
	✓	IT33668	MQCTL does not function as expected when issued using MQOP_SUSPEND option
		IT33852	IBM MQ Classes for JMS generate NullPointerExceptions when an application is accessing a queue or a topic
		IT33893	The output of 'dmpmqaut -p [Prinicpal] -e' is misleading when the IBM MQ authority is defined at the group level
	✓	IT33901	Performance degradation when using extended message selection
		IT33929	If an rdqmadm process is interrupted before completion then subsequent rdqmadm commands fail with AMQ3793E
		IT34095	The NETTIME parameter for the DISPLAY CHSTATUS command has unexpectedly high values
		IT34127	Additional diagnostics to investigate a SIGSEGV error reported by an amqrmppa process
		IT34131	The mqrc utility incorrectly modifies timestamp values when converting error logs between text and JSON format
		IT34336	MQGET fails with 2004 MQRC_BUFFER_ERROR
		IT34350	MFT File-To-Message transfer with delimiter greater than the default length generates two 0 byte messages
		IT34358	Displaying channel status for IBM MQ Telemetry channels using filter on CONNAME attribute may fail with NullPointerException
		IT34389	Duplicate stanzas in an IBM MQ client or queue manager configuration file are not processed
		IT34419	IBM MQ Appliance queue manager failover is unsuccessful if the queue manager file system is in use by another process
		IT34436	Zero byte content IBM MQ messages get generated during MFT File to Message transfers when using a prefix delimiter
		IT34463	Administrative REST API parameter ibm-mq-rest-gateway-qmgr cannot be used with the REST API discovery feature, and CORS.
		IT34486	MFT error message 'BFGSS0024E' does not provide details on which object it received the MQI error message.
	✓	IT34488	IBM MQ listener runqmqlsr not accepting new connections and also consuming high CPU
		IT34491	Files under the "java/jre64" directory have incorrect permissions after removing an IBM MQ fix pack on Solaris
		IT34533	IBM MQ Appliance HA queue manager reports partitioned state after the appliance is administratively shut down
		IT34573	The FTETopicSubscriptionCollector section of fteRAS takes a longtime to complete.
		IT34591	Destination agent generates an ABEND file when processing a managed transfer that has timed out
		IT34623	Managed File Transfer agent abends after migrating from version 8.0.0.3 or earlier.
		IT34684	JMSCC0108 reported by the IBM MQ resource adapter references the wrong version of the product documentation.
		IT34685	The dltmqm command may fail if run on multiple RDQM nodes concurrently
		IT34737	IBM MQ Appliance HA Queue manager configured for DR restarts/fails over unexpectedly
	✓	IT34822	A non-persistent message may be discarded if a waiting async MQGET times out while an MQPUT is delivering to it
		IT34850	Redistributable MFT command 'fteCreateEnvironment' repeatedly prepends to the PATH environment variable
		IT34895	After failure in IBM MQ appliance makedrsecondary command the HA/DR Queue manager failed to start on second node
		IT34899	IBM MQ Appliance "service show component-firmware" command does not report network module firmware version information
		IT34967	IBM MQ Classes for JMS BROKERPUBQMGR property validation failure with asterisk characters
		IT34978	Managed transfers get stuck if they are unable to connect to a file server using the SFTP protocol.
		IT35053	IBM MQ MFT source agent generates an FFDC with PROBE ID FFDC_051 after entering transfer recovery
		IT35074	Potential memory leak during of cached resources in multithreaded asynchronous consume client application
		IT35078	Improve error message when a certificate does not meet key length requirements
		IT35222	IBM MQ MFT: NullPointerException thrown by CommandHandler thread with FFDC probe ID FFDC_001
		IT35262	Call to xa_open fails with XAER_INVAL '-5 in XA configuration with TXSeries
		IT35281	Unable to apply fix pack created by crtmqfp in RHEL 8.x
		IT35322	Queue resource monitor submits two message-to-file transfers for the same message or message group on consecutive polls.
		IT35342	Upgrade ICU4J for IBM MQ MFT to 68.2
		IT35362	Application terminates with SIGSEGV when trace is enabled for AMS operations
		IT35398	SourceTransferStartExits are run twice for the same managed transfer following a network issue during negotiation
✓		IT35440	CVE-2020-8284
✓		IT35457	CVE-2019-20386, CVE-2020-1971, CVE-2018-20843, CVE-2019-15903, CVE-2019-11068, CVE-2019-18197, CVE-2020-8622, CVE-2020-8623, CVE-2020-8624 for IBM MQ Appliance
		IT35461	AMQ6150 error message states a timeout period of zero minutes.
		IT35488	Partial repository queue manager does not report "update not received" error for queue manager
✓		IT35522	CVE-2020-25654
		IT35582	IBM MQ MFT Message-To-File Transfer request using a protocol bridge agent (PBA) as the source agent fails silently.
		IT35811	Upgrade JRE level for IBM MQ to Java 8.0.6.26 for AIX, Linux, Windows, and 8.0.6.25 for Solaris.
		IT35834	TLS/SSL channel on distributed platform intermittently stops when partner channel is running on HPE Non Stop
		IT35881	IBM MQ appliance might reload while closing an LDAP connection
✓		IT35903	CVE-2020-14781 & CVE-2020-14782, CVE-2020-27221 and CVE-2020-14779 for IBM MQ CVE-2020-14781 , CVE-2020-14782 and CVE-2020-27221 for IBM MQ Appliance
		IT36123	Upgrade Apache Commons NET library for IBM MQ v9.1 LTS to the latest level
		IT36124	Update the version of Bouncy Castle shipped within the IBM MQ installation
		IT36125	Upgrade the Jetty libraries used by IBM MQ v9.1 for the IBM MQ Bridge to Salesforce/Blockchain
		IT36126	Update the IBM MQ embedded WebSphere Liberty profile server to 21.0.0.3
		IT36257	Update level of GSKit shipped with IBM MQ 9.1 LTS to 8.0.55.21
		IT36258	Update level of LDAP client supplied with IBM MQ 9.1 LTS to 6.4.0.23
	✓	IT36262	IBM MQ Appliance HA synchronization might be slow after restart of one of the appliances
		IT36295	Update DRBD and Pacemaker packages supplied with IBM MQ 9.1
		IT36336	Update level of libcurl supplied with IBM MQ 9.1 LTS to 7.76.1
✓		IT36383	IBM MQ CVE-2020-27225 [CVSS base score 5.9]
		IT36514	Update level of Libedit supplied with IBM MQ 9.1 LTS to 0:64:0 (20210216-3.1)
		IT36621	Changes to IBM MQ Appliance link aggregation LLDP configuration property
✓	✓	IT36796	CVE-2020-1968 for IBM MQ Appliance
	✓	IT37970	RDQM queue managers might fail to start after network outage between nodes
		SE74387	IBM MQ ISERIES 5724H72 option 3 installer needs to be refined.
		SE74554	IBM MQ on IBM i AMS policy with certificates with mixed case components in DN.
		SE74591	IBM MQ C/RPG/COBOL Client install with TLS and ONE-WAY authentication failed with private keystore
		SE74794	IBM MQ operations inside IBM i transaction
		SE74947	Update OpenSSL to 1.1.1i
		SE75343	Update OpenSSL to 1.1.1j

Fix Pack 9.1.0.7 IBM i, Windows, UNIX®

(Last modified: December 2020)

Security APAR	HIPER APAR	APAR	Description
		IJ23167	An internal error CWSMQ0286E is thrown when XMS .NET client tries to retrieve a message containing mqex folder in header.
		IJ25042	If backout queue is full, XMS .NET doesn't send the messages with RFH header to dead-letter queue.
		IT23170	Published messages are sent to the DLQ if API subscription destination resolves to non-local cluster queue.
		IT28461	Object damage after running amqldmpa utility in STANDARD bindings mode
		IT29334	IBM MQ MFT: Resource monitor RETRY behavior doesn't work
		IT29565	IBM MQ client app using MQCONNX to make an SSL connection fails with FDC from xehExceptionHandler with rriCopyMQSCO on the stack
		IT29662	AMQ8871E error reported when creating an authority record with authority 'crt' in an LDAP OAM configuration
		IT29783	Querying queue manager status may cause performance overheads on IBM MQ appliance
		IT29944	USEDLQ cluster channel attribute is not replicated across cluster members
		IT30274	A managed .NET or XMS application configured with multiple connection names for a queue manager hangs on reconnection
		IT30354	IBM MQ Appliance reloads if the queue manager file system is accessed using REST API during queue manager failover.
		IT30545	IBM MQ .NET managed client application returns 2059 when setting certlabel in hashtable properties
		IT30566	Capture additional IPMI diagnostic information in IBM MQ Appliance error report
		IT31118	MQCMIT of deep queue takes a very long time to complete, leading to a transmission queue buildup
		IT31225	IBM MQ Managed File Transfers from an SFTP server occasionally hang.
		IT31415	FDC record with probe ID 'OP008000' is generated when runmqdlq is processing messages on the dead letter queue.
		IT31458	IBM MQ client using distribution lists receives 2009 and an FDC with probe RM680078 is generated
		IT31513	An FDC-generating error in xcsInitialize() caused the process to loop repeatedly writing FDCs
	✓	IT31526	Queue manager ends because of file system full and fails to start with object damage error
		IT31856	Messages on SYSTEM.PROTECTION.ERROR.QUEUE cannot be processed by runmqdlq using a DESTQ rule
		IT31883	IBM MQ controller process (amqzxma0) stopped due to SIGSEGV after failing to allocate a shared memory set.
		IT31898	IBM MQ Appliance: 'makehaprimary' command incorrectly reports AMQ6682 error
		IT31901	Memory leak in the AMS (Advanced Message Security) component of IBM MQ
		IT31917	IBM MQ Explorer shows protocol value of [Unknown] in channel status of MQTT clients
		IT32081	Error log incorrectly reports remote certificate validation failed when local certificate is invalid
		IT32173	IBM MQ 9.1.0.3 LTS "dspmqver -a" generates FDC with probe XC037005, component xcsExecProgram
		IT32212	Topic handles are not closed when a Classes for Java IBM MQ queue manager disconnects
		IT32247	A queue manager became unresponsive when an access violation in lcsFNCLinkAdd caused the AMQZLAA0 process to abnormally end.
		IT32292	AMQ5542 message misleadingly mentions CHCKCLNT(REQDADM) when using LDAP for users or groups.
		IT32294	FDC with probe ID ZD048010 from zruMetaNotify at queue manager restart.
		IT32393	Object damage reported when queue file size reaches 2 TB
		IT32401	Improve diagnostics for socket failures when determining IP configuration
		IT32443	haregtyp /r reports incorrect error message when the command fails
		IT32481	IBM MQ reports FDC RM008005/rrxStopChannel after channel reconnects and adopts previous instance
		IT32491	The 'dspdrlink' command only shows output for one DR queue manager when run without a queue manager name
		IT32547	Improve tracing in amqscnxc
		IT32582	On Windows platform, the IIB HTTP listener process ABENDS and generates an FDC with PROBE ID ZC004040
		IT32583	A managed .NET client application initializes slowly in multi-user or heavily loaded environments
		IT32639	JMS ConnectionFactory property CNLIST does not work in Apache Tomcat
		IT32703	ValidateAuth=No does not preserve non-default file permissions on queue manager error logs
		IT32708	IBM MQ Java client application ArrayIndexOutOfBoundsException when using MQCCRED with TLS and SSLPEER
		IT32772	IBM MQ Appliance setdrlink and sethalink commands do not verify if the replicationIP is assigned to a valid local interface.
		IT32775	Invalid Managed File Transfer scheduled transfers cannot be deleted
		IT32854	Upgrade Qpid Proton-j level for IBM MQ to Qpid Proton 0.33.6
		IT32881	rdqminit command leaves behind orphaned resources if it is interrupted while it is still running.
		IT32924	IBM MQ Client abends in MQCTL when accessing AMS message, generatingFDC with Probe XC130031 - Access Violation
		IT32925	Update JMQI trace to remove unnecessary values from the options field
		IT32935	Managed File Transfer agent restart changes the time zone of scheduled transfer time.
	✓	IT32949	Queue manager terminates due to a SIGSEGV issued for amqrrmfa process with Probe ID XC130004
		IT32987	NullPointerException occurs when activation specification or WASlistener port is configured to use message retention
		IT33028	An IBM MQ client receives return code 2119 "MQRC_NOT_CONVERTED" fromMQGET when an RFH buffer exceeds the SSL transmission size limit
✓		IT33097	CVE-2020-4528
		IT33147	Running the endmqm command results in munmap_chunk(): invalid pointer error
		IT33175	Managed File Transfer protocol bridge agent generates an FDC when fteShowAgentDetails is run with the -d option
		IT33189	IBM MQ MFT fteCreateTransfer from a queue results in a zero byte file if the source queue is empty.
		IT33347	AMQ3879E and AMQ3812E errors when creating RDQM
		IT33352	Additional version checks on internal logger data structures
		IT33385	Inadequate error message is reported when dltdrprimary command fails due to HA queue manager started with strmqm -ns option.
		IT33398	FDC with Probe KN432051 from kpiAppSignalTask reporting missing signalapp.xx files.
		IT33424	Event message is not generated when a CLUSRCVR channel is stopped
		IT33457	The crtdrprimary command fails on the IBM MQ Appliance due to failed actions from the old definition
		IT33490	Triggered channels slow to start and messages build up on SYSTEM.CHANNEL.INITQ
		IT33552	Using IBM MQ Explorer against IBM MQ v9.0 z/OS to create a channel does not enable the selection of certain SSL ciphers.
		IT33590	Resource adapter deployed into embedded WebSphere Liberty profile started through WebSphere Liberty profile SPIs cannot make secure connections to IBM MQ.
	✓	IT33612	IBM MQ Appliance HA initialization error during reboot
		IT33769	MQGET returns MQRC_NO_MSG_AVAILABLE (2033) to browser when a message is available
✓		IT33772	CVE-2020-4682
✓		IT33880	CVE-2020-12762
✓		IT33881	CVE-2018-16878, CVE-2018-16877, CVE-2019-3885 for IBM MQ and IBM MQ Appliance
		IT33894	SourceTransferStartExits can be invoked twice for the same managed transfer.
		IT33914	Update the IBM MQ embedded angular.js to 1.8.0
		IT34002	IBM MQ adding/removing features from a Windows installation can damage the Web Console installation.
		IT34071	Update level of JSON-C supplied with IBM MQ 9.1 and 9.2 to 0.15-20200726
		IT34105	IBM MQ Explorer License on Windows is redirected to IBM MQ 9.0 content
		IT34218	Upgrade JRE level for IBM MQ 9.1 to Java 8.0.6.16 for AIX, Linux, and Windows, 8.0.6.15 for Solaris.
		IT34219	Update Bouncy Castle shipped by IBM MQ
		IT34220	Upgrade COMETD shipped with IBM MQ 9.1 for Linux (X86-64)
		IT34251	Upgrade Apache Ant for IBM MQ 9.0 and 9.1 to the latest level (1.10.9)
		IT34252	Upgrade Apache Commons IO for IBM MQ 9.1 to the latest level (2.8.0)
		IT34253	Update the IBM MQ embedded WebSphere Liberty profile from 20.0.0.6 to 20.0.0.9 + PH29368
		IT34385	Update level of GSKit shipped with IBM MQ 9.1 LTS to 8.0.55.17
		IT34399	Managed File Transfer agent intermittently generates an FDC when fteShowAgentDetails is run with the -d option
		IT34416	WebUI console.log file can fill encrypted storage on the IBM MQ Appliance
		IT34455	Update level of libcurl supplied with IBM MQ 9.1 LTS to 7.72.0
		IT34470	Update DRBD and Pacemaker prerequisite packages supplied with IBM MQ 9.1 for RDQM support
		IT34411	Update DRBD kernel modules supplied with IBM MQ 9.1 and 9.2 to DRBD version 9.0.25
✓		IT34473	CVE-2020-4590 for IBM MQ
✓	✓	IT34485	CVE-2020-4931 for IBM MQ Appliance & CVE-2020-4931 for IBM MQ
✓		IT34570	CVE-2019-19956, CVE-2019-20388, CVE-2020-7595, CVE-2019-17498, CVE-2019-11719, CVE-2019-11727, CVE-2019-11756, CVE-2019-17006, CVE-2019-17023, CVE-2020-12403 for IBM MQ Appliance
		IT34691	IBM MQ Appliance power outage may result in the IBM MQ Web Console reporting 'Error 500: Internal error'
✓		IT34814	CVE-2020-4581, CVE-2020-4580, CVE-2020-4579
✓		IT34927	CVE-2020-27216 for IBM MQ
		PH26041	Adding support for 64-bit JVMS into the IMS adapter - Java
		PH26255	IBM MQ JMS in CICS JVM server working with OSGI bundles fails with RC2058 MQRC_Q_MGR_NAME_ERROR.
		PH26607	IBM MQ MFT 'fteListAgents' command throws a java.lang.NullPointerException
		SE71857	Using MQRC to convert an IBM MQ error log file to JSON format results in corrupted Japanese characters on IBM i
		SE73841	IBM MQ TLS Channel failure at IBM i V7.4
		SE73865	5725A49 IBM MQ V9.1 "C" Client fails to run AMQRSSLC
		SE73922	Enable IBM MQ to use the default JRE on IBM i
		SE73962	IBM MQ V9.1 Frequent Internal Checkpointing on IBM i
		SE74522	Update OpenSSL to 1.1.1h

Fix Pack 9.1.0.6 IBM i, Windows, UNIX®

(Last modified: July 2020)

Security APAR	HIPER APAR	APAR	Description
		IT25989	Enhancements to runmqras utility
		IT26021	XMS .NET multithreaded async client consumer application fails to process poison messages in bindings mode.
		IT27465	Performance improvement in SVRCONN channel when result is client authentication failure
		IT27711	Trace enhancements for the IBM MQ Classes for Java/JMS
		IT27745	Incorrect error handling by amqrmppa process while using message selectors
		IT28799	IBM MQ FDCS with Probe IDs RM215010 and RM220005 are written after cluster transmission queue is set to NOSHARE
		IT28841	Running fteShowLoggerDetails generates a BFGUB0038E error, indicating that 'wmqfte.queue.manager.port' is not set.
		IT30601	Performance implications of IT28621 changes
		IT30847	IBM MQ Managed .Net client connecting to queue manager fails intermittently with MQRC 2195
		IT31238	IBM MQ Classes for Java application cannot get NameValueData from RFH2 when using CCSID 1200 with little endian encoding
		IT31428	IBM MQ control program dspmqtrn -e can incorrectly output some internally-created XA transactions
		IT31430	FDC record with ProbeID XC022001 is reported after upgrading the IBM MQ Appliance firmware
		IT31529	.NET client connecting with a TLS enabled channel fails with RC=2538 when using TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
		IT31562	IBM MQ fails to write to queue manager error log files after ERROR_SHARING_VIOLATION on Windows.
		IT31633	Managed transfers come out of recovery and immediately fail with a BFGIO0410E error.
✓		IT31663	CVE-2020-4592 for IBM MQ and CVE-2020-4592 for IBM MQ Appliance
	✓	IT31684	After strmqm -ns, OAM can write corrupted data records to its persistent store
		IT31703	MQRC 2085 generated if SYSTEM.ADMIN.CONFIG.EVENT is a cluster queue and not a qlocal
		IT31733	IBM MQ 9.1 Appliance displays wrong error message if it fails to create HA queue manager due to full errors file system
✓		IT31787	CVE-2020-4319 for IBM MQ and CVE-2020-4319 for IBM MQ Appliance
		IT31799	IBM MQ Appliance: crtdrprimary hangs when issued against an ended HA queue manager with a HA floating IP
		IT31820	PipeLineLength=2 channel ends and writes FDC with probe XC006001including error code xecS_I_PRIVATE_MEMORY_ERROR
		IT31832	fteCreateMonitor ignores any monitor metadata when re-creating a monitor from an input file using the -ix parameter
		IT31843	Using IBM MQ Explorer against z/OS to create a channel does not enable the selection of certain SSL ciphers.
		IT31900	IBM MQ Classes for JMS application unable to consume a JMS MapMessage containing Unicode escape sequences
		IT31958	Upgrade Apache Commons IO, Lang, Logging & Net JAR libraries for IBM MQ MFT
		IT31978	Upgrade ICU4J for IBM MQ 8.0, 9.0, and 9.1 to the latest levels
		IT31979	Upgrade Apache Commons FileUpload to 1.4 IBM MQ
		IT31987	MQRC error 2195 reported for empty mqclient.ini on Windows
		IT32036	Allow ALTER CHANNEL() CHLTYPE(AMQP) commands even when AMQPCAP is NO
		IT32052	dmpmqaut did not output an authority record for a specific object name, even though it existed in the OAM
✓	✓	IT32141	CVE-2020-4465
		IT32179	Upgrade Managed File Transfer to use an IBM MQ-specific version of JSch
		IT32203	IBM MQ Appliance commands fail with error AMQ6558E
		IT32233	IBM MQ logger does not check the eye catcher or version before using the log record
✓		IT32234	CVE-2019-1551
		IT32258	Memory leak in the amqzlaa0 process when the queue manager is processing MQSUBRQ call for a retained publication
		IT32261	AMQ9999 is reported when an unrelated channel reports AMQ9645
		IT32263	Add "DISPLAY CONN() TYPE() ALL" to IBM MQ runmqras
		IT32320	IBM MQ Appliance M2001 alert LED in the front panel shows incorrect status.
		IT32337	Managed transfers run slowly after upgrading to IBM MQ 9.1 LTS
		IT32434	Exclude /sys file system entries from IBM MQ Appliance error report
		IT32549	IBM MQ 9.1 incorrectly reports the OS as 'Windows server 2016' while running on 'Windows server 2019'
	✓	IT32630	IBM MQ Appliance reports high memory usage due to memory leak in corosync process
		IT32659	IgnoreSeqNumberMismatch writes an AMQ9703 error for each message
		IT32673	MSCS Cluster log reports error 126 MQ DLL not found, but the correct error is Resource Name is unknown
		IT32712	Supply DRBD kmod 9.0.22_3.10.0_1127-3PTF with IBM MQ 9.1 LTS
	✓	IT32745	IBM MQ Appliance hang followed by reload due to WATCHDOG restart
✓		IT32765	CVE-2020-4203
		IT32787	Upgrade JRE level for IBM MQ 9.1 to Java 8.0.6.10 for AIX, Linux, Windows, Solaris.
		IT32789	Update the IBM MQ embedded WebSphere Liberty profile from 19.0.0.12 to 20.0.0.6
		IT32824	Upgrade CometD shipped with IBM MQ 9.1 for Linux (X86-64)
		IT32834	Apache Ant as used by IBM MFT, updating to version 1.9.14
		IT32835	Update Bouncy Castle shipped by IBM MQ 9.1
		IT32898	Update level of GSKit shipped with 9.1 LTS to 8.0.55.16
		IT32899	Update level of libcurl supplied with IBM MQ 9.1 LTS to 7.71.1
		IT32900	Update level of json-c supplied with IBM MQ 9.1 LTS to 0.14
	✓	IT33013	RDQM HA: Incorrect CRTMQM call on replacement node can delete a queue manager
✓	✓	IT33099	CVE-2020-4498
✓		IT33101	CVE-2018-18066, CVE-2020-5208
✓		IT33103	CVE-2018-20852
✓		IT33104	CVE-2015-2716
✓		IT33105	Appliance CVE-2019-13232
✓		IT33106	CVE-2015-8035, CVE-2017-15412, CVE-2017-18258, CVE-2018-14567
		IT33159	Update DRBD and Pacemaker prerequisite packages supplied with IBM MQ 9.1 for RDQM support
		IT33239	Reduction of default transfer limit for GCM cipherSpecs to 2^24.5 TLS records
		IV96489	XMS.NET doesn't allow shared subscriptions even when CLONESUPP property is enabled
	✓	PH19731	Managed File Transfer source agent abends after a managed transfer resumes after coming out of recovery
		SE72996	MFT 9.0 slip install over version 8 might leave old version 8 files in IFS
		SE73143	Error log for runmqsc -c not written to system log on IBM i
		SE73540	Update OpenSSL to 1.1.1g

Fix Pack 9.1.0.5 IBM i, Windows, UNIX®

(Last modified: Jan 2024)

Security APAR	HIPER APAR	APAR	Description
	✓	IT26395	Non-ascii UTF-8 characters in messages put by the messaging RESTAPI are replaced with '?' characters
		IT26512	CHLAUTH USERMAP rules not applied when ChlauthEarlyAdopt=y and client user missing +connect
		IT27173	AMQPKA attribute incorrectly shown as being in seconds
		IT27694	SVRCONN channel 'stopped' status is ignored after queue manager restart allowing clients to connect
✓		IT28019	CVE-2020-4466 for IBM MQ and CVE-2020-4466 for IBM MQ Appliance
		IT28539	XMS .NET incorrectly require "get" authority on the target cluster queue for an alias queue
		IT28870	IBM MQ v9 probe ID AO221001 generated by amqzmuc0 process
		IT28907	JMS 2.0 DeliveryDelay performance issue
		IT29089	IBM MQ 9.1 queue manager migrated from IBM WebSphere MQ 7.1 generates FDC AD028008during startup
		IT29107	The "crtmqdir -a" command reports file errors under /var/mqm directory after fix pack installation
		IT29139	PCF response messages are written to the dead letter queue when .NET application uses PCF commands.
✓		IT29154	IBM MQ CVE-2021-38949
		IT29180	Adjust schedule time for daylight savings
		IT29254	XMS Managed .NET application takes several seconds to re-establish a connection with a queue manager after a failover
	✓	IT29354	Object damage when the queue file reaches 2TB
		IT29560	Some invocations of the dmpmqcfg utility reports AMQ5705E error
		IT29667	Installation of IBM MQ client for Windows fails with AMQ4739
		IT29679	Queue manager ends with memory exception in rppFindPID in amqrmppa
		IT29696	IBM MQ Appliance: HA group cannot be created after appliance is reinitialized by factory reset.
		IT29806	IBM MQ clients cannot process a CCDT file created by a newer queue manager
		IT30004	The misleading message "No matching authority records" is reported when the dmpmqaut command is run with the '-e' switch
		IT30032	Adding a custom classpath in the service.env file does not work as documented with the IBM MQ Telemetry service.
		IT30034	Protocol bridge agent configuration error is not reported on thefteCreateTransfer command.
		IT30096	IBM MQ .NET returns 2059 error instead of returning 2537 and 2538
	✓	IT30224	Queue manager crashes then cannot be restarted: FDC with probe HL080077
		IT30243	Managed File Transfer source agent generates FDC containing message "Failed to queue a delete open file request for file"
		IT30255	IBM MQ Classes for Java/JMS hang when trace is enabled for multiple threads running on different classloaders
		IT30348	Allow suppression of TCP/IP bad data FDCs
		IT30391	IBM MQ Appliance queue manager did not fail over to secondary node after resolving partitioned state
		IT30482	IBM MQ Telemetry service does not stop if java.properties is configured to enable remote JMX monitoring.
		IT30487	dmpmqcfg generates incorrect commands for IBM MQ for z/OS queues that are in a Queue Sharing Group (QSG)
		IT30519	AMQ8101S: IBM MQ error (0) has occurred when deleting RDQM QMGR.
		IT30603	'AMQ4172E There was an error when trying to set or retrieve information' is displayed when stopping channel from IBM MQ Explorer
✓		IT30605	CVE-2020-4310 for IBM MQ and CVE-2020-4310 for IBM MQ Appliance
		IT30610	Cluster channel is put into STOPPED state after running command REFRESH CLUSTER REPOS(YES)
		IT30633	IBM MQ Managed File Transfer tracing enhancements for SFTP transfers
		IT30634	IBM MQ FDC with probe ID XC130003 generated when disconnecting from queue manager
		IT30637	No system name results in FDCs containing probe ID DP016021beinggenerated every minute.
		IT30668	IBM MQ Classes for Java/JMS trace is not produced if an invalid character in the trace output file name is used.
		IT30670	Data synchronization takes excessive time to complete for Replicated Data Queue Managers.
		IT30677	IBM MQ Telemetry channel stops and generates FDC with Probe ID XR014005 when multiple MQTT clients disconnect simultaneously
✓	✓	IT30710	CVE-2020-4267 for IBM MQ and CVE-2020-4267 for IBM MQ Appliance
		IT30721	FDC with probe ID XC130031 (Access violation/SIGSEGV) reported during client application disconnect
		IT30722	IBM MQ client reports "AMQ9671:The PKCS #11 token password specified is invalid" when token password is correct
		IT30738	v7.0 JMS client application connecting to queue manager causes AMQ9504 PROTOCOL ERROR and FDC with probe ID RM680037
		IT30745	Improve AMQ9637 error message when client passes no certificate
		IT30751	Java application remains connected to queue manager if PCFAgent.connect() throws an exception
		IT30754	The IBM MQ fix pack installer incorrectly reports resources in use when an authority error is encountered
		IT30768	Managed transfers fail with a BFGBR0119E message, where the BFGBR0119E message stops after the word "because".
		IT30785	IBM MQ Appliance reports Invalid log type parameter for parse and mpgw log categories
		IT30812	IBM MQ resource adapter IVT sample application "wmq.jmsra.ivt.ear" fails to deploy to WebSphere Application Server
		IT30843	MQTT client connecting to a cluster queue manager results in client FDCs indicating MQRC_CLUSTER_RESOLUTION_ERROR
		IT31027	After applying maintenance channel reports AMQ9514 even though AdoptNewMCA function is enabled
		IT31067	amqsrua sample program fails if PSMODE is set to COMPAT
		IT31094	IBM MQ for Linux LTS v9.1 "MQSeriesRuntime" RPM package should no longer state that it provides "/bin/sh"
		IT31166	JMS FDC generated when bad file path is specified for the property "com.ibm.msg.client.commonservices.trace.outputName"
		IT31177	Update RDQM dependencies supplied with IBM MQ 9.1 LTS to DRBD version 9.0.22 and Pacemaker 1.1.20
✓		IT31283	CVE-2017-16231
		IT31286	On IBM MQ Appliance the show interface output might not show the network interfaces.
		IT31302	Unable to delete CHILD / PARENT from publish/subscribe hierarchy when the queue manager CCSID is 1208
		IT31311	MQRC_HCONN_ERROR, FDC with probe ID RM632001 generated from a call to reqGetConn
✓		IT31336	CVE-2020-4375
✓		IT31349	CVE-2020-4376 for IBM MQ and CVE-2020-4376 for IBM MQ Appliance
		IT31362	MQRC_XQH_ERROR (2260) when re-queueing messages with an MQXQH
		IT31399	A newly created or an existing Replicated Data Queue Manager (RDQM) does not start after upgrading to IBM MQ 9.1.0.4 fix pack.
		IT31406	IBM MQ failure data capture (FDC) record has truncated trace history
		IT31412	Update level of GSKit shipped with IBM MQ 9.1 LTS to 8.0.55.12
		IT31420	IBM MQ Appliance generates truncated error report
		IT31431	IBM MQ Appliance createcert and createcertrequest commands truncate last character of DN if escape character present
		IT31459	userrestore command on IBM MQ Appliance fails with AMQ6650
		IT31503	Upgrade JRE level for IBM MQ 9.0 and 9.1 to Java 8.0.6.5 for AIX, Linux, Windows, Solaris.
		IT31552	RDQM Preferred Location not being used correctly for stopped queue managers or when one node is down.
		IT31578	Allow usernames in CHLAUTH rules to be matched case-insensitively
		IT31623	IBM MQ Classes for JMS incorrectly treat messages with headers that have a CCSID field set to -2 as poison messages.
		IT31768	Upgrade Jetty, CometD and SLF4J shipped with IBM MQ 9.1 for Linux (X86-64)
		IT31772	Update the IBM MQ embedded WebSphere Liberty profile from v19.0.0.9 to v19.0.0.12
		IT31794	Upgrade Apache Commons BeanUtils & Apache Commons Digester JAR levels for IBM MQ
		IT31871	Update level of Libedit supplied with IBM MQ 9.1 LTS to 0:63:0 (20191231-3.1)
		IT31872	Update level of libcurl supplied with IBM MQ 9.1 LTS to 7.68.0
		IT31873	Update level of LDAP client supplied with IBM MQ 9.1 LTS to 6.4.0.20
✓		IT31911	CVE-2018-19519 & CVE-2019-11745
		IT31946	Update level of GSKit shipped with IBM MQ 9.1 LTS to 8.0.55.14
	✓	IT32030	IBM MQ Appliance: RBM CLI login failures could cause unexpected appliance reload
✓	✓	IT32055	CVE-2020-4320 for IBM MQ and CVE-2020-4320 for IBM MQ Appliance
		IT44972	IBM MQ CVE-2019-15601
		PH19599	MFT failed to recall HMS migrated target data set with OBTAIN DSNERROR RC=4 (0X4)
		SE70886	MQM400-Validation of signed AMS message fails with AMQ9070
		SE72277	RUNMQCHI AMQ9509E: Program cannot open queue manager object. Reason code 2500
		SE72391	Update OpenSSL to version 1.1.1d on IBM i
		SE72595	Java MQCONNX fails with CC=2, RC=2009 in non-threaded environment on IBM i
		SE72648	Agent process AMQZLAA0 MCH6902
		SE72842	CHGMQMCHL couldn't set SCYUSRDATA with string starting with "*"

Fix Pack 9.1.0.4 IBM i, Windows, UNIX®

(Last modified: December 2019)

Security APAR	HIPER APAR	APAR	Description
		IJ10496	XMS .NET applications throw mqrc 2012 if session.close is issued within the transaction and XMS is participating in XA transactions
		IT20958	AMQ5531 is reported during AMQP service startup if queue manager uses LDAP authentication
		IT24272	Unexpected return codes from DISPLAY PUBSUB and DISPLAY POLICY MQSC commands
		IT25059	After REFRESH CLUSTER, FDCs with probe RM702021 component rrmCheckSubsForQMgr appear
		IT25846	Queue manager writes FDC with Probe RN194031 rrmCheckSubs when Full Repositories are both demoted.
		IT26575	MFT File Loggers fail to connect to queue manager with MQCSP authentication and password greater than 12 characters.
		IT26835	SIGSEGV memory exception inside ldap_return_one_msg(). Queue manager becomes unstable
		IT27439	Setting IBM MQ client CCSID to 1200 causes connections to fail with 2059 or 2540
		IT27488	Authorization error on trying to connect AMQP client to service when using LDAP for user authentication
		IT27631	Provide a command to obtain IBM MQ call stacks on the IBM MQ Appliance if a hang occurs.
		IT27736	Insufficient diagnostic information in FDC with probeID DP016021from component dpcInitDaemon
		IT27752	amqldmpa ending with memory exception (e.g. SIGSEGV) followed by OS pid reuse causes queue manager hang
		IT27773	Allow dynamic tracing of LDAP client library code shipped with IBM MQ.
		IT27834	A cluster repository loses sight of some other queue managers after a refresh cluster is done
		IT27950	IBM MQ resource adapter fails to match a ManagedConnection after it was previously used in a transaction that was rolled back
		IT27986	Using MQRC to convert an IBM MQ error log file to JSON format results in corrupted Japanese characters
		IT28044	IBM MQ Appliance: The createbackupfs command returns syntax error
		IT28238	The output of the runmqsc command "alter qmgr ?" is not properly formatted.
	✓	IT28370	IBM MQ Appliance reloads after inquiring the status of HA queue managers.
		IT28660	JMS connections failing on z/OS 64-bit when trying to use the WebSphere Message Broker adapter with the IBM MQ 9.1 JMS client
		IT28694	Replicated data queue manager creation might sometimes fail on thePrimary node with AMQ3821E error.
	✓	IT28774	IBM MQ Appliance GUI error processing Management Actions
		IT28808	amqspdbg is not correctly printing large numbers for totalSetSize
		IT28817	Performance degradation when using JMS MessageListeners to consume non-persistent messages outside of a transaction
		IT28897	IBM MQ Telemetry service fails with OutOfMemoryError after multiple MQTT V3.1.1 client takeovers
		IT28932	NullPointerException when creating a JMSContext with a JTA UserTransaction
	✓	IT28937	Queue managers can become partitioned after IBM MQ Appliance shutdown and FDC with Probe ID DP138011 generated
		IT28958	The uninstallRDQMsupport script fails to uninstall IBM MQ packages
		IT29032	Replicated Data Queue Manager fails to start on any of the nodes.
		IT29065	IBM MQ client MQCONN failure rc=2035 when shortname is sourced from Case-sensitive LDAP attribute
		IT29066	AMQ3817E is returned when creating Replicated Data Queue Manager (RDQM)
		IT29088	Partial FDC record written by amqzlaa0 process followed by hang or abend of that process
		IT29183	Configuring floating IP address in RDQM environment may fail with AMQ3817E and AMQ3873E
		IT29238	"AMQ7047E: An unexpected error was encountered by a command" received when installing the MQSeriesWeb component in Docker
		IT29252	Resource adapter deployed into WebSphere Liberty profile by the JCA-1.7 feature cannot use dynamic outbound configurations.
		IT29261	Unexpected error messages reported by dsphagrp command
		IT29281	IBM MQ process hangs after memory exception SIGSEGV
		IT29329	HTTP error 500 is received when trying to access IBM MQ console using port 443.
		IT29386	IBM MQ Telemetry service fails to start, and generates an FDC with probe ID XR063035.
		IT29413	IBM MQ Explorer displays queue manager startup field as "Interactive (manual)" instead of "Automatic"
		IT29421	Unneeded FDC with probe AO009010 from apiCreateDynamicQueue, major error code lrcE_SECURITY_ERROR
		IT29422	AMQ3873E error when attempting to add a floating IP address using the rdqmint command
		IT29430	IBM MQ 9.1: runmqras does not collect IBM MQ software tag file information
	✓	IT29434	An IBM MQ Classes for JMS application hangs when using the automatic client reconnect function
	✓	IT29442	Memory exception in atmRecoveryAcquireDataMutex followed by Object Damage error AMQ7472
		IT29451	MQPUT fails with MQRC_CLUSTER_RESOLUTION_ERROR (2189) but the rc should be MQRC_OBJECT_CHANGED (2041)
	✓	IT29472	strmqm fails with xecP_E_ACCESS_DENIED after system reboot
	✓	IT29473	Running "endmqm -s" on RDQM queue managers leaves them outside of HA control.
		IT29480	High CPU observed in amqzmur0 or amqzmuc0 processes when using SuppressMessage tuning attribute.
		IT29497	IBM MQ Appliance: Expose "http-convert" logging target category
	✓	IT29528	Deadlock in publish/subscribe followed by queue manager hanging with LONG_LOCK_WAIT FDCs
	✓	IT29566	An MFT resource monitor with a NoMatch trigger condition fails to submit the monitor task and generates an FFDC
		IT29602	The AMQ9288 message and documented limit of TLS records sent are incorrect
	✓	IT29612	IBM MQ .NET client sends incorrectly aligned protocol flow
		IT29659	IBM MQ Explorer logs a "Widget is disposed" error
		IT29692	IBM MQ traces the wrong byte position for the failing character if data conversion fails
	✓	IT29695	SIGSEGV within function rfxAddCLQ and queue manager will not start
	✓	IT29716	amqrmppa terminates with MQRC_SYNCPOINT_NOT_AVAILABLE followed by an error in MQDISC
		IT29719	dmpmqcfg for subscriptions is missing some '+' for DEST, DESTQMGR and DESTCORL.
	✓	IT29729	An IBM MQ Classes for JMS application might hang when using automatic client reconnect after network interruptions
		IT29738	IBM MQ 9.1: Performance degradation when large number of subscriptions use selectors
		IT29787	MQMD.UserIdentifier is not space-padded if the user was looked up from LDAP
✓		IT29798	CVE-2019-4614
		IT29811	IBM MQ MFT: Transferring files to a destination Protocol Bridge Agent fails with error BFGBR0119E.
		IT29837	RDQM synchronization may become extremely slow or fail when resuming a suspended node.
		IT29838	Add charts (widgets) to the IBM MQ 9.1 console generates FDC referencing XC130004 from amqzlsa0
✓	✓	IT29839	CVE-2019-4655
		IT29854	IBM MQ Console chart widgets stop updating
		IT29868	Allow IBM MQ AMS applications to use GSKit in non-FIPS mode
	✓	IT29902	An IBM MQ MFT source agent enters recovery when an invalid destination agent QMgr is specified on a transfer request
		IT29910	Update the JSch library version shipped with IBM MQ for the IBM MQ Managed File Transfer for SFTP transfers
		IT29973	Enhance tracing in the IBM MQ Explorer Managed File Transfer plug-in when determining agent status.
		IT29978	IBM MQ Console creates multiple non-durable subscriptions for the same chart widgets.
		IT30058	Channel status "STOPPED" was not saved so after restarting the queue manager it showed "RETRYING"
✓	✓	IT30070	CVE-2019-4560
		IT30074	Improve channel detection of socket errors
		IT30124	Queue manager unavailable under high load. Reports AMQ6150: IBM WebSphere MQ semaphore is busy
		IT30127	IBM MQ Trigger monitor for Windows produces many FDC records if console code page is changed
		IT30146	Channel status for SVRCONN channels not being remembered after queue manager restart
	✓	IT30148	An IBM MQ MFT agent running a resource monitor hangs when in recovery
		IT30159	Setting the "traceEnabled" configuration property to true on the IBM MQ resource adapter does not enable trace
		IT30160	Queue manager can show incorrect LDAPCONN QMSTATUS when using IDPWLDAP authinfo object
		IT30207	Upgrade JRE level for IBM MQ 9.0 and 9.1 to Java 8.0.5.40 for AIX, Linux, Windows, Solaris.
	✓	IT30234	Message delivery to an MDB stops when using the IBM MQ resource adapter, later resulting in the JEE server hanging on shutdown
		IT30241	IBM MQ MFT error code BFGCL0181I is designated as information when it should be error
		IT30267	After REFRESH CLUSTER the DISPLAY CLUSQMGR output lists more queue managers than it should
		IT30275	Update IBM MQ Java SE common services component to use eight-digit thread identifiers in trace
		IT30293	Update Bouncy Castle .jar files as embedded within the IBM MQ installation
	✓	IT30321	IBM MQ JMS poison message handling fails with messages using little endian encoding, MQMD.encoding = 0x222
		IT30366	Truncation of queue manager/queue names in AMQ9785 message
		IT30367	Inconsistent MQSC output produced by dmpmqcfg
		IT30371	IBM MQ might return incorrect values for accounting or statistics AverageQueueTime
✓	✓	IT30396	CVE-2018-14348, CVE-2018-0495 CVE-2018-12404, CVE-2018-0734 CVE-2019-1559, CVE-2019-9511 CVE-2019-9513, CVE-2019-1563 & CVE-2019-1547
✓	✓	IT30490	CVE-2019-11479, CVE-2019-11478, CVE-2019-11477 & CVE-2018-15473
		IT30413	Use of the sample IBM MQ MFT ProtocolBridgeCredentials.xml file results in a parsing error reported in the agent's event log
✓		IT30429	CVE-2019-4285, CVE-2019-4305, CVE-2019-4304, CVE-2019-9515, CVE-2019-9518, CVE-2019-9517, CVE-2019-9512, CVE-2019-9514, CVE-2019-9513, CVE-2019-4441
		IT30457	Upgrade Jetty, CometD and SLF4J shipped with IBM MQ 9.1 for Linux (x86-64)
		IT30464	dspmqver returns wrong path for Java on IBM MQ 9.1 for Windows
		IT30479	High-CPU issue in amqzmuc0 and media recovery LSN not moving forwards
		IT30581	Update level of libcurl supplied with IBM MQ 9.1 LTS to 7.66.0
		IT30582	Update level of LDAP client supplied with IBM MQ 9.1 LTS to 6.4.0.19
		IT30585	Update DRBD kernel modules supplied with IBM MQ 9.1 LTS to DRBD version 9.0.20
		IT30606	Update level of GSKit shipped with IBM MQ 9.1 LTS to 8.0.55.11
	✓	IT30614	crtmqm and mqcli commands fail after running userrestore in a new or reinitialized(factory reset) IBM MQ Appliance.
✓	✓	IT30649	CVE-2019-4656
		IT30667	The endmqm command does not wait for the AMQP service to end.
	✓	IT30707	IBM MQ Appliance reloads when trying to log an event against a disabled SNMP log category
✓	✓	IT30828	CVE-2017-11462
✓		IT30829	CVE-2019-4620
✓		IT30830	CVE-2019-4619
	✓	IT30904	IBM MQ Appliance reloads after crash on SNMP component
✓		IT30928	CVE-2019-4719
	✓	IT30974	IBM MQ Appliance queue manager status commands return with UNKNOWN status
	✓	IT30975	IBM MQ Appliance unexpectedly reloads (WATCHDOG RESTART) causing queue managers to go into partitioned state.
		IT31041	A new SSL/TLS connection fails to be established, AMQ9620 message reports that GSK_SECURE_SOC_INIT returned error code 9
	✓	IT31081	IBM MQ Appliance reloads following a SIGSEGV exception in HTTP component
		IT31144	Supply JDBC libraries for Oracle 18c and Oracle 19c on Windows
		SE72255	IBM MQ 9.1 ON IBM I, RUNMQCHL IS SLOW TO TERMINATE WHILE QUEUE MANAGER SHUTTING DOWN.

Fix Pack 9.1.0.3 IBM i, Windows, UNIX®

(Last modified: July 2019)

Security APAR	HIPER APAR	APAR	Description
		IJ12535	FDC with probe ID DN121701 reported by MQManagedReconnectableThread.Run()
	✓	IJ12614	XMS .NET application doesn't honor header compression properties set in the application for unmanaged mode.
		IT20943	An IBM MQ JMS MessageConsumer.receive(long) call might not return immediately when closing the consumer.
		IT24805	Profile name '**' created on IBM MQ Appliance on UNIX platforms prevents IBM MQ Console authentication records from displaying
		IT25636	Inadequate error message is reported when RDQM configuration fails due to incorrect file permission.
		IT25878	AMQ9777 error message not being reported if user is blocked by CHLAUTH rule and ChlAuthEarlyAdopt is enabled
✓		IT25916	CVE-2019-4261
		IT25954	Not all reconnectable connections from the same client reconnect after abnormal queue manager termination
		IT26040	Running command "mq" in config mode causes IBM MQ Appliance to reload.
		IT26389	IBM MQ client application reports memory access exception in ChannelReceive thread.
		IT26410	With CHAD enabled a new SVRCONN channel results in AMQ9498: The MQCD structure supplied was not valid.
		IT26614	IBM MQ dot net (.NET) client channel ends abnormally when the heartbeat (HBINT) is reached
		IT26699	AMQ9544 error message is incorrectly reported in a scenario where AMQ9527 should be reported
		IT26868	IBM MQ client fails to connect to queue manager using the second IP address in CONNAME with client using CCDT
		IT27021	.NET client application connecting with elliptical curve cipher suite fails with MQRC_Q_MGR_NOT_AVAILABLE
		IT27085	IBM MQ Appliance WebUI does not show object status data
		IT27169	RDQM queue manager does not fail over if a symbolic link is used for the data directory (/var/mqm).
		IT27177	IBM MQ Dot Net application sets incorrect NameValueLength field in MQRFH2 when NameValueData has special characters
		IT27271	Messages build up on SYSTEM.MQTT.PERSISTENT.STATE queue with multiple MQTT client takeovers in a short time period
		IT27273	IBM MQ client applications configured for reconnection do not reconnect when the queue manager fails over using MSCS.
		IT27352	IBM MQ 9.1.0.0: FDC XC076012 "AMQ6047E: Conversion not supported." was created during non-English installation
✓		IT27359	CVE-2018-1661, CVE-2018-1666, CVE-2018-1668, and CVE-2018-0734
		IT27403	AMQ9213: A communications error for Unexpected flow
		IT27407	HA queue manager configured for DR fails to start after disabling and re enabling DR interface.
		IT27478	IBM MQ Appliance: mqcli abnormally terminates if cli timeout is set to nonzero value.
		IT27490	Channel Retry does not function correctly if PING CHANNEL is executed while the channel is in retry state.
		IT27639	IBM MQ Appliance IPMI Serial-Over-LAN session from ipmi tools may be left open forever if not closed correctly
		IT27770	When a queue manager is created using the crtmqm command, this is not reported in the system error log
		IT27791	IBM MQ channel status output shows blank MCAUSER when negotiated SHARECNV value is zero
		IT27846	MQRC_BUFFER_LENGTH_ERROR (2005) error message when displaying authority records in the IBM MQ Explorer
		IT27849	IBM MQ async consume client might hang during MQDISC
✓	✓	IT27859	CVE-2019-4141
		IT27882	MFT agent writes BFGAG0189W message to its event log during startup.
		IT27887	IBM MQ Console 9.1 throws a NullPointerException when attempting to delete 'create authority records'
		IT27924	A race condition to close a TCP/IP socket could cause TIME_WAIT status on the server
		IT27932	Enhancements made to DR health check routines to prevent unnecessary failover on IBM MQ Appliance.
		IT27944	IBM MQ Classes for JMS throw a java.lang.NullPointerException from JmsProducerImpl
		IT27960	IBM MQ issues CO628001 ccxStageReAlloc rrcE_BAD_PARAMETER when SHARECNV(0)
		IT27964	IBM MQ Appliance reports AMQ5531E messages when retrieving queue manager status through WebUI or REST
		IT27974	The client user name is truncated in an AMQ9777 error message.
		IT27995	The IBM MQ Classes for JMS do not invoke a message-driven bean (MDB) application if the message body is zero bytes.
		IT28022	AMQ9469 in Full Repository error logs when cluster transmission queue has custom cap expiry set.
		IT28036	IBM MQ Appliance DPOS diagnostics reporting failing to load certain modules
		IT28062	While getting an empty message, XMS .Net applications reports CWSMQ0282E and crash.
		IT28107	AMQ9513 error message doesn't include current MaxChannels value
		IT28129	IBM MQ resource adapter ignores the configured temporary model queue in a WebSphere JNDI defined connection factory
		IT28131	IBM MQ RDQM: The QM status on two of the three nodes is UNKNOWN due to incorrect file permission settings.
		IT28153	Memory exception FDC with Probe ID XC130004 in function kqiPutMessageToSubscriber if subscriber queue is put-inhibited.
		IT28160	Update the DRBD kernel module supplied with IBM MQ 9.1 LTS to 9.0.14_3.10.0_957-1
		IT28185	Crashed cluster sender channel is never restarted by repository manager
		IT28193	MFT monitors stop working after an agent reconnects to its agent queue manager
		IT28229	IIB embedded MFT agent fails to start and generates an ABEND file
		IT28243	IBM MQ incorrectly writes channel completion messages to the channel initiation queue for SVRCONN channels
	✓	IT28259	IBM MQ 9.1 Appliance queue manager stops and restarts if errors file system is full
		IT28279	AMQ7472W error message is missing information.
		IT28289	After applying the IBM MQ 8.0.0.7 or later Fix Pack, the IBM MQ Explorer MFT plug-in displays an "assertion failed" error message
		IT28369	IBM MQ Appliance reports that the encrypted file space is full
		IT28397	SET AUTHREC command fails with AMQ8871: Entity, principal or group not known
		IT28404	Issuing <ctrl+c> during password entry for runmqsc leaves terminal without echo
		IT28498	Inadequate information present in FDCs generated due to failure of mapping CCSID correctly.
		IT28500	FDC with Probe ID RM680065 and AMQ9504E Error are reported when a Java or managed .NET client issues an object inquiry
		IT28511	The setmqini command cannot modify the QMErrorLog qm.ini stanza on the IBM MQ Appliance
		IT28555	IBM MQ 8.0.0.11 client with client-side security exit fails to connect gets AMQ8077 authority errors
✓		IT28593	CVE-2019-1559
		IT28605	CICS/TXSeries IBM MQ application writes FDC probe ZC004062 and abends when stopping with -f or -c option
		IT28608	JMSAdmin Tool does not recognize the TEMPTOPICPREFIX forConnectionFactory objects.
		IT28621	IBM MQ reports AMQ9620E error 5 in function gsk_secure_soc_read
		IT28666	IBM MQ Client with client-side security exit reports invalid CLNTUSER value in AMQ9777 error
		IT28682	rdqmstatus truncates floating IP to 14 characters
✓		IT28692	CVE-2019-4621
✓		IT28699	CVE-2019-4049
	✓	IT28706	IBM MQ uses excessive memory for isolated bindings connections
✓		IT28709	CVE-2019-6110
✓		IT28745	CVE-2018-1084
		IT28748	dmpmqcfg fails to connect in client mode when using non-multiplexed connection
		IT28775	The IBM MQ 9.1 LTS redistributable client image does not include the IBM MQ SDK
		IT28981	STOP CHANNEL MODE(TERMINATE) leaves channel hung and might permanently display "STOPPING"
	✓	IT28994	Potential for message loss or duplication when resolving indoubt message batch sent from shared channel
		IT28996	amqsdlq incorrectly converts messages CCSID when forwarding or re-queueing the message
		IT28998	Update Bouncy Castle .jar files as embedded within the IBM MQ installation
		IT29114	Memory leak in the IBM MQ Java client after a failed connection attempt using a custom SSLSocketFactory
		IT29123	Queue manager process suffers deadlock when handling memory exception (SIGBUS)
✓	✓	IT29141	CVE-2019-4378
✓		IT29184	CVE-2019-4227
	✓	IT29222	Null pointer memory exception reported on Windows when trace is on and thread is ending
		IT29237	AMQ8075 Authorization failed error with CONNAUTH ADOPTCTX(YES)
✓	✓	IT29262	CVE-2019-4432
		IT29284	Upgrade JRE level for IBM MQ v9.1 to 8.0.5.36 for AIX, Linux, and Windows, and to 8.0.5.35 for Solaris
		IT29328	Upgrade the IBM MQ embedded WebSphere Liberty profile from 19.0.0.1 to 19.0.0.3
✓	✓	IT29355	CVE-2019-4294
		IT29371	Update level of LDAP client supplied with IBM MQ 9.1 LTS to 6.4.0.18
		IT29372	Update level of Libedit supplied with IBM MQ 9.1 LTS to 0:60:0 (20190324-3.1)
✓	✓	IT29375	CVE-2019-4762
		IT29401	AMQ5531E error message generated when the application connects successfully.
		IT29441	Update level of libcurl supplied with IBM MQ 9.1 LTS to 7.65.1
✓	✓	IT29524	CVE-2019-4491
	✓	IT29525	IBM MQ Appliance 9.1.0.2 - dltmqm hangs indefinitely on HA QMs
		IT29540	IBM MQ Appliance unable to mount DR Partition on DR primary or secondary when using HA-DR
		PH07886	Application receives MQRC 2035 when connecting to a z/OS queue manager that had CONNAUTH AUTHTYPE(IDPWOS)
		SE70949	IBM MQ Manager on CCSID 37 Sender Channel converts X15 to CCSID 1253 X85 vs X0A
		SE71043	IBM MQ 9.1 Web Commands might fail due to Language
		SE71324	IBM MQ JSON Log format incorrect
		SE71352	Update OpenSSL to 1.0.2r

Fix Pack 9.1.0.2 IBM i, Windows, UNIX®

(Last modified: April 2019)

Security APAR	HIPER APAR	APAR	Description
		IJ10803	With XMS .NET if the MQMD is corrupted a rollback puts the message back in the original queue not to the backout queue.
		IT22064	IBM MQ default put response (DEFPRESP) behaves unexpectedly when putting to cluster queues using MQPMO_RESPONSE_AS_Q_DEF
		IT22990	CHLAUTH rule fails to be applied as expected however error AMQ9557 reports 'User ID' in different case
		IT24015	MQCONN from application returns MQRC_ALREADY_CONNECTED when hConn is invalid
		IT24154	IBM MQ client fails to connect with 2035 (MQRC_NOT_AUTHORIZED) when LongUserId is not set
		IT24186	The IBM MQ 8.0 Command Server process fails with an access violation when attempting to inquire on channel status
		IT24532	IBM MQ .NET reports inappropriate error code from MQDISC, if the connection is associated with an incomplete transaction
✓		IT24586	CVE-2018-1974
		IT24778	Message "AMQ7208: The queue manager failed to start cluster channel 'AMQ' " is erroneously written to error logs.
		IT24898	IBM MQ reports warnings and errors when applying Fix Pack 8.0.0.9 and 9.0.0.3 on HP-UX
	✓	IT24915	SIGSEGV from the LDAP client code. Queue manager becomes unstable afterwards
		IT24916	Authorization service fails. FDC with Probe ZF272010 and rc=MQRC_SERVICE_ERROR
		IT25042	Add resolved queue name to AMQ8416 error message
		IT25043	The command server process does not write an error in the queue manager error log when there is a MQRC_Q_FULL error
		IT25277	MQXR: Unexpected DISCONNECT packet from MQTT client causes FDC XR070013 PROTOCOL_HEADER error
		IT25290	Clean Session Record was not removed from the SYSTEM.MQTT.PERSISTENT.STATE queue during a client takeover
		IT25310	IBM MQ bindings file setting ClientReconnectTimeout does not work for XMS as it does for JMS.
		IT25334	When a queue manager is deleted using the dltmqm command this is not reported in the system error log
		IT25416	Using the IBM MQ .NET redistributable package in conjunction with an XMS client causes a System.TypeLoadException
		IT25426	AMQ9772 error MQRC_RESOURCE_PROBLEM MQRC 2102 when connecting application on Windows
		IT25428	ConvEBCDICNewline option is not available for the IBM MQ client
		IT25581	MQDataException containing reason code 3013 thrown when receiving messages containing MQCFGR parameters
	✓	IT25591	Connection to queue manager fails after upgrade to IBM MQ 8.0.0.10. Error log reports user missing CTRL authority on qmgr (AMQ8077)
		IT25596	The makedrprimary command hangs when attempting to resolve a partitioned state on the IBM MQ Appliance
		IT25598	File permission values are incorrectly formatted within IBM MQ tracepoint
		IT25883	Misleading message produced during backout processing
		IT25910	Repeated message output to WebSphere Application Server SystemOut.log file: MQJCA4004: Message delivery to an MDB 'null' failed with exception
		IT25922	MFT REST API transfer checksum method is incorrect
		IT26007	CHLAUTH rule not working when address uses DNS hostname, user receives MQRC_NOT_AUTHORIZED (2035)
		IT26113	AMQ7076W error generated for valid values of 'MaximumSize' and 'UpdatePercentage' in MessageBuffer stanza of mqclient.ini file
		IT26218	Access Violation FDC reported with Probe ID XC130031 in functionxcsRequestThreadMutexSem.
		IT26223	IBM MQ Appliance queue manager configured for disaster recovery (DR) shows an unknown status and dltdr commands fail
		IT26256	The mqconfig utility displays incorrect information about non-global zone projects in global zone
		IT26266	IBM MQ Appliance 9.1: HA queue manager does not start at preferred location.
		IT26293	Wildcard schema (WSCHEMA) value incorrectly altered when replacing SYSTEM.DEFAULT.SUB
		IT26330	FDC error with ProbeID XY314146 and component xcsTimedLookupAccountSid is generated due to Windows error 1788.
		IT26354	IBM MQ 9.1 mqconfig fails to detect that AIX 7.1 TL 5 is supported
		IT26367	IBM MQ process crashes when setting or displaying AMS policy data. FDC with probe ID XC130031 generated
		IT26372	Managed File Transfer agent event logs do not rotate
		IT26379	JMS subscribers using IBM MQ messaging provider migration mode and MSGSELECTION=BROKER do not receive any messages
		IT26390	File InputStreams acquired by the IBM MQ resource adapter are never closed
		IT26428	FDCs with probe IDs XC332010 and KN107001 when MQGET wait interval exceeds 1000000000 ms
		IT26438	runmqras doesn't pick up JVM dumps generated by the IBM MQ Appliance Web Console
		IT26482	IBM MQ Classes for JMS incorrectly require "get" authority on the target cluster queue for an alias queue
		IT26496	IBM MQ Explorer does not show all of the TLS/SSL cipher specs for IBM MQ Appliance channels
		IT26531	FDC reporting xecF_E_UNEXPECTED_SYSTEM_RC, probe ID XC130031 in xihCheckThreadList when multiple threads end concurrently
✓		IT26555	CVE-2018-1836
		IT26557	When ChlAuthEarlyAdopt is enabled the MQCSP supplied by the application is authenticated prior
		IT26571	WebSphere Application Server 9.0 IBM MQ Activation Specification shuts down following a JMSCC0108 message in the SystemOut.log
	✓	IT26585	Failures due to missing authority records. FDCs with IDs KN034025 kpiSPIAdoptUser or ZF044022 zfu_as_CalculateAuthority
		IT26625	Deleted HA group reappears after performing boot switch operation
		IT26650	FDC with probe ID XC130031 and access violation reported when putting to queue manager's DEFXMITQ with activity trace enabled
		IT26690	Running "show qm-status" on secondary appliance times out and does not display any results
		IT26707	amqsevt sample uses high CPU when running as an IBM MQ Service
		IT26729	IBM MQ Explorer is missing arguments when displaying fteCreateTransfer command in transfer template wizard
		IT26779	IBM MQ Explorer 9.1 welcome pages reference earlier versions of the IBM MQ product documentation.
		IT26789	IBM MQ Classes for Java memory leak when communicating to the queue manager over an unreliable TCP/IP network
		IT26790	.NET client incorrectly reports MQRC_Q_MGR_NOT_AVAILABLE (2059) if an SSL/TLS error is encountered when connecting to a qmgr
		IT26794	Blank IBM MQ AUTHLIST( ) is displayed when authorities are added as a group and are individually removed.
		IT26873	HA/DR Commands fail on the IBM MQ Appliance, incorrectly reporting AMQ8249E - another HA or DR operation is in progress.
		IT26908	HA/DR commands can fail if local address is a substring of the remote address
✓		IT26920	CVE-2018-1925
		IT26922	The -expiry flag to the listcert command on the IBM MQ Appliance is only honored if no expiry time is supplied
		IT26930	FDC file shows incorrect time zone information.
	✓	IT26940	An HA queue manager on the IBM MQ Appliance does not start during failover and no error messages are written.
		IT26960	IBM MQ error message AMQ9512 contains incorrect text
		IT26964	Weighted client channels with affinity preferred are not demoted after failing to connect
		IT26970	Issues with IBM MQ Explorer and IBM MQ Classes for Java when consuming an invalid message
✓		IT26976	CVE-2019-4055
		IT26983	Upgrade Qpid Proton level for IBM MQ to Qpid Proton 0.30
		IT26985	XA switch files built in on the AIX platform using Sybase 15 ESD#15 and later (including Sybase 16) fail with a SIGILL.
		IT27005	Indirect runmqsc to a remote z/OS queue manager gives reason code 10 on exit
		IT27026	Update level of LDAP client supplied with IBM MQ 9.1 LTS to 6.4.0.16
		IT27028	IBM MQ Appliance command 'test tcp-connection' syntax is not as documented in IBM Documentation.
		IT27054	IBM MQ client channel terminates writing FFDC with probe ID CO386011when using TLS
		IT27057	IBM MQ Appliance: Configuration scripts cannot invoke mqcli commands using exec
		IT27068	The mqwebui:// file system mount references an incorrect location
	✓	IT27072	Memory leak in IBM MQ on Linux after a queue is emptied
		IT27102	Abnormal termination of amqrmppa process due to a memory overwrite issue
		IT27120	MFT Agent generates an FFDC from MonitorWork indicating that a NullPointerException occurred.
		IT27193	Unable to select some system languages with IBM MQ 9.1.0.1 fix pack installer on Windows
		IT27232	When using a connection name list there is a memory leak in the channel code
		IT27240	Extremely short-lived TCP connections incorrectly generate AMQ9213E errors in the queue manager error log
✓		IT27293	CVE-2018-1998
		IT27296	The runmqras utility fails to obtain amqldmpa output files on the IBM MQ Appliance
	✓	IT27381	IBM MQ Appliance reloads if DNS reverse lookup fails to complete, causing HA queue managers to enter partitioned state
		IT27396	FDCs with probe ID XR03122014 and XR063017 are thrown when starting the queue manager using locale "JA_JP.EUCJP"
		IT27404	When updating an MFT transfer template using the IBM MQ Explorer, both "Until" and "Forever" scheduled options are checked
		IT27453	dltmqras fails with FDC reporting probe ID XC130003 SIGSEGV under xcsQueryValue
		IT27633	Installation of IBM MQ Fix Pack 9.1.0.1 on Windows fails with unexpected RC 2 from strmqweb.
	✓	IT27634	Queue manager hangs following a SIGSEGV while contacting the LDAP server
		IT27637	IBM MQ Java/JMS application supplying password to connect to queue manager reports AMQ6047: Conversion not supported
		IT27638	An IBM MQ JMS application deadlocks after IT23101 when multiple threads compare JMS destinations
		IT27694	Server-connection channel 'stopped' status is ignored after queue manager restart allowing clients to connect
		IT27730	Behavioral differences between the IBM MQ 9.1.0.1 MFT REST API on Distributed Platforms and z/OS
		IT27733	An IBM MQ JMS client application may fail to connect to a queue manager. An FFDC with probe ID RM756099 is generated.
		IT27750	IBM MQ Explorer shows 2MB as the default queue manager error log size.
		IT27762	The "Help" button in the IBM MQ 9.1 Web Console links to the IBM MQ 9.0 welcome page in the product documentation.
	✓	IT27810	Window for message loss or duplication if sender channel disconnects and reconnects during commit processing
		IT27837	HA configuration commands block for several minutes if heartbeatlink unavailable.
✓		IT27959	CVE-2019-4039
		IT27961	Files left in /usr/mqm/swidtag after uninstallation of IBM MQ in AIX
		IT27989	Upgrade the IBM MQ embedded WebSphere Liberty profile from 18.0.0.3 to 19.0.0.1
		IT27990	Update level of libedit supplied with IBM MQ 9.1 LTS to 0:59:0 (20181209-3.1)
		IT28004	Upgrade JRE level for IBM MQ 9.1 LTS and 8.0.5.27 for AIX Linux and Windows and 8.0.5.25 for Solaris
		IT28030	Apache Ant as used by IBM MFT, updating from version 1.9.11 to 1.9.13
		IT28031	Upgrade the CometD and Jetty libraries used by IBM MQ 9.1 for the IBM MQ Bridge to Salesforce/Blockchain
		IT28057	The MQSeriesGSKit Fix Pack package for Linux incorrectly contains a dependency on the MQSeriesJRE package
		IT28135	Update level of libcurl supplied with IBM MQ 9.1 LTS to 7.64.0
		IT28154	isalist error reported when installing IBM MQ on Solaris Sparc 11.4
		IT28156	Properties on JMS destinations created programmatically from a URI are not set when trace is enabled.
		IT28160	Update the DRBD kernel module supplied with IBM MQ 9.1 LTS to 9.0.14_3.10.0_957-1
✓		IT28271	CVE-2019-4078
		IT28293	Upgrade JRE level for IBM MQ 9.0 and 9.1 to 8.0.5.30 for AIX, Linux, Windows, Solaris (x86-64) and Solaris (Sparc)
		IT28639	Multi-threaded IBM MQ client application on Windows hangs in MQCONNX
		PH02080	MFT commands run on z/OS fail with BFGCL0002E error containing reason code 2298 after upgrading to V9.0.3 or V9.1
		PH04826	BFGCUSTM fails with a BFGCL0722E error
		PH06012	Agent or logger report a BFGUB0078W warning message indicating that CLEAN_AGENT_PROPS is not a valid property.
		SE70271	IBM MQ client-only install creates FDC data during logging of regular error.
		SE70292	IBM MQ 9.1 on IBM i QMERRORLOG service severities does not appear to work.
		SE70356	IBM MQ 8.0 on IBM i: RFRMQM's authority should be PUBLIC EXCLUDE

Fix Pack 9.1.0.1 IBM i, Windows, UNIX®

(Last modified: November 2018)

Security APAR	HIPER APAR	APAR	Description
		IJ04757	Dspmqver for XMS and WCF always displays the primary installation version
		IT20481	MultiInstance queue manager failover might cause .Net client to send duplicate message
		IT21586	IBM MQ: AMQ8009 authorization errors are still generated for topics after setting MQS_REPORT_NOAUTH to FALSE
		IT22165	IBM MQ .NET client delay in obtaining SID for specified user on large network
		IT24049	The dmpmqcfg command generates incorrect subscription definitions when using the 1line or 2line parameter
		IT24055	AMQ5532 is reported during LDAP authorization if the DN of the LDAP user has an escape character in it.
		IT24165	When an AMQP client unsubscribes to pre-existing queue object an FDC with Probe ID XR18012013 is generated
		IT24281	Upgrading the IBM MQ Appliance to version 9 firmware removes the previous WebUI dashboard configuration.
		IT24328	Runmqras '-section cluster' does not collect the full set of cluster MustGather data on the IBM MQ Appliance
		IT24336	The status MQCLI control command shows negative memory usage
		IT24367	The RUNMQSC process is looping intermittently, if the new feature "RUNMQSC command-line editor for UNIX" is used.
		IT24391	AMQ8077 incorrectly generated when messages are put to cluster queue.
		IT24426	"java.io.IOException: Too many open files" errors from IBM MQ 7.5 queue manager when using IBM MQ Telemetry
		IT24429	IBM MQ Classes for JMS write trace to a file called 'mqjava_%PID%.trc' instead of 'mqjms_%PID%.trc
		IT24453	FFDCs generated intermittently when IBM MQ Classes for JMS applications get messages from an alias queue
		IT24503	When using cryptographic hardware, SSL/TLS channel reports AM9642 with GSKit error 407
		IT24507	AMS-enabled application receives 2063 (MQRC_SECURITY_ERROR) from MQOPEN after disabling OCSP or CRL checking
		IT24653	The haregtyp /r command for registering IBM MQ MSCS resources reports success when an older, invalid registration is found.
		IT24719	Enhancements to runmqras utility
		IT24751	JMS messages delivered to a configured backout queue instead of an MDB can have a missing group ID value
		IT24757	Reloading messages from a file to a queue may fail when messages were saved with dmpmqmsg command using '-dt' parameter
	✓	IT24878	If a shared memory set is unavailable then the queue manager can enter an infinite loop
	✓	IT24912	IBM MQ Appliance 9.0.5: VLAN cannot be created on link aggregation interface
		IT25113	IBM MQ MFT agent abend with NullPointerException probe ABEND_001
		IT25145	Application fails with rc 2009, queue manager generates FDCs with ProbeIDs ZL043050 and XC130031.
		IT25165	IBM MQ Appliance: SIGSEGV reported via FDC with ProbeID XC130003 when in dpcCmd_runmqras
		IT25172	runmqsc fails with error AMQ8135 on screen and AMQ5531 in error logs
		IT25269	Improve user action description for JMS authentication error messages JMSWMQ2013 and JMSWMQ2021
	✓	IT25353	IBM MQ Appliance configured for High Availability sees HA Ethernet Interfaces drop and enters a partitioned state
		IT25409	runmqras not capturing WebUI logs
✓		IT25490	CVE-2018-1684
		IT25496	IBM MQ Classes for JMS reports an unhelpful Java Exception when failing to interpret a received message
		IT25529	IBM MQ resource adapter deployed in WebSphere Liberty profile receives a certificate chain error when creating a TLS connection
		IT25614	AMQ8227 Channel not found error when issuing command to stop auto-defined CLUSSDR channel
		IT25615	IBM MQ Explorer MFT plug-in labels the XML payload of the completed transfer log publication as "# IN PROGRESS"
		IT25652	crtmqm fails with memory exception in RDQM configuration
		IT25683	Enhancements to runmqras utility
		IT25741	IBM MQ cluster full repository unable to complete "REFRESH CLUSTER" command, reporting AMQ9511 error
	✓	IT25786	IBM MQ Appliance status commands reports status unknown for all queue managers if 6 or more HA/DR queue managers are configured
		IT25839	Connections fail when CHLAUTH mapping rules and a security exit are defined on a channel and SHARECNV is greater than 1
		IT25917	An IBM MQ Java/JMS application fails to connect to a queue manager with the error: "AMQ6047: Conversion not supported"
		IT25942	When using isolated bindings xa_open fails with XAER_RMERR (0xFFFFFFFD / -3)
		IT25944	The IBM MQ reporting service fails to register with an ICP metering endpoint
		IT25999	New function to allow SVRCONN channel to request client disables AMS interception if MCA interception is in use
		IT26088	Update Bouncy Castle shipped by IBM MQ
		IT26121	IBM MQ Appliance - DNS error when using round robin DNS algorithm
		IT26123	Update level of GSKit shipped with IBM MQ 9.1 LTS to 8.0.55.2
		IT26124	Update level of libedit supplied with IBM MQ 9.1 LTS to 0:58:0 (20180525-3.1)
		IT26126	Update level of libcurl supplied with IBM MQ 9.1 LTS to 7.61.0
		IT26162	Update JRE shipped within IBM MQ 9.1.0 to Java 8.0.5.22 (SR5 FP22) and Java 8.0.5.20 (SR5 FP20)
		IT26171	Upgrade the IBM MQ embedded WebSphere Liberty profile from 18.0.0.1 to 18.0.0.3
		IT26185	Upgrade Jetty shipped with IBM MQ 9.1 for Linux (x86-64)
✓	✓	IT26234	CVE-2018-1792
	✓	IT26471	IBM MQ queue managers registered with the ICP Metering Service show an incorrect number of cores when viewed as a group
		IT26499	Corrupted characters displayed when running IBM MQ commands on Windows in non-English languages
✓		IT26510	CVE-2018-1883
	✓	IT26557	When ChlAuthEarlyAdopt is enabled, the MQCSP supplied by the application is authenticated before calling a security exit.
		IT26577	MFT logger fails to convert publications on z/OS when updated JRE to 1.8
		IT26587	IBM MQ Classes for JMS application deadlocks when JMS trace enabled

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSYHRD","label":"IBM MQ"},"ARM Category":[],"Platform":[{"code":"PF002","label":"AIX"},{"code":"PF012","label":"IBM i"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF031","label":"Ubuntu"},{"code":"PF033","label":"Windows"}],"Version":"9.1","Edition":"","Line of Business":{"code":"LOB77","label":"Automation Platform"}}]

Tips

Fix list for IBM MQ Version 9.1 LTS

Product Readmes

Abstract

Content

IBM MQ cumulative security update 9.1.0.32 IBM i, Windows, UNIX®

(Last modified: October 2025)

IBM MQ cumulative security update 9.1.0.31 IBM i, Windows, UNIX®

(Last modified: September 2025)

IBM MQ cumulative security update 9.1.0.29 IBM i, Windows, UNIX®

(Last modified: June 2025)

IBM MQ cumulative security update 9.1.0.28 IBM i, Windows, UNIX®

(Last modified: May 2025)

IBM MQ cumulative security update 9.1.0.27 IBM i, Windows, UNIX®

(Last modified: March 2025)

IBM MQ cumulative security update 9.1.0.26 IBM i, Windows, UNIX®

(Last modified: December 2024)

IBM MQ cumulative security update 9.1.0.24 IBM i, Windows, UNIX®

(Last modified: October 2024)

IBM MQ cumulative security update 9.1.0.23 IBM i, Windows, UNIX®

(Last modified: September 2024)

IBM MQ cumulative security update 9.1.0.22 IBM i, Windows, UNIX®

(Last modified: March 2025)

IBM MQ 9.1.0.21 cumulative security update for IBM i, Windows, UNIX®

(Last modified: April 2024)

IBM MQ Fix Pack 9.1.0.20 IBM i, Windows, UNIX®

(Last modified: February 2024)

IBM MQ 9.1.0.19 cumulative security update for IBM i, Windows, UNIX®

(Last modified: December 2023)

IBM MQ 9.1.0.18 cumulative security update for IBM i, Windows, UNIX®

(Last modified: October 2023)

IBM MQ 9.1.0.17 cumulative security update for IBM i, Windows, UNIX®

(Last modified: August 2023)

IBM MQ 9.1.0.16 cumulative security update for IBM i, Windows, UNIX®

(Last modified: June 2023)

Fix Pack 9.1.0.15 IBM i, Windows, UNIX®

(Last modified: May 2023)

Cumulative security update 9.1.0.13 IBM i, Windows, UNIX®

(Last modified: January 2023)

Fix Pack 9.1.0.12 IBM i, Windows, UNIX®

(Last modified: October 2022)

Fix Pack 9.1.0.11 IBM i, Windows, UNIX®

(Last modified: March 2022)

Fix Pack 9.1.0.10 IBM i, Windows, UNIX®

(Last modified: December 2021)

Fix Pack 9.1.0.9 IBM i, Windows, UNIX®

(Last modified: August 2021)

Fix Pack 9.1.0.8 IBM i, Windows, UNIX®

(Last modified: June 2021)

Fix Pack 9.1.0.7 IBM i, Windows, UNIX®

(Last modified: December 2020)

Fix Pack 9.1.0.6 IBM i, Windows, UNIX®

(Last modified: July 2020)

Fix Pack 9.1.0.5 IBM i, Windows, UNIX®

(Last modified: Jan 2024)

Fix Pack 9.1.0.4 IBM i, Windows, UNIX®

(Last modified: December 2019)

Fix Pack 9.1.0.3 IBM i, Windows, UNIX®

(Last modified: July 2019)

Fix Pack 9.1.0.2 IBM i, Windows, UNIX®

(Last modified: April 2019)

Fix Pack 9.1.0.1 IBM i, Windows, UNIX®

(Last modified: November 2018)

Was this topic helpful?

Document Information

UID

Share your feedback

Need support?