Fix Readme
Abstract
IBM MQ provides periodic maintenance releases (Fix Packs), and Cumulative Security Updates, for Version 9.4.0 Long Term Support (LTS). The following is a complete listing of available fixes grouped by maintenance delivery.
Content
This document describes fixes included in LTS maintenance releases and in LTS Cumulative Security Updates. For more information on the types of maintenance, see IBM MQ release types section of the product documentation.
Lifecycle dates:
- GA for IBM MQ 9.4 was 18th June 2024.
| List of fixes | Release type | Release date | Total fixes | Security fixes | HIPER fixes |
| IBM MQ 9.4.0.21 | Cumulative Security Update | 07 May 2026 | 6 | 4 | 0 |
| IBM MQ 9.4.0.20 | Fix Pack | 26 February 2026 | 62 | 6 | 2 |
| IBM MQ 9.4.0.17 | Cumulative Security Update | 17 December 2025 | 2 | 1 | 0 |
| IBM MQ 9.4.0.16 | Cumulative Security Update | 23 October 2025 | 6 | 3 | 1 |
| IBM MQ 9.4.0.15 | Fix Pack | 04 September 2025 | 63 | 2 | 0 |
| IBM MQ 9.4.0.12 | Cumulative Security Update | 27 June 2025 | 6 | 5 | 0 |
| IBM MQ 9.4.0.11 | Cumulative Security Update | 01 May 2025 | 3 | 2 | 0 |
| IBM MQ 9.4.0.10 | Fix Pack | 27 February 2025 | 76 | 6 | 4 |
| IBM MQ 9.4.0.7 | Cumulative Security Update | 17 December 2024 | 10 | 6 | 0 |
| IBM MQ 9.4.0.6 | Cumulative Security Update | 29 October 2024 | 6 | 3 | 1 |
| IBM MQ 9.4.0.5 | Fix Pack | 05 September 2024 | 29 | 4 | 4 |
| IBM MQ 9.4.0.0 | Initial release (both Continuous Delivery and LTS) | 18 Jun 2024* | 36 | 9 | 0 |
* The listed release date applies to IBM MQ on distributed platforms. For the IBM MQ Appliance, the Release Date was 11th Jul 2024.
Download the latest IBM MQ fixes from the IBM MQ Recommended Fixes and Planned Maintenance release dates page.
Vulnerability risk information for IBM MQ can be found at Security Bulletin for IBM WebSphere MQ
Example table
| Is Security | Is HIPER | APAR / known issue | Description |
| ✓ | AB12345 | CVE-XXXX-XXXXX (security/integrity exposure) [CVSS base score 5.3] | |
| ✓ | ZY98765 | Description of HIPER |
Note: The CVSS scoring information, listed in the fix list tables, is accurate at the time of release. Review links contained in the referenced bulletins for additional information on scoring, including any retrospective changes to scores assigned by third parties.
IBM MQ 9.4.0.21 Cumulative Security Update for Windows, Unix, IBM i, IBM MQ Appliance
(Last modified: May 2026)
Back to Top
| Is Security | Is HIPER | known issue | Description |
| ✓ | DT462553 | IBM MQ CVE-2026-2607 [CVSS base score 5.1] | |
| ✓ | DT464471 | IBM MQ CVE-2024-29371 [CVSS base score 7.5] | |
| ✓ | DT466382 | IBM MQ CVE-2025-14915 and CVE-2025-14917 and CVE-2026-1561 [CVSS base score 6.7] | |
| ✓ | DT468012 | IBM MQ Appliance CVE-2026-23231, CVE-2026-3497 [CVSS Base score 7.8] | |
| DT459412 | Java client dynamic tracing using a default file | ||
| DT469516 | Third party component updates for cumulative security update 9.4.0.21 |
IBM MQ 9.4.0.20 Fix Pack for Windows, Unix, IBM i, IBM MQ Appliance
(Last modified February 2026)
| Is Security | Is HIPER | known issue | Description |
| ✓ | DT433340 | IBM MQ CVE-2026-1713 and IBM MQ Appliance CVE-2026-1713 [CVSS base score 5.5] | |
| ✓ | DT457904 | IBM MQ CVE-2025-12635 and IBM MQ Appliance CVE-2025-12635 [CVSS base score 5.4] | |
| ✓ | DT459614 | IBM MQ Appliance CVE-2025-39971, CVE-2025-39955 [CVSS base score 7.6] | |
| ✓ | DT460995 | IBM MQ CVE-2026-21945, CVE-2026-21932, CVE-2026-21933, CVE-2026-21925 [CVSS base score 7.5] | |
| ✓ | DT461364 | IBM MQ CVE-2025-14914 [CVSS Base score 7.6] | |
| ✓ | DT462831 | IBM MQ CVE-2025-15467 and CVE-2026-22796 [CVSS base score 9.8] | |
| ✓ | DT440509 | IBM MQ local or remote queue disappears after it has been created and used by the application | |
| ✓ | DT448970 | IBM MQ client applications executed by non-mqm users may experience performance degradation after a system reboot. | |
| DT188863 | REFRESH CLUSTER REPOS(YES) results in channel to full repository remaining in STOPPED state | ||
| DT260509 | MQ Managed XMS .NET client with reconnect fails due to a StackOverflow exception. | ||
| DT428270 | IBM MQ XMS .NET application hangs during reconnect operation. | ||
| DT428275 | Messages returned as "Modified" by AMQP clients are not handled correctly by the IBM MQ AMQP service | ||
| DT428311 | IT46189: MQ .NET allocates unneccesary memory when performing MQPUT with a non-RFH message. | ||
| DT428331 | IBM MQ process amqrmppa crashes with a SIGSEGV. | ||
| DT428706 | IT41673: AMQ6047 messages about data conversion from CCSID 0 to CCSID 0 appear in the error logs | ||
| DT428858 | Queue manager writes accounting messages too often when queue manager attribute ACCTQ is set to NONE. | ||
| DT429455 | IT45019: An unexpected MQRC_Q_SPACE_NOT_AVAILABLE error occurred after MAXFSIZE was reset to its default value, following a previous non-default configuration. | ||
| DT429757 | IT43821: AMQ5771E error message reported in queue manager error log when installing a fix pack on AIX | ||
| DT429835 | IT47058: IllegalStateException from Apache QPid causes unexpected end of IBM MQ AMQP service | ||
| DT429863 | IT46860: Pipe returned MQRC 2035 when the '/opt' file system is mounted with the 'nosuid' option | ||
| DT433310 | Providing support for the TCP_QUICKACK option in TCP connections used by IBM MQ channels on Linux systems and IBM MQ Appliance. | ||
| DT436758 | After upgrading to MQ 9.4.0.0, the amqzxma0 process crashes with SIGSEGV in the NativeHAReplay thread | ||
| DT437109 | IBM MQ client applications may encounter an issue where the same message is browsed twice under certain conditions. | ||
| DT438469 | IBM MQ queue manager error logs fail to log events after error log file is accessed. | ||
| DT439724 | Priority and persistence properties are not set correctly in outbound AMQP message header | ||
| DT440293 | In the MQ 9.4, when the sender channel transitions from RETRYING to RUNNING, the SHORTRTS and LONGRTS values are immediately reset. | ||
| DT442632 | Asynchronous events such as queue manager quiescing or connection broken are not delivered to the application as expected | ||
| DT443309 | SVRCONN channel closes, with insufficient diagnostics to determine the underlying cause | ||
| DT444258 | IBM MQ application may end unexpectedly due to memory exception from conflicting libcurl libraries | ||
| DT444486 | Include additional linked exception information when an exception is logged by the IBM MQ REST API | ||
| DT444506 | FDCs ZS402095 and RM575000 may be generated when asynchronously consuming 0-byte messages from AMS-protected queues. | ||
| DT444846 | IBM MQ classes for Java, classes for JMS, classes for Jakarta Messaging and resource adapters fail to handle spaces properly in client channel definition table (CCDT) entries. | ||
| DT445771 | IBM MQ appliance system volume(encrypted space) may become full due to large pacemaker.log | ||
| DT446198 | IBM MQ Classes for Java can return an MQRC 2009 from a long-running MQQueue.get(...) call. | ||
| DT446490 | IBM MQ reports "failed to destroy subpools lock for qmgr" during MQ installation. | ||
| DT447075 | IBM MQ Web Console does not allow modification of the Queue PUT/GET attributes. | ||
| DT447623 | Unable to set the KEYRPWD QM attribute via PCF using an IBM MQ Java client. | ||
| DT447799 | MQ classes for Java, classes for JMS and classes for Jakarta Messaging applications can send uninitialized data to the queue manager. | ||
| DT448304 | After a "connection broken" error occurs, asynchronous consumers fail to retrieve messages that contain properties. | ||
| DT448704 | In IBM i V7R6M0, IBM MQ job AMQZLAA0 ends abnormally with MCH1210, even when *JOBMSGQFL(WRAP) is enabled. | ||
| DT449436 | IOException occurs when the IBM MQ AMQP service and IBM MQ classes for Java process messages with an MQRFH2 header that includes a property name containing a $ character in the | ||
| DT450281 | MQ Console sorting by Maximum Depth is not working as expected. | ||
| DT450383 | MQ LDAP Authorization and Authentication checks take a very long time if OAMLdapConnectTimeout is set in qm.ini, even if it is set to a reasonable value. | ||
| DT450505 | IBM MQ mqcertck tool does not correctly handle key repositories in PKCS#12 format. | ||
| DT450934 | After migrating to IBM MQ 9.4, the amqzmuc0 or amqzlaa0 process may terminate with a segmentation fault (SIGSEGV) in the kqiCheckAMQPErrorLogContains function. | ||
| DT451331 | DEFINE SUB command never returns on a Queue Manager where DEFXMITQ is non-empty but the queue has not been defined | ||
| DT451497 | IBM MQ rdqm process terminates with a SIGSEGV error in zslRDCheckAuthorization. | ||
| DT451791 | IBM MQ Appliance reports DRHA_UNEXPECTED_ERROR when using certain HA/DR commands such as 'sethapreferred' or 'clearhapreferred'. | ||
| DT452111 | Date and time entries in autocfgmqsc.LOG are incorrectly displayed when the Japanese locale is used. | ||
| DT452228 | On systems with extremely large disks, the AMQ5782I message may show an incorrect disk usage percentage because of a calculation error. | ||
| DT452345 | MQ Software Trial reports an incorrect number of days remaining. | ||
| DT453343 | The asynchronous message consumption callback function was not being called by MQ code in a client application, even though a message was available | ||
| DT453449 | Application hostname/IP address not specified in a FDC when a protocol error is reported | ||
| DT453888 | NullPointerException occurs when closing a JMS or Jakarta Messaging MessageConsumer. | ||
| DT455409 | IBM MQ 9.4 Client installation incorrectly includes Developer Edition swidtag file on Windows | ||
| DT455661 | IBM MQ resource adapter throws exception containing reason code MQRC_BACKED_OUT when using dynamically balanced activation specifications | ||
| DT456115 | IBM MQ Application Activity Trace generates duplicate event messages when transmitting bulk messages under syncpoint. | ||
| DT456825 | Performing concurrent IBM MQ Console or REST API operating system authentication requests can result in FDCs being generated. | ||
| DT457490 | When using the IBM MQ 9.4 graphical installer on Microsoft Windows with an existing MQ installation, some panes appear in an incorrect sequence during the modify/remove process | ||
| DT457794 | IBM MQ IPT requests a TLS certificate from client side even if 'SSLServerAskClientAuth=false' | ||
| DT458518 | IBM MQ MFT process controller erroneously maintains the "mqmftpc.pid" file. | ||
| DT462779 | Third party component updates for Fix Pack 9.4.0.20 |
IBM MQ 9.4.0.17 Cumulative Security Update for Windows, Unix, IBM i, IBM MQ Appliance
(Last modified December 2025)
| Is Security | Is HIPER | known issue | Description |
| ✓ | DT455009 | IBM MQ CVE-2025-53057, CVE-2025-53066 and IBM MQ Appliance CVE-2025-53057, CVE-2025-53066 [CVSS base score 7.5] | |
| DT457398 | Third party component updates for cumulative security update 9.4.0.17 |
IBM MQ 9.4.0.16 Cumulative Security Update for Windows, Unix, IBM i, IBM MQ Appliance
(Last modified October 2025)
| Is Security | Is HIPER | known issue | Description |
| ✓ | DT448803 | IBM MQ CVE-2025-36047, IBM MQ CVE-2025-48976 and IBM MQ Appliance CVE-2025-48976 [CVSS base score 7.5] | |
| ✓ | DT450151 | IBM MQ Appliance CVE-2025-8058 and CVE-2025-7425 [CVSS base score 7.8] | |
| ✓ | DT451207 | IBM MQ CVE-2020-36732 [CVSS base score 5.3] | |
| ✓ | DT447167 | IBM MQ RDQM queue managers unable to failover in a HA setup due to unmount timeout | |
| DT449774 | Queue manager error fails to display in container log with the following message displayed instead: {** - "INFO","message":"Failed to unmarshall JSON in log message - **} | ||
| DT453117 | Third party component updates for cumulative security update 9.4.0.16 |
IBM MQ 9.4.0.15 Fix Pack for Windows, Unix, IBM i, IBM MQ Appliance
(Last modified: January 2026)
| Is Security | Is HIPER | known issue | Description |
| ✓ | DT444585 | IBM MQ CVE-2025-36100 [CVSS base score 5.1] | |
| ✓ | DT448473 | IBM MQ CVE-2025-30754 and CVE-2025-30754 [CVSS base score 4.8] | |
| DT209203 | Unmanaged .NET client application with AMS installed reports MQRC 2035(MQRC_NOT_AUTHORIZED) when using a z/OS queue manager | ||
| DT245884 | IT44897: AMQ9703W: Message sequence number mismatch detected for channel,while starting a channel. | ||
| DT257419 | IT43561: MQPUT1 to an AMS-secured queue from a client where AMS is disabled fails with rc=2063 MQRC_SECURITY_ERROR | ||
| DT381905 | IT46133: AMQ8079W and AMQ9546E are received when attempting to authenticate a domain user | ||
| DT389918 | IT46375: FREQUENT MQ FDC EXCEPTIONS GENERATED ON THE QUEUE MANAGER SYSTEM DUE TO PERMISSION ISSUES. | ||
| DT391393 | IT46346: Singular messages may be committed during a transaction despite contrary configuration when using WAS Listener Ports | ||
| DT398231 | IT46725: Memory consumption increases on IBM.WMQ.ChannelDefinition while the destination server is unavailable. | ||
| DT399726 | Channel errors (e.g. AMQ9259E) are not reported if the channel is stopped by the user while it is ending due to the error. | ||
| DT417621 | IT47215:SIGSEGV in rxDoInstancesHaveQuorum causes NativeHA MQ pod to restart automatically | ||
| DT419537 | IT47424: AMQ9456 error messages appear in queue manager error logs | ||
| DT421561 | IT47524: IBM MQ Classes for JMS can hang when creating a message. | ||
| DT422661 | The ValidateAuth=No attribute is ignored when SuppressMessage attribute under QMerrorLog stanza is present in qm.ini file | ||
| DT425506 | IT47773: MQ Console only reports the user primary group on Linux when verifying group membership for access/authorisation | ||
| DT428140 | IT44403: MQ 9.3.x .Net core application encounters error MQRC 2219 when using security exits | ||
| DT428253 | IT44949: MQ .Net core application with security exit reports error 2273 (connection broken) if exit buffer size not divisible by 4 | ||
| DT428268 | Channels not starting after scratchpad damage | ||
| DT428271 | IT46576: setting ReconDelay as IBM MQ documented causes an exception in MQ managed .Net client. | ||
| DT428277 | IT47446: Memory leak in IBM MQ client when MQCONNX in client program thatuses TLS fails with rc=2381 or rc=2393 | ||
| DT428288 | IT47674: dspmqfls command fails with error AMQ7028E | ||
| DT428295 | IT47744: Cluster queues disappeared after long period of disuse and a change/move of Full Repository queue managers | ||
| DT428298 | IT47548: IBM MQ Documentation does not clearly specify that OCSPAuthentication=REQUIRED only applies if an OCSP Responder is defined. | ||
| DT428299 | IT47823: AMQZMUC0 LOCKS OBJECT CATALOGUE FILE | ||
| DT428301 | IT47834: IBM MQ Console can fail to display messages for a local queue if a message contains an unmappable character in the message body | ||
| DT428309 | IT47250: MFT commands using SSL display misleading BFGPR0134E message if a property in a config file is set to an empty value | ||
| DT428326 | IT46503: MQIPT creates invalid HTTP Cookie header fields | ||
| DT428809 | On IBM i, the warning messages AMQ9722 and AMQ9723 are displayed every time a channel starts. This can flood the queue manager logs and potentially push out other important diagnostic entries. | ||
| DT428810 | IT47235: Closing an AMQP consumer does not release open queue handles resulting in a handle leak | ||
| DT428819 | IT47157: AMQ9209 messages are generated when (9.4.0.0 and later) C clients are rebalanced across a uniform cluster. | ||
| DT428822 | IT47166: MQ on Linux 32-bit COBOL client SIGSEGV reported in an FDC with ProbeId XC130003 | ||
| DT428839 | IT47612: Downloading a single message using the IBM MQ Console downloads all the messages on the queue in a JSON format | ||
| DT428850 | IT47210: CertificateMapFailedException is incorrectly written to the mqweb server's log files if a principle cannot be mapped. | ||
| DT428852 | IT47806: After a connection broken error asynchronous consumers are unable to consume messages. | ||
| DT428854 | IT47491: endmqm generates AMQ9213E - communications error | ||
| DT428861 | IT47821: Third party component updates for fix pack 9.4.0.15 | ||
| DT428862 | IT47785: MFT protocol bridge agents write SFTP entries to the agentevent | ||
| DT428864 | IT47835: MQ .NET client fails to try other channel entries from CCDT table when MQRC_SSL_INITIALIZATION_ERROR is thrown. | ||
| DT428865 | IT47703: IBM MQ Classes for Java/JMS method "MQConstants.lookup" is not thread safe. | ||
| DT428869 | Times elapsed displayed in IBM MQ Console dashboards do not take account of timezone differences between locations. | ||
| DT428871 | IT47747: Unable to upgrade to MQ 9.4.0.10 on Linux RPM based distributions for a top-level installation location | ||
| DT429422 | IT47812: MQ APPLIANCE: THE SETHAPREFERRED COMMAND MAY FAIL TO FAIL OVER A QUEUE MANAGER IF EXECUTED CONCURRENTLY. | ||
| DT429460 | IT47772: IBM MQ Appliance reports incorrect error when using setmqini to alter a stanza not applicable to appliance queue managers | ||
| DT429832 | IT47358: IBM MQ Console doesn't show any messages on a queue if one or more messages has an invalid MQRFH2 header. | ||
| DT429841 | IT47623: Use the default DNSResolutionOrder when a user-configured value is partially invalid | ||
| DT433187 | IBM MQ classes for JMS and Jakarta Messaging remove message properties from messages that go to the backout queue. | ||
| DT433212 | A remote queue manager's new CLUSRCVR channel cannot be inserted into the cluster after RESET CLUSTER was run to correct an earlier mistake | ||
| DT433503 | IBM MQ mqperfck tool incorrectly reports error AMQ3072E for a local cluster queue | ||
| DT433628 | CONNAME is truncated as cluster sender channel is defined during uniform cluster configuration | ||
| DT434732 | No warning is provided when duplicate cluster receiver channels are created with a mismatched queue manager name | ||
| DT435290 | IBM MQ MFT agent logs BFGCH0125E when attempting to transfer a file with a question mark character in the filename. | ||
| DT435816 | IBM MQ on z/OS unable establish TLS 1.3 FIPS connections to IBM MQ distributed queue managers | ||
| DT436693 | Ensure replyTo field of outgoing AMQP message properties is set correctly | ||
| DT437809 | MQ Appliance 9.4.x: MQ appliance keybackup command might fail with FDC RN129010 after upgrading to MQ 9.4. | ||
| DT437989 | IBM MQ classes for Java fail to rewrite MQRFH2 headers when little endian encoding is requested | ||
| DT439243 | After upgrading IBM MQ Queue Manager on IBM i, Java clients fail to connect with error AMQ9207 | ||
| DT439282 | IBM MQ appliance mqcli starts in failsafe mode due to system volume full | ||
| DT439408 | A queue manager could not be restarted after the queue manager's file system became full. | ||
| DT439746 | IBM MQ Queue Manager generates AMQ9716E after upgrading | ||
| DT443477 | IBM MQ incorrectly considers the "alg" field in JWKS mandatory | ||
| DT443710 | MQ Appliance 9.3: Heartbeat interface(eth13 and eth17) status may be incorrectly reported. | ||
| DT444035 | After upgrading an IBM MQ 9.4 Trial or Developer Edition installation to a newer maintenance level, the LicenseType is incorrectly reported as Production | ||
| DT444255 | On Windows 2025, MQ outputs say it is Windows 2022 |
IBM MQ 9.4.0.12 Cumulative Security Update for Windows, Unix, IBM i, IBM MQ Appliance
(Last modified June 2025)
| Is Security | Is HIPER | known issue | Description |
| ✓ | DT426598 | IBM MQ CVE-2025-33181 [CVSS base score 5.9] | |
| ✓ | DT435291 | IBM MQ CVE-2025-3631 [CVSS base score 6.5] | |
| ✓ | DT438705 | IBM MQ CVE-2025-21587, CVE-2025-4447 [CVSS base score 7.4] | |
| ✓ | DT438713 | IBM MQ CVE-2025-21587, CVE-2025-30698, CVE-2025-2900 [CVSS base score 7.5] | |
| ✓ | DT439059 | IBM MQ CVE-2025-30472 [highest CVSS 9.8] | |
| DT440359 | Third party component updates for cumulative security update 9.4.0.12 |
IBM MQ 9.4.0.11 Cumulative Security Update for Windows, Unix, IBM i, IBM MQ Appliance
(Last modified May 2025)
| Is Security | Is HIPER | known issue | Description |
| ✓ | DT433544 | IBM MQ Appliance CVE-2022-49043 [CVSS base score 8.1] | |
| ✓ | DT428851 / IT47591 | IBM MQ CVE-2025-27365 and IBM MQ Appliance CVE-2025-27365 [CVSS base score 6.5] | |
| DT428846 | Third party component updates for cumulative security update 9.4.0.11 |
IBM MQ 9.4.0.10 Fix Pack for Windows, Unix, IBM i, IBM MQ Appliance
(Last modified March 2025)
| Security APAR | HIPER APAR | APAR | Description |
| ✓ | IT43835 | IBM MQ CVE-2025-23225 and IBM MQ Appliance CVE-2025-23225 [CVSS base score 6.5] | |
| ✓ | ✓ | IT47091 | IBM MQ CVE-2024-54175 and IBM MQ Appliance CVE-2024-54175 [CVSS base score 5.5] |
| ✓ | IT47371 | IBM MQ CVE-2024-54173 and IBM MQ Appliance CVE-2024-54173 [CVSS base score 4.7] | |
| ✓ | IT47396 | IBM MQ CVE-2024-21235, CVE-2024-21217, CVE-2024-21210, CVE-2024-21208, CVE-2024-10917 [CVSS base score 5.3] and IBM MQ Appliance CVE-2024-21217, CVE-2024-21208, CVE-2024-10917 [CVSS base score 3.7] | |
| ✓ | IT47597 | IBM MQ CVE-2025-0975 and IBM MQ Appliance CVE-2025-0975 [CVSS base score 8.8] | |
| ✓ | IT47606 | IBM MQ Appliance CVE-2024-53088, CVE-2024-53122 [CVSS base score 5.5] | |
| IT36211 | Sender channel fails to start because it cannot connect to a host by name, but 'nslookup' resolves its IP address | ||
| IT37573 | Install/upgrade failure: amqiclen: Failed to obtain global lock(1): rc=545261555 | ||
| IT38202 | Multi-instance qmgr writes FDC with Probe Id ZX028020 or ZX028090 during startup and fails over to standby instance | ||
| IT41624 | Error log message AMQ9575 reports incorrect channel name | ||
| IT42617 | Incorrect timezone number in the header block output from dspmqtrc, if the offset from UTC is a negative number | ||
| IT43115 | Queue Manager PutCount statistics incorrect for temporary dynamic queue | ||
| IT43186 | MQ trace identifies the incorrect position of character causing conversion issue. | ||
| IT44224 | .NET client application raised 'SYSTEM.NULLREFERENCEEXCEPTION' instead of 'MQRC_CONNECTION_BROKEN' after reconnect timeout | ||
| IT44298 | Running the MQSC command 'DISPLAY AUTHINFO' might incorrectly show the 'LDAPPWD' parameter as EMPTY | ||
| IT45203 | Duplicate entries are observed in application activity traces during MQDISC | ||
| IT45257 | MQ error AMQ8454E was thrown when failing to create cluster receiver channel for uniform cluster using ini and mqsc files. | ||
| IT45366 | AMQP service intermittently hangs preventing message delivery or new client connections. | ||
| IT45432 | AMQ9620E: Internal Error on Call to SSL Function On Channel with RC=551 from gsk_secure_soc_write | ||
| IT45649 | IBM MQ channels are in stopped state after restart of queue manager. | ||
| IT45895 | Message Ids may be duplicated for pub/sub messages by the IBM MQ queue manager on Windows | ||
| IT45923 | MQTT PCF command MQCMD_INQUIRE_CHANNEL_STATUS does not correctly indicate end of responses. | ||
| IT46109 | Memory leak in locally bound MQ application in XA environment when MQ AMS is installed | ||
| IT46319 | RUNMQRAS collection of *.FDC files unreadable for IBM i | ||
| IT46343 | MFT agent unable to recover after successive MQRC 2538 leaving the agent unresponsive. | ||
| IT46399 | IBM MQ Classes for Java/JMS connecting in BINDINGS mode may generate a "Structure size check" FDC. | ||
| IT46439 | xa_open() fails with error code -5 (XAER_INVAL) when MQ classes for JMS application connects to a QSG | ||
| IT46520 | If a JSON CCDT specifies more than one channel with certificatePeerName, MQCONNX fails with Reason Code 2393 | ||
| IT46529 | IBM MQ resource adapter for Jakarta Messaging IVT wmq.jakarta.jmsra.ivt.ear fails and generates an FDC | ||
| IT46538 | IBM MQ Managed .NET client connect fails with rc=2059 when CCDT contains multiple channels with multiple CONNAMEs. | ||
| IT46548 | IBM MQ Managed File Transfer (MFT) agent generates Javacores and heap dumps due to OutOfMemoryErrors when trace is enabled | ||
| IT46573 | SYSTEM.NULLREFERENCEEXCEPTION from XMS .NET when the queue manager is unreachable | ||
| IT46577 | IBM MQ "dspmqver -p 64" or "dspmqver -a" write messages in the error logs when displaying the 32-bit GSKit version | ||
| IT46603 | dmpmqcfg reports incorrect information when an invalid argument is specified | ||
| IT46625 | FDC is generated with Probe Id xy132005 and Component xstCreateExtent with error xecS_E_TOO_BIG | ||
| IT46628 | 'dspmqinst' reports Entitlement as "IBM MQ Advanced" even after uninstalling all repackaged Advanced MQ RPM packages | ||
| IT46648 | 5725A49 MQ "C CLIENT" MEMORY GROWTH | ||
| IT46659 | The wmq.jakarta.jmsra.ivt.ear provided by IBM MQ for z/OS returns unreadable characters. | ||
| IT46703 | MQ WEB CONSOLE FAILS TO ADD MQ MANAGER WITH A DOT "." CHARACTER IN ITS NAME. | ||
| IT46711 | Install/uninstall/upgrade failure: amqiclen: Failed to obtain lock for QMgr 'MYQM': rc=1077960969 | ||
| IT46726 | Destination queue manager fails to generate COA report message and trace shows lrcE_CLUSTER_RESOLUTION_ERROR | ||
| IT46765 | MQ MFT protocol bridge agent (PBA) fails to start and reports error BFGBR0181E | ||
| IT46808 | ObjectName used for Report Message authority checks differs depending on the attributes of clustered QMALIAS used | ||
| IT46817 | AIX second installation of IBM MQ reports "/usr/mqm/web: Not found" | ||
| IT46821 | Potential memory overwrite in amqrrmfa process | ||
| IT46835 | MQ Java client properties "com.ibm.mq.cfg.TCP.ClntRcvBuffSize" and "com.ibm.mq.cfg.TCP.ClntSndBuffSize" cannot be set to 0. | ||
| IT46837 | IBM MQ on Linux for s390x install unnecessary 31-bit GSKit files | ||
| ✓ | IT46864 | Performance issue in MQ channels configured with TLS 1.3 | |
| IT46884 | Third Party component updates for Fix Pack 9.4.0.10 | ||
| IT46889 | Attempting to authenticate with a Queue Manager using a null password generates a NullPointerException. | ||
| IT46930 | Memory leak in the IBM MQ amqrmppa process | ||
| IT46969 | IBM MQ Console fails to process damaged queue objects. | ||
| IT46975 | Improve performance of character conversion within IBM MQ on Linux when using UTF-8 | ||
| IT46991 | Calling "toString()" on migration mode JMS connection and session objects returns null. | ||
| IT46996 | 'crtmqm' command fails with AMQ6708E when using a GPFS file system | ||
| IT47095 | Reconnectable MQ client MQRC_RECONNECT_INCOMPATIBLE error from MQPUT when using option MQPMO_WARN_IF_NO_SUBS_MATCHED | ||
| IT47097 | Unable to start custom MQIPT security exit after upgrading to v9.4.0.0 | ||
| IT47103 | IBM MQ web console signin fails for users with large "user id number" | ||
| IT47133 | RUNMQKTOOL utility does not run successfully on IBM i at 9.4 | ||
| IT47142 | IBM MQ classes for JMS does not suitably disconnect when balanced in a uniform cluster. | ||
| IT47175 | Add a toString() method to the TransferExitResult class to output the attributes of the current object | ||
| IT47179 | Sterling File Gateway (SFG) embedded MFT agent generates FDC containing NullPointerException when doing managed transfers | ||
| IT47225 | AIX IBM MQ fix pack bundle on Fix Central does not include the install '.toc' file | ||
| IT47253 | Defunct (also known as zombie) amqoampx process after user logs in to IBM MQ web console or uses REST API | ||
| IT47287 | Multiple warnings issued when installing MQ 9.4 on non-RHEL/SLES/Ubuntu Linux distributions | ||
| IT47288 | Problems with Linux RPM upgrade process and the IBM MQ embedded JRE and Liberty components | ||
| IT47317 | The "fteShowAgentDetails" command generates a "java.lang.IndexOutOfBoundsException" with >1 HA standby agent. | ||
| IT47362 | fteRAS terminates unexpectedly and reports a BFGCL0607E error while running the FTEConfigLogsCollector. | ||
| ✓ | IT47380 | CRTMQM or STRMQM fails in MQ V9.4 with CCSID 5035 | |
| IT47426 | IBM MQ Multicast: FDC with Probe XC006001 generated after server-bound publisher app publishes to a topic | ||
| IT47442 | Performance impact observed as queue manager cleans the contents of reusable log files when not needed | ||
| IT47457 | Linux RPM packages do not verify cleanly when using a non-default installation location | ||
| IT47474 | MQ Appliance queue manager with AMS MCA interception fails to start after migration to MQ 9.4. | ||
| IT47505 | MQ upgrade on Linux from does not generate version updated 'Replica' .swidtag files | ||
| IT47535 | IBM MQ 9.4 Queue Manager status request fails when queue manager library is in an iASP | ||
| ✓ | IT47564 | Performance Monitoring Enhancements |
IBM MQ 9.4.0.7 Cumulative Security Update for Windows, Unix, IBM i, IBM MQ Appliance
(Last modified December 2024)
| Security APAR | HIPER APAR | APAR | Description |
| ✓ | IT46250 | IBM MQ CVE-2024-51470 and IBM MQ Appliance CVE-2024-51470 [CVSS base score 6.5] | |
| ✓ | IT47065 | IBM MQ Appliance CVE-2024-36020 [CVSS base score 7.1] | |
| ✓ | IT47188 | IBM MQ CVE-2024-52896 and IBM MQ Appliance CVE-2024-52896 [CVSS base score 6.2] | |
| ✓ | IT47189 | IBM MQ CVE-2024-52897 and IBM MQ Appliance CVE-2024-52897 [CVSS base score 6.2] | |
| ✓ | IT47223 | IBM MQ CVE-2024-51471 and IBM MQ Appliance CVE-2024-51471 [CVSS base score 5.3] | |
| ✓ | IT47254 | IBM MQ CVE-2024-52898 [CVSS base score 6.2] | |
| IT41622 | 9.3 appliance firmware exhibits larger performance overheads than 9.2 for qmgrs with encrypted file system | ||
| IT47132 | Third party component updates for cumulative security update 9.4.0.7 | ||
| IT47245 | Kernel modules to enable support for RDQM on RHEL 9 kernel 5.14.0_503.11.1-1 | ||
| IT47334 | Installing 9.28.0 DRBD SELinux package on RHEL 8.8 and RHEL 9.2 fails with "error: Failed dependencies" |
IBM MQ 9.4.0.6 Cumulative Security Update for Windows, Unix, IBM i, IBM MQ Appliance
(Last modified October 2024)
| Security APAR | HIPER APAR | APAR | Description |
| ✓ | IT46890 | IBM MQ CVE-2023-50314 [CVSS base score 5.3] | |
| ✓ | IT46892 | IBM MQ CVE-2024-21147, CVE-2024-21140, CVE-2024-21144, CVE-2024-21138 [CVSS base score 7.4] | |
| ✓ | ✓ | IT47031 | IBM MQ Appliance CVE-2023-52881 [CVSS base score 5.9] |
| IT46599 | Update the MQ Console to use Carbon 11 | ||
| IT46759 | NullPointerException in CipherSpecBean.getCiphers() when MQ classes for Java/JMS applications create a TLS/SSL connection | ||
| IT46885 | Third party component updates for cumulative security update 9.4.0.6 |
IBM MQ 9.4.0.5 Fix Pack for Windows, Unix, IBM i, IBM MQ Appliance
(Last modified September 2024)
| Security APAR | HIPER APAR | APAR | Description |
| ✓ | IT45634 | IBM MQ CVE-2024-40680 and IBM MQ Appliance CVE-2024-40680 [CVSS base score 6.2] | |
| ✓ | IT46080 | IBM MQ CVE-2024-2511 [CVSS base score 3.7] | |
| ✓ | IT46501 | IBM MQ CVE-2024-40681 and IBM MQ Appliance CVE-2024-40681 [CVSS base score 7.5] | |
| ✓ | IT46613 | IBM MQ Appliance CVE-2023-5981 & CVE-2024-0533 [CVSS base score 5.9] | |
| IT43696 | Hang when MQ on AIX tries to write out the call stack after a heap-corruption SIGSEGV | ||
| IT44384 | Channel loops if a message on the transmit queue exceeds the MAXMSGL attribute of the Queue manager | ||
| IT44710 | IBM MQ FDC with probe ID XC006001 is generated by the 'amqrmppa'process during 'endmqm' call | ||
| IT45438 | An MQ JMS Client using TLSv1.3 GCM Cipher receives an RC=2009 and the Queue Manager generates an FDC with ProbeID CO373099. | ||
| IT45453 | FDC with probe XC130003 and application received RC 2009 (connection broken) on channel with RCVEXIT and SHARECNV(1) | ||
| IT45483 | STOP CHANNEL command did not stop a channel that was in a never-ending loop due to a bug in third-party security exit | ||
| IT45631 | Replace MQ Telemetry FDCs for InvalidTopicFilterExceptions, IOExceptions and TransactionFullExceptions with log messages | ||
| ✓ | IT45748 | Unable to start or delete channel after migrating queue manager to MQ 9.3 | |
| IT45988 | MFT Agent abends with NullPointerException when processing Partitioned Data Sets on z/OS. | ||
| IT46018 | MQHeaderList.write() does not correctly format header(s) whencalled with a specific CCSID and a "raw" OutputStream. | ||
| IT46191 | Messages delivered to AMQP clients may have incorrect message IDs | ||
| IT46237 | MFT agents create FDC during startup if the agent property "monitorMaxResourcesInPoll" is set to zero | ||
| ✓ | IT46247 | SIGSEGV in rrmUpdateSuspendList and queue manager then fails after suspending in many clusters | |
| ✓ | IT46316 | SIGSEGV in ziiSPIAdoptUser running inside AMQP listener | |
| ✓ | IT46327 | SIGSEGV in dspmqtrc | |
| IT46415 | Multiple fixes for JWKS functionality | ||
| IT46437 | Third Party component updates for Fix Pack 9.4.0.5 | ||
| IT46459 | RDQM support for disabling ICMP protocol usage | ||
| IT46492 | Altering an object to set cluster namelist with non existent namelist fails with AMQ8103E after applying APAR IT45710 | ||
| IT46528 | Warnings and excessive output observed during IBM MQ 9.4 Linux RPM package updated. | ||
| IT46530 | Missing libcurl section in dspmqver -a output | ||
| IT46614 | IBM MQ 9.4 client-only installation incorrectly includes Developer Edition swidtag file on Linux | ||
| IT46615 | IBM MQ interactive installer on Windows displays the same "install or upgrade" selection dialog twice | ||
| IT46618 | The IBM MQ 9.4 Windows client installation log name is prefixed with MQv90 | ||
| IT46801 | IBM MQ 9.4.0.0 upgraded to 9.4.0.5 removes the RDQM installationsetup. |
[{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSYHRD","label":"IBM MQ"},"ARM Category":[{"code":"a8m0z0000001eskAAA","label":"Retired-\u003EAPARs \u0026 PTFs"}],"ARM Case Number":"","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF012","label":"IBM i"},{"code":"PF016","label":"Linux"},{"code":"PF033","label":"Windows"}],"Version":"9.4.0"}]
Was this topic helpful?
Document Information
Modified date:
07 May 2026
UID
ibm17166037