IBM Support

SI83583 - IG Facsimile CVE-2023-30988

PTF Cover Letter


PTF ( Program Temporary Fixes ) Cover letter


Order this fix

Abstract

IG Facsimile CVE-2023-30988


Pre/Co-Requisite PTF / Fix List

REQ  LICENSED           PTF/FIX  LEVEL

TYPE PROGRAM  RELEASE   NUMBER   MIN/MAX  OPTION
---- -------- --------- -------  -------  ------
PRE  5770SS1  V7R2M0    SI84034   00/00    0000
PRE  5770SS1  V7R3M0    SI84030   00/00    0000
PRE  5770SS1  V7R4M0    SI84029   00/00    0000
PRE  5770SS1  V7R5M0    SI84028   00/00    0000
DIST 5798FAX  V5R8M0    SE59941   NONE     0000 (SEE MRI PTF/FIX LIST BELOW)

MRI PTF/FIX LIST
----------------
APAR SE59941 AFFECTS THESE LANGUAGES.  IF YOU HAVE ANY OF THESE
LANGUAGES INSTALLED, INSTALL THE DISTRIBUTION REQUISITE MRI PTF THAT
CORRESPONDS TO THE LANGUAGE(S) INSTALLED ON YOUR SYSTEM.
-----------------------------------------------------------------
:  FEATURE                                   LICENSED  PTF/FIX  :
:  CODE     LANGUAGE                         PROGRAM   NUMBER   :
:  -------  -------------------------------  --------  -------  :
:  2924     ENGLISH UPPER/LOWER CASE SBCS    5798FAX   SI54319  :
:  2902     ESTONIAN                         5798FAX   SI54409  :
:  2903     LITHUANIAN                       5798FAX   SI54410  :
:  2904     LATVIAN                          5798FAX   SI54411  :
:  2905     VIETNAMESE                       5798FAX   SI54412  :
:  2906     LAO                              5798FAX   SI54413  :
:  2909     BELGIAN ENGLISH                  5798FAX   SI54414  :
:  2911     SLOVENIAN                        5798FAX   SI54415  :
:  2912     CROATIAN                         5798FAX   SI54416  :
:  2913     MACEDONIAN                       5798FAX   SI54417  :
:  2914     SERBIAN                          5798FAX   SI54418  :
:  2922     PORTUGUESE                       5798FAX   SI54419  :
:  2923     DUTCH                            5798FAX   SI54420  :
:  2925     FINNISH                          5798FAX   SI54421  :
:  2926     DANISH                           5798FAX   SI54422  :
:  2928     FRENCH                           5798FAX   SI54423  :
:  2929     GERMAN                           5798FAX   SI54424  :
:  2930     JAPAN LOWER CASE                 5798FAX   SI54425  :
:  2931     SPANISH                          5798FAX   SI54426  :
:  2932     ITALIAN                          5798FAX   SI54427  :
:  2933     NORWEGIAN - BOKMAL               5798FAX   SI54428  :
:  2937     SWEDISH                          5798FAX   SI54429  :
:  2938     ENGLISH UPPER CASE DBCS          5798FAX   SI54430  :
:  2939     SWISS GERMAN                     5798FAX   SI54431  :
:  2940     SWISS FRENCH                     5798FAX   SI54432  :
:  2942     SWISS ITALIAN                    5798FAX   SI54433  :
:  2954     ARABIC                           5798FAX   SI54434  :
:  2956     TURKISH                          5798FAX   SI54435  :
:  2957     GREEK                            5798FAX   SI54436  :
:  2958     ICELANDIC                        5798FAX   SI54437  :
:  2961     HEBREW                           5798FAX   SI54438  :
:  2962     JAPANESE                         5798FAX   SI54439  :
:  2963     BELGIUM DUTCH                    5798FAX   SI54440  :
:  2966     BELGIUM FRENCH                   5798FAX   SI54441  :
:  2972     THAI                             5798FAX   SI54442  :
:  2974     BULGARIAN                        5798FAX   SI54443  :
:  2975     CZECH                            5798FAX   SI54444  :
:  2976     HUNGARIAN                        5798FAX   SI54445  :
:  2978     POLISH LANGUAGE                  5798FAX   SI54446  :
:  2979     RUSSIAN                          5798FAX   SI54447  :
:  2980     BRAZILIAN PORTUGUESE             5798FAX   SI54448  :
:  2981     CANADIAN FRENCH                  5798FAX   SI54449  :
:  2984     ENGLISH UPPER/LOWER CASE DBCS    5798FAX   SI54450  :
:  2986     KOREAN                           5798FAX   SI54451  :
:  2987     TRADITIONAL CHINESE              5798FAX   SI54452  :
:  2989     SIMPLIFIED CHINESE               5798FAX   SI54453  :
:  2992     ROMANIAN                         5798FAX   SI54454  :
:  2994     SLOVAKIAN                        5798FAX   SI54455  :
:  2995     ALBANIAN                         5798FAX   SI54456  :
:  2996     PORTUGUESE MNCS                  5798FAX   SI54457  :
:  2998     FARSI                            5798FAX   SI54458  :
-----------------------------------------------------------------




NOTICE:
-------
Application of this PTF may disable or render ineffective programs that
use system memory addresses not generated by the IBM translator,
including programs that circumvent control technology designed to limit
interactive capacity to purchased levels.  This PTF may be a prerequisite
for future PTFs.  By applying this PTF you authorize and agree to the
foregoing.

This PTF is subject to the terms of the license agreement which
accompanied, or was contained in, the Program for which you are obtaining
the PTF.  You are not authorized to install or use the PTF except as part
of a Program for which you have a valid Proof of Entitlement.

SUBJECT TO ANY WARRANTIES WHICH CAN NOT BE EXCLUDED OR EXCEPT AS EXPLICITLY
AGREED TO IN THE APPLICABLE LICENSE AGREEMENT OR AN APPLICABLE SUPPORT
AGREEMENT, IBM MAKES NO WARRANTIES OR CONDITIONS EITHER EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OR CONDITIONS OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON INFRINGEMENT,
REGARDING THE PTF.

The applicable license agreement may have been provided to you in printed
form and/or may be viewed using the Work with Software Agreements (WRKSFWAGR)
CL command.





APAR Error Description / Circumvention

-----------------------------------------------
CVE-2023-30988 needs to be addressed.

CORRECTION FOR APAR SE79908 :
-----------------------------
IBM Facsimile Support for i security enhancements to resolve
CVE-2023-30988.

CIRCUMVENTION FOR APAR SE79908 :
--------------------------------
None.


Activation Instructions


None.




Special Instructions


Prior to applying or removing this PTF, do the following:
1.  End any FAX related jobs using the command ENDFAXSPT FAXD(*ALL)
ENHSRV(*YES)
2.  End the QFAXSBS and QFQSBS subsystems using the ENDSBS command.

After applying or removing this PTF, do the following:
1.  Start the QFAXSBS and QFQSBS subsystems using the STRSBS command.
2.  Start additional FAX related jobs using the STRFAXSPT command
specifying the FAX descriptions that must be started.

********************************************************************
THE FOLLOWING ARE SUPERSEDED SPECIAL INSTRUCTIONS. IF THE SUPERSEDED
PTF HAS ALREADY BEEN APPLIED AND ITS SPECIAL INSTRUCTION FOLLOWED,
IT IS NOT NECESSARY TO FOLLOW THAT SPECIAL INSTRUCTION AGAIN.
********************************************************************

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF SI59460 :
=================================================

If Fax Support isn't used or the function is not necessary, no action
should be done. Otherwise, after loading and applying this PTF:
A) Set the environmental variable 'QIBM_SAVE_PARTIAL_FAX' by running
command 'ADDENVVAR ENVVAR(QIBM_SAVE_PARTIAL_FAX) LEVEL(*SYS)'
B) Restart Fax Support as follow:
1) ENDFAXSPT FAXD(*ALL) ENHSRV(*YES)
2) STRFAXSPT FAXD(<DESCRIPTION>) <DESCRIPTION> represents a fax
description.

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF SI68850 :
=================================================

If Fax Support isn't used or the function is not necessary, no action
should be done. Otherwise, after loading and applying this fix:
A) Create the data area QUSRSYS/QFAXWTIME to set delay time. For
example, run the command 'CRTDTAARA DTAARA(QUSRSYS/QFAXWTIME)
TYPE(*DEC) LEN(5 0) VALUE(3)' to set the delay time to 3 seconds.
B) Restart Fax Support as follow:
1) ENDFAXSPT FAXD(*ALL) ENHSRV(*YES)
2) STRFAXSPT FAXD(<DESCRIPTION>) <DESCRIPTION> represents a fax
description.

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF SI57656 :
=================================================

If Fax Support isn't used, please ignore this PTF. Otherwise, the
following instructions are required to apply or remove this PTF:
1) Stop Fax Support by running the command: ENDFAXSPT FAXD(*ALL)
ENHSRV(*YES)
2) Apply or remove this PTF
3) Start Fax Support by running the command: STRFAXSPT FAXD(XXX)    XXX
represents a fax descriptions

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF SI52896 :
=================================================

Support for an Ethernet Device Server is only available with
corresponding function in the  V7R2M0 Asynchronous Line Description.


Default Instructions

THIS PTF CAN BE APPLIED IMMEDIATE OR DELAYED.



Supersedes

PTF/FIX NO(S).  APAR TITLE LINE
--------------  ------------------------------------------------------------
   SI78876      OSP-FIX THE INTERNALLY FOUND ISSUES
   SI78876      OSP-FIX THE INTERNALLY FOUND ISSUES
   SI59460      F/QFFASC - SAVE RECEIVED GOOD PAGES EVEN IF A CANCEL IS SENT
   SI68850      OSP-A TIMING ISSUE WITH STRFAXSPT AND ENDFAXSPT
   SI69054      OSP-REMOVE THE OBSOLETE LINE TYPE *FAX
   SI57656      F/EXTEND FAX SUPPORT TO SUPPORT A NEW TYPE OF ADAPTER WITH C
   SI52896      OSP-FAX For ACS support

Summary Information

System..............................  i
Models..............................  
Release.............................  V5R8M0
Licensed Program....................  5798FAX
APAR Fixed..........................  View details for APAR SE79908
Superseded by:......................  View fix details for PTF SI85663
Recompile...........................  N
Library.............................  QFAX
MRI Feature ........................  NONE
Cum Level...........................  


IBM i Support

IBM disclaims all warranties, whether express or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. By furnishing this document, IBM grants no licenses to any related patents or copyrights. Copyright © 1996,1997,1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019, 2020, 2021, 2022, 2023, 2024 IBM Corporation. Any trademarks and product or brand names referenced in this document are the property of their respective owners. Consult the Terms of use link for trademark information.

[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"5.8.0","Product":{"code":"SWG60","label":"IBM i"},"Component":"5798FAX","Edition":"","Line of Business":{"code":"LOB57","label":"Power"}}]

Document Information

Modified date:
09 February 2024