Fix Readme
Abstract
IBM MQ provides periodic maintenance releases (Fix Packs), and Cumulative Security Updates, for Version 9.4.0 Long Term Support (LTS). The following is a complete listing of available fixes grouped by maintenance delivery.
Content
This document describes fixes included in LTS maintenance releases and in LTS Cumulative Security Updates. For more information on the types of maintenance, see IBM MQ release types section of the product documentation.
| Release type | Release date | Total APARs | Security APARs | HIPER APARs | |
| IBM MQ 9.4.0.5 | Fix Pack | 05 September 2024 | 29 | 4 | 4 |
| IBM MQ 9.4.0.0 | Initial release (both Continuous Delivery and LTS) | 18 Jun 2024* | 36 | 9 | 0 |
* The listed release date applies to IBM MQ on distributed platforms. For the IBM MQ Appliance, the Release Date was 11th Jul 2024.
Download the latest IBM MQ Fixes from the IBM MQ Recommended Fixes and Planned Maintenance release dates page.
Vulnerability risk information for IBM MQ can be found at Security Bulletin for IBM WebSphere MQ
Example table
| Security APAR | HIPER APAR | APAR |
Description
|
| ✓ | AB12345 |
Example of Security APAR: CVE-XXXX-XXXXX (security/integrity exposure) [CVSS base score 5.3]
|
|
| ✓ | ZY98765 |
Example of a HIPER APAR
|
Note: The CVSS scoring information, listed in the fix list tables, is accurate at the time of release. Review links contained in the referenced bulletins for additional information on scoring, including any retrospective changes to scores assigned by third parties.
IBM MQ 9.4.0.5 fix pack for Windows, Unix, IBM i, IBM MQ Appliance
(Last modified September 2024)
| Security APAR | HIPER APAR | APAR | Description |
| ✓ | IT45634 | IBM MQ CVE-2024-40680 and IBM MQ Appliance CVE-2024-40680 [CVSS base score 6.2] | |
| ✓ | IT46080 | IBM MQ CVE-2024-2511 [CVSS base score 3.7] | |
| ✓ | IT46501 | IBM MQ CVE-2024-40681 and IBM MQ Appliance CVE-2024-40681 [CVSS base score 7.5] | |
| ✓ | IT46613 | IBM MQ Appliance CVE-2024-5981 [CVSS base score 5.9] | |
| IT43696 | Hang when MQ on AIX tries to write out the call stack after a heap-corruption SIGSEGV | ||
| IT44384 | Channel loops if a message on the transmit queue exceeds the MAXMSGL attribute of the Queue manager | ||
| IT44710 | IBM MQ FDC with probe ID XC006001 is generated by the 'amqrmppa'process during 'endmqm' call | ||
| IT45438 | An MQ JMS Client using TLSv1.3 GCM Cipher receives an RC=2009 and the Queue Manager generates an FDC with ProbeID CO373099. | ||
| IT45453 | FDC with probe XC130003 and application received RC 2009 (connection broken) on channel with RCVEXIT and SHARECNV(1) | ||
| IT45483 | STOP CHANNEL command did not stop a channel that was in a never-ending loop due to a bug in third-party security exit | ||
| IT45631 | Replace MQ Telemetry FDCs for InvalidTopicFilterExceptions, IOExceptions and TransactionFullExceptions with log messages | ||
| ✓ | IT45748 | Unable to start or delete channel after migrating queue manager to MQ 9.3 | |
| IT45988 | MFT Agent abends with NullPointerException when processing Partitioned Data Sets on z/OS. | ||
| IT46018 | MQHeaderList.write() does not correctly format header(s) whencalled with a specific CCSID and a "raw" OutputStream. | ||
| IT46191 | Messages delivered to AMQP clients may have incorrect message IDs | ||
| IT46237 | MFT agents create FDC during startup if the agent property "monitorMaxResourcesInPoll" is set to zero | ||
| ✓ | IT46247 | SIGSEGV in rrmUpdateSuspendList and queue manager then fails after suspending in many clusters | |
| ✓ | IT46316 | SIGSEGV in ziiSPIAdoptUser running inside AMQP listener | |
| ✓ | IT46327 | SIGSEGV in dspmqtrc | |
| IT46415 | Multiple fixes for JWKS functionality | ||
| IT46437 | Third Party component updates for Fix Pack 9.4.0.5 | ||
| IT46459 | RDQM support for disabling ICMP protocol usage | ||
| IT46492 | Altering an object to set cluster namelist with non existent namelist fails with AMQ8103E after applying APAR IT45710 | ||
| IT46528 | Warnings and excessive output observed during IBM MQ 9.4 Linux RPM package updated. | ||
| IT46530 | Missing libcurl section in dspmqver -a output | ||
| IT46614 | IBM MQ 9.4 client-only installation incorrectly includes Developer Edition swidtag file on Linux | ||
| IT46615 | IBM MQ interactive installer on Windows displays the same "install or upgrade" selection dialog twice | ||
| IT46618 | The IBM MQ 9.4 Windows client installation log name is prefixed with MQv90 | ||
| IT46801 | IBM MQ 9.4.0.0 upgraded to 9.4.0.5 removes the RDQM installationsetup. |
[{"Type":"MASTER","Line of Business":{"code":"LOB67","label":"IT Automation \u0026 App Modernization"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSYHRD","label":"IBM MQ"},"ARM Category":[{"code":"a8m0z0000001eskAAA","label":"Retired-\u003EAPARs \u0026 PTFs"}],"ARM Case Number":"","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF012","label":"IBM i"},{"code":"PF016","label":"Linux"},{"code":"PF033","label":"Windows"}],"Version":"9.4.0"}]
Was this topic helpful?
Document Information
Modified date:
17 September 2024
UID
ibm17166037