In general, after every update, you should check whether there are any necessary or important ifixes for the new version (hiper, security). However, we will not look at this any further here.

However, installed ifixes were manually uninstalled before the update and we will now look at how to proceed with these ifixes. Specifically, this concerns the two manually removed ifixes 81112ma and IJ52366s7a.

In the case of the OpenSSH ifix 81112ma (for versions 8.1.112.0-8.1.112.2200), the fix is ​​no longer necessary after the update. OpenSSH has been updated to version 9.7.3013.1000 and there is currently no new ifix for this version.

Before the update, the ifix IJ52366s7a was installed on our system, which closed a security hole in the kernel. The ifix had to be removed manually before the update, because the update contained a newer version of the affected fileset bos.net.tcp.client_core. But the newer version does not yet contain the official fix for the APAR IJ52366. To close the security hole again, the associated ifix must be installed. For service pack 8, this is IJ52366s8a.241031.epkg.Z:

# emgr -e IJ52366s8a.241031.epkg.Z
…
+-----------------------------------------------------------------------------+
Processing APAR reference file
+-----------------------------------------------------------------------------+
ATTENTION: Interim fix is enabled for automatic removal by installp.
…
+-----------------------------------------------------------------------------+
Operation Summary
+-----------------------------------------------------------------------------+
Log file is /var/adm/ras/emgr.log

EPKG NUMBER       LABEL               OPERATION              RESULT           
===========       ==============      =================      ==============   
1                 IJ52366s8a          INSTALL                SUCCESS          

ATTENTION: system reboot is required. Please see the "Reboot Processing"
sections in the output above or in the /var/adm/ras/emgr.log file.

Return Status = SUCCESS
# 

Note: The ifix IJ52366s8a requires a reboot.

The official fix for this APAR is included in 7200-05-09-2446. The installed ifix IJ52366s8a will be automatically removed, when updating to this version.