Release Notes
Abstract
Changes included in below Fix Pack might negatively affect existing product function. Evaluate these APAR(s) for the potential impact in your environment. You can refer to the APAR(s) listed below for description of the problems as well as corrective actions.
Content
# 9.0.5.17
APAR | Impact | Description |
---|---|---|
High |
java.lang.NullPointerException occurs related to to com.ibm.ISecurityUtilityImpl.PasswordUtil |
|
Medium |
8.5 second delay closing websocket |
|
Low |
NCSA log incorrectly displays the year timestamp when configured 'accessLogFormat' |
# 9.0.5.16
APAR | Impact | Description |
---|---|---|
High |
java.lang.NullPointerException occurs related to to com.ibm.ISecurityUtilityImpl.PasswordUtil |
|
Medium |
8.5 second delay closing websocket |
|
Low |
NCSA log incorrectly displays the year timestamp when configured 'accessLogFormat' |
|
Low |
The 'Help' link next to the 'Log out' link in the admin console is broken |
|
Partial Fix |
Intermittent LDAP SSL connection failure under heavy load |
# 9.0.5.15
APAR | Impact | Description |
---|---|---|
High |
java.lang.NullPointerException occurs related to to com.ibm.ISecurityUtilityImpl.PasswordUtil |
|
High |
Variables in -X parameters not expanded on zOS |
|
Medium |
8.5 second delay closing websocket |
|
Medium |
Problem with AdminTask.enablePasswordEncryption |
|
Low |
The 'Help' link next to the 'Log out' link in the admin console is broken |
|
Partial Fix |
Intermittent LDAP SSL connection failure under heavy load |
# 9.0.5.14
APAR | Impact | Description |
---|---|---|
Medium |
Memory leak in JaxRsFactoryImplicitBeanCDICustomizer |
|
Medium |
8.5 second delay closing websocket |
|
Medium |
LDAP SSL Connections may use default SSL config |
# 9.0.5.13
APAR | Impact | Description |
---|---|---|
Medium |
Memory leak in JaxRsFactoryImplicitBeanCDICustomizer |
|
Medium |
CWTAI2047E: No key was found to verify the signature in 9.0.5.13 |
|
Medium |
8.5 second delay closing websocket |
|
Medium |
java.lang.IllegalArgumentException: Class 'Group' does not have a feature named 'password.' |
|
Low |
navigation links not clickable after switching from All Tasks to WebSphere Application Server product view |
# 9.0.5.12
APAR | Impact | Description |
---|---|---|
High |
RENEWING WAS GENERATED PERSONAL CERTIFICATE NOT REFLECTED BY SOAP ENDPOINT |
|
Medium |
Memory leak in JaxRsFactoryImplicitBeanCDICustomizer |
|
Medium |
Memory leak executing EclipseLink batch queries |
|
Medium |
Quality of protection panel for System SSL not accessible. |
|
Medium |
8.5 second delay closing websocket |
|
Medium |
java.lang.IllegalArgumentException: Class 'Group' does not have a feature named 'password.' |
|
Low |
navigation links not clickable after switching from All Tasks to WebSphere Application Server product view |
|
Partial Fix |
'Error creating client_auth_token' at server shutdown. |
# 9.0.5.11
APAR | Impact | Description |
---|---|---|
High |
RENEWING WAS GENERATED PERSONAL CERTIFICATE NOT REFLECTED BY SOAP ENDPOINT |
|
Medium |
Memory leak in JaxRsFactoryImplicitBeanCDICustomizer |
|
Medium |
Memory leak executing EclipseLink batch queries |
|
Medium |
Quality of protection panel for System SSL not accessible. |
|
Medium |
Exceptions thrown in ConfigureJAASLogin.afterStepsExecuted |
|
Low |
NPE in com.ibm.ejs.j2c.ConnectionFactoryRefBuilderImpl |
|
Low |
Some expected TLS ciphers not negotiable |
|
Low |
NPE in SSL Socket Factory |
|
Low |
java.lang.ClassCastException: java.lang.Integer incompatible with java.math.BigDecimal |
|
Low |
navigation links not clickable after switching from All Tasks to WebSphere Application Server product view |
|
Partial Fix |
'Error creating client_auth_token' at server shutdown. |
# 9.0.5.10
APAR | Impact | Description |
---|---|---|
High |
RENEWING WAS GENERATED PERSONAL CERTIFICATE NOT REFLECTED BY SOAP ENDPOINT |
|
Medium |
javax.naming.NoInitialContextException: Unable to determine caller's BundleContext; |
|
Medium |
IHS 9.0.5.10 INSTCONFFAILED |
|
Medium |
OpenID Connect CWTAI2030I/CWTAI2007E |
|
Medium |
JVMCFRE106 DUPLICATE METHOD error will be logged when client attempts to use an EJB |
|
Low |
OidcClientHelper.getAccessTokenFromSubject fails to find OIDC hash table on Subject with JWT SSO |
|
Low |
The asserted user 'unauthenticated' is no longer authenticated. |
|
Low |
Some expected TLS ciphers not negotiable |
|
Low |
ArrayIndexOutOfBoundsException after 8.5.5.20/9.0.5.8 |
|
Low |
java.lang.ClassCastException: java.lang.Integer incompatible with java.math.BigDecimal |
|
Low |
navigation links not clickable after switching from All Tasks to WebSphere Application Server product view |
|
Partial Fix |
'Error creating client_auth_token' at server shutdown. |
# 9.0.5.9
APAR | Impact | Description |
---|---|---|
Medium |
startup failure after disabling custom password encryption |
|
Medium |
OpenID Connect CWTAI2030I/CWTAI2007E |
|
Medium |
NPE submitting batch job with no servers available |
|
Medium |
Mixed cell node sync error J2CA0043E java.lang.IllegalStateException: Invalid RA JCA specification version |
|
Medium |
JVMCFRE106 DUPLICATE METHOD error will be logged when client attempts to use an EJB |
|
Medium |
early webServer crashes with Intelligent Management enabled |
|
Low |
ClassCastException in WebCollaborator |
|
Low |
JPA: java.lang.ClassCastException: java.lang.Integer incompatible with java.lang.Boolean |
|
Low |
The asserted user 'unauthenticated' is no longer authenticated. |
|
Low |
Some expected TLS ciphers not negotiable |
|
Low |
java.lang.ClassCastException: java.lang.Integer incompatible with java.math.BigDecimal |
|
Low |
OidcClientHelper.getAccessTokenFromSubject fails to find OIDC hash table on Subject with JWT SSO |
|
Low |
navigation links not clickable after switching from All Tasks to WebSphere Application Server product view |
|
Low |
ArrayIndexOutOfBoundsException after 8.5.5.20/9.0.5.8 |
|
Partial Fix |
'Error creating client_auth_token' at server shutdown. |
# 9.0.5.8
APAR | Impact | Description |
---|---|---|
Medium |
OpenID Connect CWTAI2030I/CWTAI2007E |
|
Medium |
STOPSERVER, SERVERSTATUS FAILS WHEN AES ENCRYPTION IS ENABLED FOR THE COMMAND |
|
Medium |
startup failure after disabling custom password encryption |
|
Medium |
Mixed cell node sync error J2CA0043E java.lang.IllegalStateException: Invalid RA JCA specification version |
|
Low |
JPA: java.lang.ClassCastException: java.lang.Integer incompatible with java.lang.Boolean |
|
Low |
ArrayIndexOutOfBoundsException after 8.5.5.20/9.0.5.8 |
|
Low |
Some expected TLS ciphers not negotiable |
|
Low |
The asserted user 'unauthenticated' is no longer authenticated. |
|
Low |
ClassCastException in WebCollaborator |
|
Low |
navigation links not clickable after switching from All Tasks to WebSphere Application Server product view |
# 9.0.5.7
APAR | Impact | Description |
---|---|---|
Medium |
Datasource custom property password problems |
|
Medium |
OpenID Connect CWTAI2030I/CWTAI2007E |
|
Medium |
startup failure after disabling custom password encryption |
|
Medium |
Mixed cell node sync error J2CA0043E java.lang.IllegalStateException: Invalid RA JCA specification version |
|
Low |
JPA: java.lang.ClassCastException: java.lang.Integer incompatible with java.lang.Boolean |
|
Low |
Some expected TLS ciphers not negotiable |
|
Low |
The asserted user 'unauthenticated' is no longer authenticated. |
|
Low |
Password prompt hides terminal output on IBM I platform |
|
Low |
Profile or certificate creation fails with |
|
Low |
navigation links not clickable after switching from All Tasks to WebSphere Application Server product view |
# 9.0.5.6
APAR | Impact | Description |
---|---|---|
High |
Standalone ldaps:// URL's fail with 'ldapss://' related error |
|
Medium |
Datasource custom property password problems |
|
Medium |
wasservice.exe fails to stop server |
|
Medium |
OpenID Connect CWTAI2030I/CWTAI2007E |
|
Low |
Custom scheduler in the EJB timer service panel not displayed correctly |
|
Low |
Some expected TLS ciphers not negotiable |
|
Low |
The asserted user 'unauthenticated' is no longer authenticated. |
|
Low |
HTML img tag element displayed inside the TPV |
|
Low |
Password prompt hides terminal output on IBM I platform |
|
Low |
Profile or certificate creation fails with |
|
Low |
navigation links not clickable after switching from All Tasks to WebSphere Application Server product view |
# 9.0.5.5
APAR | Impact | Description |
---|---|---|
High |
Potential vulnerability in admin console |
|
Medium |
CNTR5104E RECEIVED WHEN DEPLOYING EJB APPLICATION |
|
Medium |
failed to login to admin console the first time with RAD |
|
Medium |
OpenID Connect CWTAI2030I/CWTAI2007E |
|
Low |
The asserted user 'unauthenticated' is no longer authenticated. |
|
Low |
HTML img tag element displayed inside the TPV |
|
Low |
Some admin console with collection tables load slowly |
|
Low |
Custom scheduler in the EJB timer service panel not displayed correctly |
|
Low |
no post-sync deployment processing on dmgr |
|
Low |
Password prompt hides terminal output on IBM I platform |
|
Low |
Profile or certificate creation fails with |
|
Low |
navigation links not clickable after switching from All Tasks to WebSphere Application Server product view |
# 9.0.5.4
APAR | Impact | Description |
---|---|---|
High |
Potential vulnerability in admin console |
|
Medium |
SAML login fails due to ClassNotFoundException |
|
Medium |
failed to login to admin console the first time with RAD |
|
Medium |
CNTR5104E RECEIVED WHEN DEPLOYING EJB APPLICATION |
|
Low |
NPE in modifyAuditPolicy |
|
Low |
no post-sync deployment processing on dmgr |
|
Low |
The asserted user 'unauthenticated' is no longer authenticated. |
|
Low |
HTML img tag element displayed inside the TPV |
|
Low |
JPA: Embeddable JoinColumn with same name and referencedColumnName throws exception |
|
Low |
Some admin console with collection tables load slowly |
|
Low |
Custom scheduler in the EJB timer service panel not displayed correctly |
|
Low |
Password prompt hides terminal output on IBM I platform |
|
Low |
navigation links not clickable after switching from All Tasks to WebSphere Application Server product view |
# 9.0.5.3
APAR | Impact | Description |
---|---|---|
High |
Potential vulnerability in admin console |
|
Medium |
CWWIM5106E with mixed cell including 8.5.5.17 or later |
|
Medium |
CNTR5104E RECEIVED WHEN DEPLOYING EJB APPLICATION |
|
Medium |
native_stdout.log on Windows fills up with repeating debug timestamps |
|
Low |
no post-sync deployment processing on dmgr |
|
Low |
Custom scheduler in the EJB timer service panel not displayed correctly |
|
Low |
Some admin console with collection tables load slowly |
|
Low |
HTML img tag element displayed inside the TPV |
|
Low |
JPA: Embeddable JoinColumn with same name and referencedColumnName throws exception |
|
Low |
navigation links not clickable after switching from All Tasks to WebSphere Application Server product view |
# 9.0.5.2
APAR | Impact | Description |
---|---|---|
High |
Potential vulnerability in admin console |
|
High |
CNTR5104E RECEIVED WHEN DEPLOYING EJB APPLICATION |
|
Medium |
CWWIM5106E with mixed cell including 8.5.5.17 or later |
|
Medium |
CNTR5104E RECEIVED WHEN DEPLOYING EJB APPLICATION |
|
Medium |
Intermittent ConcurrentModificationException from MetadataRepository |
|
Low |
Some admin console with collection tables load slowly |
|
Low |
SSL0232W with SSLFIPSEnable |
|
Low |
LogViewer not able to write logViewer.pos file |
|
Low |
HTML img tag element displayed inside the TPV |
|
Low |
WebServer logs with '_log' in the name can't be viewed in the console |
|
Low |
navigation links not clickable after switching from All Tasks to WebSphere Application Server product view |
# 9.0.5.1
APAR | Impact | Description |
---|---|---|
High |
Potential vulnerability in admin console |
|
High |
CNTR5104E RECEIVED WHEN DEPLOYING EJB APPLICATION |
|
Medium |
SECJ0129E authorization failure under load on z/OS using SAF Authorization. |
|
Medium |
CWWIM5106E with mixed cell including 8.5.5.17 or later |
|
Medium |
CNTR5104E RECEIVED WHEN DEPLOYING EJB APPLICATION |
|
Medium |
Intermittent ConcurrentModificationException from MetadataRepository |
|
Medium |
Possible error with JPA and Unidirectional OneToMany relationship that is configured with a JoinColumn that maps to an existing field. |
|
Low |
Some admin console with collection tables load slowly |
|
Low |
HTML img tag element displayed inside the TPV |
|
Low |
WebServer logs with '_log' in the name can't be viewed in the console |
|
Low |
navigation links not clickable after switching from All Tasks to WebSphere Application Server product view |
# 9.0.5.0
APAR | Impact | Description |
---|---|---|
High |
Potential vulnerability in admin console |
|
High |
CNTR5104E RECEIVED WHEN DEPLOYING EJB APPLICATION |
|
Medium |
SECJ0129E authorization failure under load on z/OS using SAF Authorization. |
|
Medium |
Error when accessing list of Applications in the Administration Console |
|
Medium |
CNTR5104E RECEIVED WHEN DEPLOYING EJB APPLICATION |
|
Medium |
Possible error with JPA and Unidirectional OneToMany relationship that is configured with a JoinColumn that maps to an existing field. |
|
Medium |
Failure in Admin Console after editing multi-valued custom property |
|
Low |
Some admin console with collection tables load slowly |
|
Low |
HTML img tag element displayed inside the TPV |
|
Low |
WebServer logs with '_log' in the name can't be viewed in the console |
|
Low |
navigation links not clickable after switching from All Tasks to WebSphere Application Server product view |
# 9.0.0.11
APAR | Impact | Description |
---|---|---|
High |
Potential vulnerability in admin console |
|
Medium |
SECJ0129E authorization failure under load on z/OS using SAF Authorization. |
|
Medium |
Error when accessing list of Applications in the Administration Console |
|
Medium |
LDAP search filter issue with parenthesis |
|
Medium |
Possible error with JPA and Unidirectional OneToMany relationship that is configured with a JoinColumn that maps to an existing field. |
|
Medium |
Failure in Admin Console after editing multi-valued custom property |
|
Low |
DefaultApplication changed in 9.0.0.11 |
|
Low |
Some admin console with collection tables load slowly |
|
Low |
WebServer logs with '_log' in the name can't be viewed in the console |
|
Low |
ClassNotFoundException occurring during JSF initialization |
|
Low |
IBM MQ listener port stopped working to WebSphere v9.0.0.9 |
|
Low |
navigation links not clickable after switching from All Tasks to WebSphere Application Server product view |
# 9.0.0.10
APAR | Impact | Description |
---|---|---|
High |
Potential vulnerability in admin console |
|
Medium |
Correction for PH02461 |
|
Medium |
Potential denial of service in WebSphere Application Server Admin Console (CVE-2019-4080) |
|
Medium |
SECJ0129E authorization failure under load on z/OS using SAF Authorization. |
|
Medium |
LDAP search filter issue with parenthesis |
|
Medium |
Possible error with JPA and Unidirectional OneToMany relationship that is configured with a JoinColumn that maps to an existing field. |
|
Medium |
Failure in Admin Console after editing multi-valued custom property |
|
Low |
Trace to memory buffer stopped working when HPEL is enabled |
|
Low |
Fix Pack 9.0.0.7 or 9.0.0.8 didn't update jpa configuration file correctly |
|
Low |
WebServer logs with '_log' in the name can't be viewed in the console |
|
Low |
ClassNotFoundException occurring during JSF initialization |
|
Low |
IBM MQ listener port stopped working to WebSphere v9.0.0.9 |
# 9.0.0.9
APAR | Impact | Description |
---|---|---|
Medium |
SECJ0129E authorization failure under load on z/OS using SAF Authorization. |
|
Medium |
Daemon abend0c4s in bboclssa and possible termination |
|
Medium |
Failure in Admin Console after editing multi-valued custom property |
|
Low |
Inputting an invalid webserver conf file path on the console produces a blank page |
|
Low |
WebServer logs with '_log' in the name can't be viewed in the console |
|
Low |
IBM MQ listener port stopped working to WebSphere v9.0.0.9 |
# 9.0.0.8
APAR | Impact | Description |
---|---|---|
Medium |
SECJ0129E authorization failure under load on z/OS using SAF Authorization. |
|
Medium |
Menus for certain panels don't get populated |
|
Medium |
Daemon abend0c4s in bboclssa and possible termination |
|
Medium |
Failure in Admin Console after editing multi-valued custom property |
|
Low |
Fix Pack 9.0.0.7 or 9.0.0.8 didn't update jpa configuration file correctly |
|
Low |
Inputting an invalid webserver conf file path on the console produces a blank page |
|
Low |
WebServer logs with '_log' in the name can't be viewed in the console |
|
Low |
IBM MQ listener port stopped working to WebSphere v9.0.0.9 |
# 9.0.0.7
APAR | Impact | Description |
---|---|---|
Medium |
Daemon abend0c4s in bboclssa and possible termination |
|
Medium |
Failure in Admin Console after editing multi-valued custom property |
|
Low |
Fix Pack 9.0.0.7 or 9.0.0.8 didn't update jpa configuration file correctly |
|
Low |
Inputting an invalid webserver conf file path on the console produces a blank page |
|
Low |
Not able to renew a self-signed wildcard certificate |
|
Low |
In use count can be wrong after APAR PI77049 - causing ABEND=00dc3000 RSNCODE=0a150001 |
|
Low |
ArrayIndexOutOfBoundsException by Security Auditing |
|
Low |
WebServer logs with '_log' in the name can't be viewed in the console |
# 9.0.0.6
APAR | Impact | Description |
---|---|---|
Medium |
Daemon abend0c4s in bboclssa and possible termination |
|
Medium |
Failure in Admin Console after editing multi-valued custom property |
|
Low |
Not able to renew a self-signed wildcard certificate |
|
Low |
In use count can be wrong after APAR PI77049 - causing ABEND=00dc3000 RSNCODE=0a150001 |
|
Low |
Allow empty main-class attribute in manifest.mf for application client module |
# 9.0.0.5
APAR | Impact | Description |
---|---|---|
High |
IBMPROXY is down by SIGSEGV |
|
Medium |
ArrayIndexOutOfBoundsException from OpenJPA for @EmbeddedId |
|
Medium |
JMS connections from Websphere Application Server (WAS) are not destroyed was to fix pack v8.5.5.12 |
|
Medium |
Failure in Admin Console after editing multi-valued custom property |
|
Medium |
Loop in CICS asid when BBOATRUE module delivered with 9005 level of WebSphere is used and CICS is not 5.4 level |
|
Low |
Web Service injection processor not being registered |
|
Low |
Dynamic outbound ssl configuration incorrectly matching outbound request |
|
Low |
In use count can be wrong after APAR PI77049 - causing ABEND=00dc3000 RSNCODE=0a150001 |
|
Low |
Allow empty main-class attribute in manifest.mf for application client module |
# 9.0.0.4
APAR | Impact | Description |
---|---|---|
High |
IBMPROXY is down by SIGSEGV |
|
Medium |
Failure in Admin Console after editing multi-valued custom property |
|
Medium |
JMS connections from Websphere Application Server (WAS) are not destroyed was to fix pack v8.5.5.12 |
|
Medium |
Web Services Potential for weak Client security bindings (CVE-2017-1501) |
|
Medium |
ArrayIndexOutOfBoundsException from OpenJPA for @EmbeddedId |
|
Low |
Dynamic outbound ssl configuration incorrectly matching outbound request |
|
Low |
com.ibm.websphere.security.spnego.useRACMAPMappingToSAF property value not displayed correctly in admin console |
|
Low |
Migration fails for federated nodes when cell name is renamed |
|
Low |
In use count can be wrong after APAR PI77049 - causing ABEND=00dc3000 RSNCODE=0a150001 |
|
Low |
Issues with ResponseWrapper |
|
Low |
ClassSourceException by WDT |
|
Low |
Web Service call is failing after applying latest FixPacks + IFPI70810 |
|
Low |
Allow empty main-class attribute in manifest.mf for application client module |
# 9.0.0.3
APAR | Impact | Description |
---|---|---|
Medium |
SRVE0014E from dynacache component |
|
Medium |
Loop while closing an SSL connection |
|
Medium |
ArrayIndexOutOfBoundsException from OpenJPA for @EmbeddedId |
|
Medium |
Web Services Potential for weak Client security bindings (CVE-2017-1501) |
|
Low |
com.ibm.websphere.security.spnego.useRACMAPMappingToSAF property value not displayed correctly in admin console |
|
Low |
Issues with ResponseWrapper |
|
Low |
Web Service call is failing after applying latest FixPacks + IFPI70810 |
# 9.0.0.2
APAR | Impact | Description |
---|---|---|
Medium |
SRVE0014E from dynacache component |
|
Medium |
Loop while closing an SSL connection |
|
Medium |
ArrayIndexOutOfBoundsException from OpenJPA for @EmbeddedId |
|
Medium |
Web Services Potential for weak Client security bindings (CVE-2017-1501) |
|
Medium |
CWRLS0009E occurs due to failure exception calling setTransactionIsolation on a JDBC connection |
|
Low |
com.ibm.websphere.security.spnego.useRACMAPMappingToSAF property value not displayed correctly in admin console |
|
Low |
WSGRID jobs not getting ended status returned by SIBus z/OS |
|
Low |
Issues with ResponseWrapper |
# 9.0.0.1
APAR | Impact | Description |
---|---|---|
Medium |
gskver ikeyman gskcapicmd and gskcmd scripts do not work in IBM HTTP Server 9.0.0.1 |
|
Medium |
Deployment fails when @EJB contains beanName and EJB descriptor contains |
|
Medium |
Loop while closing an SSL connection |
|
Medium |
ArrayIndexOutOfBoundsException from OpenJPA for @EmbeddedId |
|
Medium |
Web Services Potential for weak Client security bindings (CVE-2017-1501) |
|
Medium |
CWRLS0009E occurs due to failure exception calling setTransactionIsolation on a JDBC connection |
|
Low |
com.ibm.websphere.security.spnego.useRACMAPMappingToSAF property value not displayed correctly in admin console |
Was this topic helpful?
Document Information
Modified date:
14 November 2023
UID
ibm11127901