Release Notes
Abstract
Changes included in some fix packs might negatively affect existing product function. Evaluate these APAR(s) for the potential impact in your environment.
Content
# 8.5.5.24
| APAR | Impact | Description |
|---|---|---|
|
High |
java.lang.NullPointerException occurs related to to com.ibm.ISecurityUtilityImpl.PasswordUtil |
|
|
Low |
NCSA log incorrectly displays the year timestamp when configured 'accessLogFormat' |
# 8.5.5.23
| APAR | Impact | Description |
|---|---|---|
|
High |
java.lang.NullPointerException occurs related to to com.ibm.ISecurityUtilityImpl.PasswordUtil |
|
|
Medium |
LDAP SSL Connections may use default SSL config |
|
|
Medium |
Problem with AdminTask.enablePasswordEncryption |
# 8.5.5.22
| APAR | Impact | Description |
|---|---|---|
|
High |
RENEWING WAS GENERATED PERSONAL CERTIFICATE NOT REFLECTED BY SOAP ENDPOINT |
|
|
Medium |
java.lang.IllegalArgumentException: Class 'Group' does not have a feature named 'password.' |
|
|
Medium |
Errors federating or syncing 8.5.5.21 and earlier nodes to 8.5.5.22 |
|
|
Partial Fix |
'Error creating client_auth_token' at server shutdown. |
# 8.5.5.21
| APAR | Impact | Description |
|---|---|---|
|
High |
RENEWING WAS GENERATED PERSONAL CERTIFICATE NOT REFLECTED BY SOAP ENDPOINT |
|
|
Medium |
Quality of protection panel for System SSL not accessible. |
|
|
Medium |
APPCLIENT fails to install and update in 8.5.5.21 |
|
|
Medium |
JVMCFRE106 DUPLICATE METHOD error will be logged when client attempts to use an EJB |
|
|
Low |
ArrayIndexOutOfBoundsException after 8.5.5.20/9.0.5.8 |
|
|
Low |
NPE in com.ibm.ejs.j2c.ConnectionFactoryRefBuilderImpl |
|
|
Low |
Some expected TLS ciphers not negotiable |
|
|
Low |
The asserted user 'unauthenticated' is no longer authenticated. |
|
|
Low |
NPE in SSL Socket Factory |
|
|
Partial Fix |
'Error creating client_auth_token' at server shutdown. |
# 8.5.5.20
| APAR | Impact | Description |
|---|---|---|
|
Medium |
NPE in Portlet Bridge |
|
|
Medium |
early webServer crashes with Intelligent Management enabled |
|
|
Medium |
java.lang.ClassNotFoundException: org.apache.myfaces.application.viewstate.SecureSerializedViewCollection |
|
|
Medium |
NPE submitting batch job with no servers available |
|
|
Medium |
OpenID Connect CWTAI2030I/CWTAI2007E |
|
|
Medium |
STOPSERVER, SERVERSTATUS FAILS WHEN AES ENCRYPTION IS ENABLED FOR THE COMMAND |
|
|
Low |
ArrayIndexOutOfBoundsException after 8.5.5.20/9.0.5.8 |
|
|
Low |
Some expected TLS ciphers not negotiable |
|
|
Low |
The asserted user 'unauthenticated' is no longer authenticated. |
|
|
Low |
ClassCastException in WebCollaborator |
# 8.5.5.19
| APAR | Impact | Description |
|---|---|---|
|
Medium |
Datasource custom property password problems |
|
|
Medium |
OpenID Connect CWTAI2030I/CWTAI2007E |
|
|
Medium |
startup failure after disabling custom password encryption |
|
|
Low |
Custom scheduler in the EJB timer service panel not displayed correctly |
|
|
Low |
The asserted user 'unauthenticated' is no longer authenticated. |
|
|
Low |
Password prompt hides terminal output on IBM I platform |
|
|
Low |
Profile or certificate creation fails with |
# 8.5.5.18
| APAR | Impact | Description |
|---|---|---|
|
High |
Potential vulnerability in admin console |
|
|
Medium |
startup failure after disabling custom password encryption |
|
|
Medium |
CNTR5104E RECEIVED WHEN DEPLOYING EJB APPLICATION |
|
|
Medium |
OpenID Connect CWTAI2030I/CWTAI2007E |
|
|
Medium |
NPE with custom password encryption |
|
|
Medium |
failed to login to admin console the first time with RAD |
|
|
Low |
The asserted user 'unauthenticated' is no longer authenticated. |
|
|
Low |
HTML img tag element displayed inside the TPV |
|
|
Low |
Some admin console with collection tables load slowly |
|
|
Low |
Custom scheduler in the EJB timer service panel not displayed correctly |
|
|
Low |
no post-sync deployment processing on dmgr |
|
|
Low |
Password prompt hides terminal output on IBM I platform |
|
|
Low |
Profile or certificate creation fails with |
# 8.5.5.17
| APAR | Impact | Description |
|---|---|---|
|
High |
Potential vulnerability in admin console |
|
|
Medium |
CWWIM5106E with mixed cell including 8.5.5.17 or later |
|
|
Medium |
CNTR5104E RECEIVED WHEN DEPLOYING EJB APPLICATION |
|
|
Medium |
native_stdout.log on Windows fills up with repeating debug timestamps |
|
|
Low |
no post-sync deployment processing on dmgr |
|
|
Low |
Custom scheduler in the EJB timer service panel not displayed correctly |
|
|
Low |
Some admin console with collection tables load slowly |
|
|
Low |
HTML img tag element displayed inside the TPV |
# 8.5.5.16
| APAR | Impact | Description |
|---|---|---|
|
High |
Potential vulnerability in admin console |
|
|
High |
CNTR5104E RECEIVED WHEN DEPLOYING EJB APPLICATION |
|
|
Medium |
SECJ0129E authorization failure under load on z/OS using SAF Authorization. |
|
|
Medium |
JSF errors related to java.io.FileNotFoundException: 'Too many open files'. |
|
|
Medium |
CNTR5104E RECEIVED WHEN DEPLOYING EJB APPLICATION |
|
|
Medium |
Intermittent ConcurrentModificationException from MetadataRepository |
|
|
Medium |
Failure in Admin Console after editing multi-valued custom property |
|
|
Low |
Customized task list in admin console not displayed as links |
|
|
Low |
Some admin console with collection tables load slowly |
|
|
Low |
HTML img tag element displayed inside the TPV |
|
|
Low |
WebServer logs with '_log' in the name can't be viewed in the console |
# 8.5.5.15
| APAR | Impact | Description |
|---|---|---|
|
High |
Potential vulnerability in admin console |
|
|
Medium |
Correction for PH02461 |
|
|
Medium |
Potential denial of service in WebSphere Application Server Admin Console (CVE-2019-4080) |
|
|
Medium |
SECJ0129E authorization failure under load on z/OS using SAF Authorization. |
|
|
Medium |
JSF errors related to java.io.FileNotFoundException: 'Too many open files'. |
|
|
Medium |
LDAP search filter issue with parenthesis |
|
|
Medium |
Failure in Admin Console after editing multi-valued custom property |
|
|
Low |
HTML img tag element displayed inside the TPV |
|
|
Low |
WebServer logs with '_log' in the name can't be viewed in the console |
|
|
Low |
clearClassCache not run on upgrade |
|
|
Low |
class version error starting NDDMZ on z/OS |
# 8.5.5.14
| APAR | Impact | Description |
|---|---|---|
|
Medium |
SECJ0129E authorization failure under load on z/OS using SAF Authorization. |
|
|
Medium |
JSF errors related to java.io.FileNotFoundException: 'Too many open files'. |
|
|
Medium |
Daemon abend0c4s in bboclssa and possible termination |
|
|
Medium |
Failure in Admin Console after editing multi-valued custom property |
|
|
Low |
Inputting an invalid webserver conf file path on the console produces a blank page |
|
|
Low |
HTML img tag element displayed inside the TPV |
|
|
Low |
WebServer logs with '_log' in the name can't be viewed in the console |
|
|
Low |
Remove or update PI97281 |
|
|
Low |
clearClassCache not run on upgrade |
# 8.5.5.13
| APAR | Impact | Description |
|---|---|---|
|
Medium |
Update of composite component within an ui:repeat does not work |
|
|
Medium |
Daemon abend0c4s in bboclssa and possible termination |
|
|
Low |
Not able to renew a self-signed wildcard certificate |
|
|
Low |
In use count can be wrong after APAR PI77049 - causing ABEND=00dc3000 RSNCODE=0a150001 |
|
|
Low |
HTML img tag element displayed inside the TPV |
|
|
Low |
clearClassCache not run on upgrade |
|
|
Low |
Allow empty main-class attribute in manifest.mf for application client module |
# 8.5.5.12
| APAR | Impact | Description |
|---|---|---|
|
High |
IBMPROXY is down by SIGSEGV |
|
|
High |
ClassCastExceptions during naming lookup for beanManger |
|
|
Medium |
Reimplements the fixes for PI75986 and PI78268 |
|
|
Medium |
ArrayIndexOutOfBoundsException from OpenJPA for @EmbeddedId |
|
|
Medium |
JMS connections from Websphere Application Server (WAS) are not destroyed was to fix pack v8.5.5.12 |
|
|
Low |
JPA application behavior changes after migration to WAS 9.0.0.4 |
|
|
Low |
com.ibm.websphere.security.spnego.useRACMAPMappingToSAF property value not displayed correctly in admin console |
|
|
Low |
Dynamic outbound ssl configuration incorrectly matching outbound request |
|
|
Low |
In use count can be wrong after APAR PI77049 - causing ABEND=00dc3000 RSNCODE=0a150001 |
|
|
Low |
HTML img tag element displayed inside the TPV |
|
|
Low |
Web Service call is failing after applying latest FixPacks + IFPI70810 |
|
|
Low |
Allow empty main-class attribute in manifest.mf for application client module |
# 8.5.5.11
| APAR | Impact | Description |
|---|---|---|
|
High |
Hang on org/apache/webbeans/context/sessioncontext.addchildrequest |
|
|
Medium |
VMM panel fails with an authentication error when applying changes to the security configuration of LDAP |
|
|
Medium |
SRVE0014E from dynacache component |
|
|
Medium |
Loop while closing an SSL connection |
|
|
Medium |
ArrayIndexOutOfBoundsException from OpenJPA for @EmbeddedId |
|
|
Medium |
Web Services Potential for weak Client security bindings (CVE-2017-1501) |
|
|
Low |
JPA application behavior changes after migration to WAS 9.0.0.4 |
|
|
Low |
com.ibm.websphere.security.spnego.useRACMAPMappingToSAF property value not displayed correctly in admin console |
|
|
Low |
WSGRID jobs not getting ended status returned by SIBus z/OS |
|
|
Low |
Issues with ResponseWrapper |
# 8.5.5.10
| APAR | Impact | Description |
|---|---|---|
|
High |
java.lang.ClassCastException when group search is performed |
|
|
Medium |
VMM panel fails with an authentication error when applying changes to the security configuration of LDAP |
|
|
Medium |
Web Services Potential for weak Client security bindings (CVE-2017-1501) |
|
|
Medium |
Security crypto jar fails with Not signed by a trusted signer error |
|
|
Medium |
A JSP error Unresolved compilation problem is thrown during runtime |
|
|
Medium |
PMI counters URIRequestCount URIConcurrentRequests and URIServiceTime are disabled at runtime. |
|
|
Medium |
Loop while closing an SSL connection |
|
|
Low |
NullPointerException is seen in some cases when a client does not trust a server |
|
|
Low |
com.ibm.websphere.security.spnego.useRACMAPMappingToSAF property value not displayed correctly in admin console |
|
|
Low |
Choosing 'none' for JNDI datasource name of Job Scheduler System app no longer causes automatic configuration of default datasource |
|
|
Low |
JPA application behavior changes after migration to WAS 9.0.0.4 |
|
|
Low |
Error occurs when viewing Intelligent Management charting report |
|
|
Low |
WSGRID jobs not getting ended status returned by SIBus z/OS |
# 8.5.5.9
| APAR | Impact | Description |
|---|---|---|
|
High |
JAX-WS application fails with a java.lang.ClassCastException in the log |
|
|
Medium |
HMGR0149E logged when com.ibm.wsspi.security.token.singleSignonTokenFactory property changed to com.ibm.ws.security.ltpa.LTPATokenFactory |
|
|
Medium |
Collector script fails on z/OS with collector.sh 37: FSUM7351 not found |
|
|
Medium |
A JSP error Unresolved compilation problem is thrown during runtime |
|
|
Medium |
PMI counters URIRequestCount URIConcurrentRequests and URIServiceTime are disabled at runtime. |
|
|
Low |
Error occurs when viewing Intelligent Management charting report |
|
|
Low |
NullPointerException is seen in some cases when a client does not trust a server |
|
|
Low |
JPA application behavior changes after migration to WAS 9.0.0.4 |
|
|
Low |
Liberty: configUtility find or install throws a NoClassDefFoundError by local repository |
|
|
Low |
Choosing 'none' for JNDI datasource name of Job Scheduler System app no longer causes automatic configuration of default datasource |
|
|
Low |
WSGRID jobs not getting ended status returned by SIBus z/OS |
|
|
Low |
Default ThreadPoolStats data cannot be retrieved due to InstanceNotFoundException |
# 8.5.5.8
| APAR | Impact | Description |
|---|---|---|
|
High |
Liberty: Collective member certificate login fails with LDAP or Federated user registry |
|
|
High |
Out Of Memory error on the On Demand Router due to HttpRouteAction objects accumulating |
|
|
Medium |
SAML token fails signature validation after being propagated by WS-Security |
|
|
Medium |
HMGR0149E logged when com.ibm.wsspi.security.token.singleSignonTokenFactory property changed to com.ibm.ws.security.ltpa.LTPATokenFactory |
|
|
Medium |
PMI counters URIRequestCount URIConcurrentRequests and URIServiceTime are disabled at runtime. |
|
|
Medium |
Collector script fails on z/OS with collector.sh 37: FSUM7351 not found |
|
|
Medium |
Extraneous error messages display when trying to stop an application |
|
|
Low |
JPA application behavior changes after migration to WAS 9.0.0.4 |
|
|
Low |
WSGRID jobs not getting ended status returned by SIBus z/OS |
|
|
Low |
Default ThreadPoolStats data cannot be retrieved due to InstanceNotFoundException |
|
|
Low |
Liberty: Merged plugin-cfg.xml generated by ClusterManager mbean generate ClusterPluginConfig operation contains dup elements |
|
|
Low |
The Value of annotations is ignored when injecting beans |
|
|
Low |
Liberty: configUtility find or install throws a NoClassDefFoundError by local repository |
|
|
Low |
A redirect using an URI relative to the current request URL redirects to the wrong URL |
|
|
Low |
NullPointerException is seen in some cases when a client does not trust a server |
# 8.5.5.7
| APAR | Impact | Description |
|---|---|---|
|
High |
500 error when rolling out new edition and deleting old edition |
|
|
High |
Liberty: Collective member certificate login fails with LDAP or Federated user registry |
|
|
High |
When doing IdP-initiated SSO if a RelayState is not in the SAMLResponse the authentication fails |
|
|
High |
XA Transaction recovery issues might occur |
|
|
High |
Out Of Memory error on the On Demand Router due to HttpRouteAction objects accumulating |
|
|
Medium |
HMGR0149E logged when com.ibm.wsspi.security.token.singleSignonTokenFactory property changed to com.ibm.ws.security.ltpa.LTPATokenFactory |
|
|
Medium |
SAML token fails signature validation after being propagated by WS-Security |
|
|
Medium |
The publishWSDL command is not picking up changes made to the HTTP URL |
|
|
Medium |
Collector script fails on z/OS with collector.sh 37: FSUM7351 not found |
|
|
Medium |
Contexts and Dependency Injection (CDI) Application Scoped contexts are not acquired properly causing issues with web services applications |
|
|
Medium |
z/OS users could experience authorization failures and see error message: SECJ0129E: Authorization failed for user |
|
|
Low |
Liberty: configUtility find or install throws a NoClassDefFoundError by local repository |
|
|
Low |
Default ThreadPoolStats data cannot be retrieved due to InstanceNotFoundException |
|
|
Low |
WSGRID jobs not getting ended status returned by SIBus z/OS |
|
|
Low |
Liberty: Merged plugin-cfg.xml generated by ClusterManager mbean generate ClusterPluginConfig operation contains dup elements |
|
|
Low |
A redirect using an URI relative to the current request URL redirects to the wrong URL |
|
|
Low |
The Value of annotations is ignored when injecting beans |
|
|
Low |
JPA application behavior changes after migration to WAS 9.0.0.4 |
|
|
Low |
NullPointerException is seen in some cases when a client does not trust a server |
# 8.5.5.6
| APAR | Impact | Description |
|---|---|---|
|
High |
Out Of Memory error on the On Demand Router due to HttpRouteAction objects accumulating |
|
|
High |
Liberty: Collective member certificate login fails with LDAP or Federated user registry |
|
|
Medium |
NullPointerException might be caught in the servlet listener code when security is enabled. |
|
|
Medium |
Contexts and Dependency Injection (CDI) Application Scoped contexts are not acquired properly causing issues with web services applications |
|
|
Low |
Dynamic switching from polled to mbean (and vice versa) config monitoring doesn't work. |
|
|
Low |
NullPointerException is seen in some cases when a client does not trust a server |
|
|
Low |
JPA application behavior changes after migration to WAS 9.0.0.4 |
|
|
Low |
OSGi applications that contain blueprint xml in bundle fragments do not start after Liberty profile update |
|
|
Low |
Liberty: Merged plugin-cfg.xml generated by ClusterManager mbean generate ClusterPluginConfig operation contains dup elements |
|
|
Low |
Liberty profile: There is an increased performance overhead for users of the SSL feature in Liberty profile |
|
|
Low |
Default ThreadPoolStats data cannot be retrieved due to InstanceNotFoundException |
|
|
Low |
A redirect using an URI relative to the current request URL redirects to the wrong URL |
# 8.5.5.5
| APAR | Impact | Description |
|---|---|---|
|
High |
'java.lang.Exception: A WSDL Definition could not be generated for the implementation class could happen during application deployment |
|
|
High |
Out Of Memory error on the On Demand Router due to HttpRouteAction objects accumulating |
|
|
Medium |
Memory leak when _ underscore character used in JMS connection factory name |
|
|
Medium |
Contexts and Dependency Injection (CDI) Application Scoped contexts are not acquired properly causing issues with web services applications |
|
|
Low |
Dynamic switching from polled to mbean (and vice versa) config monitoring doesn't work. |
|
|
Low |
JPA application behavior changes after migration to WAS 9.0.0.4 |
|
|
Low |
OSGi applications that contain blueprint xml in bundle fragments do not start after Liberty profile update |
|
|
Low |
A Property File Based Configuration (PFBC) file might fail to apply |
|
|
Low |
Liberty: Merged plugin-cfg.xml generated by ClusterManager mbean generate ClusterPluginConfig operation contains dup elements |
|
|
Low |
Liberty profile: There is an increased performance overhead for users of the SSL feature in Liberty profile |
|
|
Low |
Default ThreadPoolStats data cannot be retrieved due to InstanceNotFoundException |
|
|
Low |
A redirect using an URI relative to the current request URL redirects to the wrong URL |
# 8.5.5.4
| APAR | Impact | Description |
|---|---|---|
|
High |
Out Of Memory error on the On Demand Router due to HttpRouteAction objects accumulating |
|
|
High |
'java.lang.Exception: A WSDL Definition could not be generated for the implementation class could happen during application deployment |
|
|
Medium |
NumberFormatException in Extended Cache Monitor |
|
|
Medium |
When removing a server or a node with Dynamic SSL Configuration on WebSphere Application Server a NullPointerException is shown. |
|
|
Medium |
Memory leak when _ underscore character used in JMS connection factory name |
|
|
Medium |
Contexts and Dependency Injection (CDI) Application Scoped contexts are not acquired properly causing issues with web services applications |
|
|
Medium |
NullPointerException when application uses CDI @Produces method with InjectionPoint |
|
|
Low |
If a Parallel Job Manager Top Level Job is cancelled before all subjobs are submitted the Top Level Job will remain in cancel pending state. |
|
|
Low |
Liberty: Merged plugin-cfg.xml generated by ClusterManager mbean generate ClusterPluginConfig operation contains dup elements |
|
|
Low |
Liberty profile: applications do not pick up published changes to annotation-based metadata. |
|
|
Low |
OSGi applications that contain blueprint xml in bundle fragments do not start after Liberty profile update |
|
|
Low |
Session remains open in SipContainer if it has a newly created outgoing message which was not sent. |
|
|
Low |
Default ThreadPoolStats data cannot be retrieved due to InstanceNotFoundException |
|
|
Low |
Liberty profile: ApacheValidationProvider class not found by third party packages that utilize Bean Validation |
|
|
Low |
DMZ Proxy installation not writable by WASADMIN |
|
|
Low |
A redirect using an URI relative to the current request URL redirects to the wrong URL |
# 8.5.5.3
| APAR | Impact | Description |
|---|---|---|
|
High |
Out Of Memory error on the On Demand Router due to HttpRouteAction objects accumulating |
|
|
High |
System garbage collection(gc) is getting called very frequently and causing High Cpu Usage. |
|
|
High |
'java.lang.Exception: A WSDL Definition could not be generated for the implementation class could happen during application deployment |
|
|
High |
Liberty profile: ClassNotFoundExceptions occur where nested libraries are in use |
|
|
High |
A potential performance issue with ODR/Proxy on Microsoft Windows operating systems |
|
|
High |
Liberty profile: FileNotFoundExceptions when file paths include spaces. |
|
|
Medium |
NumberFormatException in Extended Cache Monitor |
|
|
Medium |
When removing a server or a node with Dynamic SSL Configuration on WebSphere Application Server a NullPointerException is shown. |
|
|
Medium |
NullPointerException when application uses CDI @Produces method with InjectionPoint |
|
|
Medium |
Memory leak when _ underscore character used in JMS connection factory name |
|
|
Low |
The application login page is repeatedly displayed after supplying userid and password |
|
|
Low |
Default ThreadPoolStats data cannot be retrieved due to InstanceNotFoundException |
|
|
Low |
Liberty profile Resource references must match based on type rather than name only |
Was this topic helpful?
Document Information
Modified date:
14 November 2023
UID
ibm11172212