Fixes are available
7.0.0.15: WebSphere Application Server V7.0 Fix Pack 15 for AIX
7.0.0.15: Java SDK 1.6 SR9 Cumulative Fix for WebSphere Application Server
7.0.0.15: WebSphere Application Server V7.0 Fix Pack 15 for HP-UX
7.0.0.15: WebSphere Application Server V7.0 Fix Pack 15 for IBM i
7.0.0.15: WebSphere Application Server V7.0 Fix Pack 15 for Linux
7.0.0.15: WebSphere Application Server V7.0 Fix Pack 15 for Solaris
7.0.0.15: WebSphere Application Server V7.0 Fix Pack 15 for Windows
7.0.0.17: WebSphere Application Server V7.0 Fix Pack 17
7.0.0.17: Java SDK 1.6 SR9 FP1 Cumulative Fix for WebSphere Application Server
7.0.0.19: WebSphere Application Server V7.0 Fix Pack 19
7.0.0.21: WebSphere Application Server V7.0 Fix Pack 21
7.0.0.23: WebSphere Application Server V7.0 Fix Pack 23
7.0.0.25: WebSphere Application Server V7.0 Fix Pack 25
7.0.0.27: WebSphere Application Server V7.0 Fix Pack 27
7.0.0.29: WebSphere Application Server V7.0 Fix Pack 29
7.0.0.31: WebSphere Application Server V7.0 Fix Pack 31
7.0.0.27: Java SDK 1.6 SR13 FP2 Cumulative Fix for WebSphere Application Server
7.0.0.33: WebSphere Application Server V7.0 Fix Pack 33
7.0.0.35: WebSphere Application Server V7.0 Fix Pack 35
7.0.0.37: WebSphere Application Server V7.0 Fix Pack 37
7.0.0.39: WebSphere Application Server V7.0 Fix Pack 39
7.0.0.41: WebSphere Application Server V7.0 Fix Pack 41
7.0.0.43: WebSphere Application Server V7.0 Fix Pack 43
7.0.0.45: WebSphere Application Server V7.0 Fix Pack 45
7.0.0.19: Java SDK 1.6 SR9 FP2 Cumulative Fix for WebSphere Application Server
7.0.0.21: Java SDK 1.6 SR9 FP2 Cumulative Fix for WebSphere
7.0.0.23: Java SDK 1.6 SR10 FP1 Cumulative Fix for WebSphere
7.0.0.25: Java SDK 1.6 SR11 Cumulative Fix for WebSphere Application Server
7.0.0.27: Java SDK 1.6 SR12 Cumulative Fix for WebSphere Application Server
7.0.0.29: Java SDK 1.6 SR13 FP2 Cumulative Fix for WebSphere Application Server
7.0.0.45: Java SDK 1.6 SR16 FP60 Cumulative Fix for WebSphere Application Server
7.0.0.31: Java SDK 1.6 SR15 Cumulative Fix for WebSphere Application Server
7.0.0.35: Java SDK 1.6 SR16 FP1 Cumulative Fix for WebSphere Application Server
7.0.0.37: Java SDK 1.6 SR16 FP3 Cumulative Fix for WebSphere Application Server
7.0.0.39: Java SDK 1.6 SR16 FP7 Cumulative Fix for WebSphere Application Server
7.0.0.41: Java SDK 1.6 SR16 FP20 Cumulative Fix for WebSphere Application Server
7.0.0.43: Java SDK 1.6 SR16 FP41 Cumulative Fix for WebSphere Application Server
APAR status
Closed as program error.
Error description
Small responses (<32k) are not sent to client until request completes. This has potential to increase servlet execution times on fixpack 7.0.0.11.
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: All IBM WebSphere Application Server * * Version 7 users. * **************************************************************** * PROBLEM DESCRIPTION: The response is not sent to the client * * until any additional work is completed * * after the return from a forward. * **************************************************************** * RECOMMENDATION: * **************************************************************** As a result of changes made by PM08760, a response to a request is not completed until after the resource which was the target of the request completes. This can appear as a delay in the response if the target resource forwards the request to another resource and then completes further processing on return from the forward. Prior to PM08760 the response was completed on the return from the forward, but after PM08760 the response is not completed until after the further processing of the target resource. PM08760 provided a custom property to revert to the original behavior but this opens the security issue which PM08760 fixed.
Problem conclusion
This APAR removes the WebContainer custom property introduced by PM08760. and introduces the default following behavior: For a request which results in a forward request, on return from the forward request the response will be completed and any post data associated with the request will no longer be available for read. For a request which results in a redirect request, the redirect will be completed on return from the target resource and any post data associated with the request will be available for read after the sendRedirect method returns. This is PM08760 default behavior. The APAR further introduces 3 new WebContainer custom properties which are available to modify this default behavior. However, it is anticipated that the default behavior will be appropriate for most users. com.ibm.ws.webcontainer.SendResponseToClientWhenResponseIsComple te (true(default)/false) - If this property is set to false, a response will not be completed on return from a forward request but will be delayed until the target resource completes. Also post data will be available for read after the forward completes. This is PM08760 default behavior. com.ibm.ws.webcontainer.SendResponseToClientAsPartOfSendRedirect (true/false(default)) - If this property is set to true, a response will will be completed as part of a sendRedirect request and any post data associated with the request will not be available for read on return from sendRedirect. com.ibm.ws.webcontainer.KeepUnreadPostDataAfterResponseSentToCli ent (true/false(default)) - If this property is set to true post data will be available to read after the client response is completed either after a forward request completes (default behavior) or on return from sendRedirect (com.ibm.ws.webcontainer.SendResponseToClientAsPartOfSendRedirec t=true). However, note that this requires unread post data to be held in memory until the target resource completes and will increase memory usage. Note that the security issue fixed by PM08760 is also fixed for all combinations of the new custom properties. The fix for this APAR is currently targeted finclusion in fix pack 7.0.0.15. Please refer to the Recommended Updates page for delivery information: http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
Temporary fix
Comments
APAR Information
APAR number
PM18453
Reported component name
WEBS APP SERV N
Reported component ID
5724H8800
Reported release
700
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2010-07-14
Closed date
2010-09-27
Last modified date
2010-09-27
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
WEBS APP SERV N
Fixed component ID
5724H8800
Applicable component levels
R700 PSY
UP
Document Information
Modified date:
24 October 2021