IBM Support

Fix list for IBM WebSphere Application Server Liberty - Continous Delivery

Product readme


Abstract

Fixes for WebSphere Application Server Liberty are delivered in fix packs periodically.  This is a complete listing of all the fixes for Liberty with the latest fixes at the top.

New fix pack numbering is introduced. Fix pack 16.0.0.2 for WebSphere Application Server Liberty is the first of a series of common Liberty levels that apply to both Version 8.5 and Version 9.0 of WebSphere Application Server on all supported platforms.

Content


Release Date
Total number of APARs
Total number of Security APARs
13 June 2017
106
1
14 March 2017
89
0
13 December 2016
103
1
16 September 2016
107
7
24 June 2016
121
5
18 March 2016
141
2
11 December 2015
78
2
11 September 2015
26 June 2015
13 March 2015
8 December 2014
18 August 2014
28 April 2014
11 November 2013
14 June 2013




Fix Pack 17.0.0.2
Fix release date: 13 June 2017
Last modified: 13 June 2017
Status: Recommended

Download Fix Pack 17.0.0.2

Component
Security APAR
APAR
Description
Contexts and Dependency Injection (CDI) PI72811 Allow excluded alternatives
PI77286 Vetoed EJBs throw NullPointerException
PI77514 CDI observer for @initialized(applicationscoped.class) is not called inside jar
PI79787 Prevent WebSphere internal packages from being exposed to applications
PI80901 Version numbers in symbolic names are too fine grained and can cause failover to fail between different versions of Liberty.
PI82020 WeldTerminalListener is not registered
Database Access, Connection Management, Merant/DataDirect drivers PI80335 DSRA8020E Error is thrown when using IBM i Toolbox JDBC driver with WebSphere Liberty
EJB Container PI77856 EJB 3.x Stub class throws RemoteException for communication failure
PI79261 Deadlock with persistent EJB timers for Singleton beans
General PI75280 Attributes missing from the element httpOptions and throws warning message
PI75512 Cleanup up websocket connection when outbound connection attempt fails at the app server
PI75590 Corrections are needed to the documentation in the Knowledge Center
PI77605 JAXRS Client APIs do not use configured SSL settings
PI77615 JAXRS application start fails with ClassNotFoundException when JSPs are specified in web.xml
PI77976 ConstraintViolationException when using @Valid annotation
PI78177 When a websocket connection is closed while reading data an object leak might occur
PI78738 Loop while closing an SSL connection
PI79260 ProductInsights reports incorrect product version and host name
PI79275 JAX-RS 2.0 Client calls fail when ssl-1.0 feature is enabled without any SSL configuration.
PI79391 ContainerRequestContext.hasEntity() returns true for a GET request.
PI79987 Endpoint MBean information doesn't update when server.xml <httpEndpoint> is modified
PI80082 JAX-RS 2.0 OPTIONS methods are not invoked when used in sub-resource locator classes
PI80256 AccessControlException thrown when finding resources if Java 2 security is enabled
PI80285 For JAX-RS 2.0, a request may fail with a 404 because a resource class was incorrectly indicated as not found
PI80514 A jndiEntry config element with a value of "0" is parsed as a java.lang.String but should be a java.lang.Integer
PI80631 Access Log file and ELK time stamps are not the same
PI80632 Messages with digits in prefix of message ID have a blank messageId field in logstashCollector
PI80719 Websocket race condition on writing data while closing can hang a thread
PI81082 java.lang.ClassFormatError: JVMCFRE074 no Code attribute specified; is thrown
PI81086 NullPointerException thrown when using a JAX-RS provider class without a public constructor
PI81396 Unable to register a liberty server with product insights though an authentication required proxy
Intelligent Management Component PI80237 Null return codes for health actions cause NullPointerException
Java 2 Connectivity (J2C) PI78463 After configuring a connection factory for CICS RAR, the server issues J2CA8501E
PI80357 JMS connection factories defined through annotations can fail to allocate connections
PI81549 When using SQLJ context caching, auto commit and/or transaction isolation level become inconsistent
PI81717 The WaitTime provided by the ConnectionPoolStats MBean is in nanoseconds when it should be (and is documented) in milliseconds
PI81840 Bean Validation 1.1 @DecimalMin and @DecimalMax constraints inclusive property not working
Java Persistence API (JPA) PI76834 Unable to use DB2 XML data type with EclipseLink JPA; Null pointer produced
PI76902 NoSuchMethodException when a program is using CONCAT function
PI78643 Eclipselink JPA/Auditing capablity in EE Environment fails with JNDI name parameter type
PI79397 org.omg.CORBA.BAD_OPERATION when running a select SQL statement
PI81076 ServerSession numberOfNonPooledConnectionsUsed can become invalid when Exception is thrown connecting
JavaServer MyFaces (JSF) Apache MyFaces implementation PI80535 ClassNotFoundException due to classes not being exported to the thread context
JavaServer Pages (JSP) PI79800 The JSP Engine is not processing EL expressions correctly when they are in large blocks of character data
PI80319 Failure to parse tag library when the taglib is defined in the application
Liberty Application Services PI66702 Multi-address corbaname URLs do not fail over to the second address when the first address server is down
PI81297 Application fails to initialize at startup with error CWWKZ0021E
Liberty Debug and Tracing PI80225 JUL Traces do not show up in logstash collector / bluemix log collector when binary logging is enabled
PI80844 Failure if running binaryLog view serverName from wlp/usr/servers directory
Liberty Kernel PI78072 A server start may receive a java.util.MissingResourceException if started with a disabled command port
PI78444 The server schema incorrectly includes some internal configuration attributes
PI79123 ConfigUtility command line tool loosing equals sign on parameters ending with equals sign
PI79878 Server create command (using Java 8) overwrites server.env file
PI80744 SPI class, PathUtils is not normalizing leading double slashes
Liberty Log Analytics and Monitoring PI80363 Allow configurable maxFieldLength in the logstashCollector
Liberty z/OS PI77988 Update needed in module BBGZAFSM
PI78510 .pid directory created with wrong permission settings
PI78787 WOLA ACEE copied from CICS invalid for TSS
PI78970 When the z/OS connect EE server is stopped and restarted, CICS issues an abend at the time of the WOLA rebind
PI80072 Message CWWKB0392W is issued when the OTMA client name is specified in the zosLocalAdapters connection factory properties
PI80252 The size of the Java heap grows over time when using the MSGLOG DD
PI80650 Memory leak in SP132 KEY8 causes OUTOFMEMORY in Liberty
PI80988 WebSphere OLA(WOLA) service request issues return code=8, reason code=96 when called from an IMS CCTL region
PI82088 Prevent error loop when TDQ is unavailable for write
Performance Monitoring Tools PI79203 The monitor-1.0 feature may not be able to monitor user runtime components
PI80861 The Japanese translated message for TRAS0115W is incorrect
Security PI72472 WSCredTokenCallbackImpl returns null even when token exists
PI75111 Admin center doesn't work with AccessControlException after enabling Java2 security
PI77129 MYFACES-3415 - [UI:REPEAT] Field value disappears if validation error exists on current site
PI77770 Potential cross-site request forgery with WebSphere Application Server enabled with OAuth (CVE-2017-1194)
PI78245 An authData element without an id causes a NullPointerException in the logs
PI78445 CWWKS9580E message might be logged after modifying the CSIv2 configuration
PI78730 Intermittent CWWKS9520E message issued when CSIv2 is enabled
PI79444 AccessControlException when using the servlet log method
Sessions and Session Management PI73188 Session activeCount shows a negative value
PI81007 Incorrect messages were thrown at System output console when using JMX connector
Systems Management Functions PI66988 Running collective command in z/OS results in FSUM7332 syntax error
PI78497 When trace is enabled extra information is being included in the controller's trace file
PI80320 apiDiscovery urls may not update properly on Liberty Admin Center
Virtual Member Manager (VMM) PI78192 UserRegistry methods that throw RuntimeExceptions can cause federated repository failures
PI79888 An sslRef on an LDAPRegistry without matching ssl config causes security init failure
PI80547 Federated Repository's participatingBaseEntry element does not allow name attribute to be empty string
PI81519 In WebSphere Liberty, the context pool timeout value is not honored on the LDAP Registry
PI81555 The ldapRegistry feature does not properly process LDAP entities with RDN values that contain characters that need escaping
PM76997 VMM certificate authentication fails when DN contains non-default X509Certificate attributes
Web Container PI75166 TAI can't obtain the SSL endpoint information using direct connection
PI76699 Provide an option to override the default values for the ESI properties in the plugin-cfg.xml
PI76891 Exception from com.ibm.ws.webcontainer.osgi.mbeans.PluginGenerator during server stop
PI77629 NullPointerException if login is required to access a servlet which uses a ReadListener.
PI78193 Returned default html error page has extra closing tags
PI78633 Access control exception due to read permission of a property from Cookie class
PI79334 Unexpected error when an application is initializing during server stop
PI80313 Enable Post Data to be read multiple times.
PI80668 ServletException when creating a servlet, filter or listener from a ServletContextListener with Java2Security enabled
PI81688 Plugin config file generation fails after a configuration update is made to a Liberty server when it is running
Web Services (JAX-WS, JAX-RS) PI77438 JAXB context creation is very slow in Liberty during Web service load test
Web Services Security PI76629 Add authentication option to JWK endpoint invocation
PI78760 OIDC IDToken updates to the "sub" field do not take effect
PI80166 OIDC provider does not recognize custom realmname from token
PI80689 Database persistence for tokens might not function correctly when the backing database does not support CLOB data types
PI80741 OpenID Connect (OIDC) cookie not fully removed
PI81403 An error may occur if the string representation of a subject includes an ID token that contains a claim with a non-string list
WebSphere Compute Grid PI78436 Using batch injection in joblistener results in NullPointerException
PI79686 Slow response when using batchpersistence in Liberty
PI80634 When trying to stop an already completed job the error message doesn't return with the correct jobInstanceId
PI80635 CDI implementation does not support batch artifact loading via batch.xml

Fix Pack 17.0.0.1
Fix release date: 14 March 2017
Last modified: 14 March 2017
Status: Superseded

Download Fix Pack 17.0.0.1

Component
Security APAR
APAR
Description
Contexts and Dependency Injection (CDI) PI35470 Message bean instances injected with the CDI @New annotations are not @PostConstruct'ed
PI55406 IllegalAccessException is emitted from InvocationContextImpl
PI62583 IllegalArgumentException in CreationalContextImpl only when trace is enabled
PI73139 CDI would not inject classes from a war file into an ear lib in single classloader mode
PI75915 CDI failover does not work if bundles have different OSGI qualifiers
Database Access, Connection Management, Merant/DataDirect drivers PI73351 DSRA0080E refers to original exception message {0} instead of actual message
PI76168 After global transaction ends, the reported auto commit value can be inconsistent with the Oracle JDBC driver
General PI68233 SSLSessionTimeout is not recognized as a valid attribute for sslOptions element
PI71616 configUtility find or install throws a NoClassDefFoundError when using local repository
PI73277 EclipseLink 2.6.3 doesn't support JPA-convertor for primitive data types
PI74721 Errant Timeout Can Occur With Async Sends In WebSockets
PI75015 Memory leak in JAX-RS client.
PI75022 Failure to parse a java.util.Date object when creating a new javax.ws.rs.ServiceUnavailableException.
PI76688 Private lifecycle methods in JAX-RS resources are not invoked
Java 2 Connectivity (J2C) PI60146 Connection sharing can not be controlled in Liberty when using direct lookup
PI71092 java.lang.UnsupportedOperationException when accessing a tested data source
PI73350 Connection manager settings not honored
PI74533 Setting an agedTimeout value of 0 on a connection manager results in J2CA8011E
PI75426 Connection manager configuration intermittently ignored for application defined data source
Java Persistence API (JPA) PI74104 EclipseLink might add unused table in generated query
PI74284 The JPA Container calls EntityManager.clear() instead of EntityManager.close() on cleanup
JavaServer Pages (JSP) PI72709 Asynchronous dispatch to a JSP file under the WEB-INF directory fails.
PI73022 JSP comments containing "%>" might throw a StringIndexOutOfBoundsException.
Liberty Application Services PI74321 After upgrade to 16.0.0.4. NamingException and ClassCastException occur on JNDI lookup on IBM i
PI75284 Intermittent NullPointerException from ApplicationStateMachineImpl when trace enabled or logging info in response to a failure
PI75389 OSGi Applications can take significantly longer to startup after upgrading Liberty
PI76368 A class that is both Remote and Serializable is mis-categorized during marshalling
Liberty Debug and Tracing PI62350 Some server startup and early messages are not collected by logstachCollector-1.0 feature.
PI74051 Transaction trace lacks PropertyPermission to read system property "com.ibm.tx.tracer"
PI74318 Incorrect message IDs appearing on dashboard when using the Bluemix log collector
PI76200 Stack trace is not included in the message field of liberty_message type
PI76620 Filter tags in logstashCollector & bluemixLogCollector to avoid tags with special characters displaying oddly on dashboard
PI76621 New message IDs need to be assigned to a few existing TRAS messages.
Liberty Kernel PI72686 Removing and adding a feature can result in a warning message about duplicate metatype definitions
PI73807 Some Liberty message IDs conflict with traditional WebSphere Application Server
PI74527 Error CWWKZ0404E can occur when starting an application on Liberty
PI74586 Liberty server will not start if jvm.options file contains spaces, after upgrade to 16.0.0.4
PI74792 java.lang.NullPointerException when starting an .ear application with autoExpand="true" in server.xml
PI76013 Resolution error for optional server config include should not create an exception
PI76432 Exception could be thrown and logged during a server shutdown if listeners timeout during quiesce
PI76607 Features that can't be loaded because of java version dependencies may still be reported as being loaded
PI76755 Liberty metatype registry problem - metatype extension duration changed from LONG to STRING in 16.0.0.4
Liberty z/OS PI50828 WLM support is ignored when running z/OS Connect in async mode
PI66375 SPI for MVS MODIFY command support is documented to be externally available, but in fact is not available
PI72065 Loop in Liberty z/OS server when AsyncIO is enabled
PI72566 ABEND0C4 at BBGZSCFM+377E occurs during client bind
PI72776 When WLP_ZOS_PROCEDURE is set the foreground JVM uses the full set of JVM options
PI73559 WOLA service BBOA1URG fails with RC=12 RSN=240.
PI73752 Suppress FFDC for com.ibm.io.async.AsyncSocketChannel 453
PI74564 WebSocket-1.1 feature does not work in Liberty imbedded in CICS TS 5.3
PI74875 Liberty Server hang in termination after a hard failure on z/OS
PI74878 WOLA feature not started for 16.0.0.4 server using a version 4 Angel
PI76238 Message CWWKB0392W contains no message text in messages.log.
Performance Monitoring Tools PI75368 Slow memory leak might lead to OutOfMemory in Liberty
PI76212 Monitor capability breaks when different thread pool name is speicified other than "Dafault Executor".
Security PI72135 An AccessControlException is issued when restoring the security context using the ContextService APIs
PI72653 Web filters need to receive the AuthModule wrapped request or response when using JASPIC
PI73266 AccessControlException issued even when permission was granted in the permissions.xml file
PI76359 Process default SSL Setting not getting reset on a file update
PI76408 The method signature for java.security.SecureRandom.nextBytes() is no longer synchronized.
Session Initiation Protocol (SIP) Container PI76614 SIP Router is initialized more than once.
PI76615 Order of OSGI bundle could cause a class not found exception.
Systems Management Functions PI74526 A collective name sporadically changes between its given name and the default name
PI75433 Liberty collective member status becomes stale at the controller.
Web Container PI71999 XML transformer factory changed during server start
PI72223 The pluginUtility displays an untranslated message when using the merge action to merge plugin-cfg.xml files in a directory.
PI72514 Application start fails to add context root in Virtual Host map
PI72710 Response committed on return from Forward even when async is started.
PI74499 Server quiesce not cleaned properly when write during close of upgraded connection goes asynchronous.
PI75475 The WebContainer 'enableMultiReadOfPostData' config property was visible but not implemented.
PI75528 The maxRequestSize optional attribute for MultipartConfig is ignored.
PI76195 When the plugin configuration is generated it may not have one of the ports
PI76271 CORS does not handle requests with PATCH methods correctly
PI76351 ServletRequest.getRequestURI() returns inconsistent results after AsyncContext.start().
PI76364 isFinished() could incorrectly return false in some scenarios
Web Services (JAX-WS, JAX-RS) PI76616 HTTP servlet requests could be matched to incorrect cross-origin resource sharing (CORS) configuration
Web Services Security PI72558 OIDC client cookie is not removed after it is used
WebSphere Compute Grid PI73040 Batch job log REST URLs are incorrect for a failed job execution
PI73249 The ddlGen script may produce an empty file when run against a server with the Java Batch feature configured
PI74813 When using the batchManagerZos 'status' and 'listJobs' commands, the usage of --instanceId and --jobInstanceId aren't universal.
PI74924 Job with java batch COMPLETED status moves to STOPPING status after shutdown in executor.
PI76622 Provide V2 and V3 versions of existing Batch REST APIs
PI76632 Job executions REST API syntax is misleading
PI76701 Java Batch purge command fails after a job execution did not initialize correctly
PI76702 Java Batch jobs store JES job name and JES job ID with trailing spaces
WMQ messaging providers PI61885 postCallWithException throws java.lang.IllegalStateException
PI71691 BundleException happens when adding a feature to a running server causing a bundle to be reinstalled
PI72136 Server startup fails with CWRLS0009E error due to failure in the transaction manager's recovery log service
z/OS PI61450 Apache Wink does not remove quotes from the boundary value Content-type: multipart/mixed; boundary="simple boundary"

Fix Pack 16.0.0.4
Fix release date: 13 December 2016
Last modified: 13 December 2016
Status: Superseded

Download Fix Pack 16.0.0.4
Component
Security APAR
APAR
Description
Contexts and Dependency Injection (CDI) PI69193 ContextNotActiveException in SessionScoped bean preDestroy()
PI70614 Clean up all resources on an application startup failure on cdi-1.0 feature
PI71104 @Inject Principal does not work in mutli-threaded environment.
PI71667 Application fails with WELD-001408: Unsatisfied dependencies for type Validator with qualifiers @Default
PI71734 Failover does not work with CDI 1.2
Database Access, Connection Management, Merant/DataDirect drivers PI68418 Purge policy ValidateAllConnections does not properly validate connections
PI71587 Data source is not autodetecting MariaDB.
Dynacache PI68741 HTTP status code 200 is returned to a client when the servlet or JSP throws an exception
PI71752 Plugging in an external cache provider does not work with the distributedMap-1.0 feature.
EJB Container PI66621 ReferenceContextImpl caching empty list of targets for JSP classes
PI67942 javax.servlet.HttpServletRequest.getRequestURI() might return a decoded value after dispatching
PI69642 NullPointerException deleting stateful EJB
General PI42673 Extra information in logs with Datasource custom properties
PI67034 Access was denied for property org.apache.jasper.constants.jsp_servlet_base.
PI67099 Provide option to add STS response header for HTTPs request
PI68432 When user applications are using Websocket Decoders a slow memory leak can occur.
PI69737 Errors are not logged when tasks submitted to managed executors fail
PI70332 System property to enable SSL Channel timeoutValueInSSLClosingHandshake property
PI71359 FFDC is produced for a NullPointerException in com.ibm.ws.tcpchannel.internal.SocketRWChannelSelector.updateSelector
Install V8 and above PI68915 Default server.xml is incorrect
PI69133 Disk space validator returns NullPointerException.
Java 2 Connectivity (J2C) PI68163 MQJCA1011: Failed to allocate a JMS connection
PI68257 Connection manager might remain active after transaction manager has been disabled.
PI69122 J2C pretest being used despite FailingConnectionOnly option
PI69887 FFDC logged for resource adapter config property with getter that is named with "is" rather than "get"
PI69957 Destination id erroneously used for JCA 1.7 destinationLookup instead of JNDI name.
PI70224 The value of ConnectionHandleCount on the ConnectionPool MBean is not accurate when in use connections are destroyed
PI71193 Illegal State Exception when transaction timeout occurs and abort is used
Java Persistence API (JPA) PI65593 The database schema name cannot be configured with openjpa.jdbc.SchemaFactory
PI66770 JPA returns incorrect results when using a native query and @SqlResultSetMapping
PI67234 ServerPlatformException Server platform class is not valid: null occurs with JPA 2.1
PI67790 java.lang.ClassCastException using JPA
PI68028 EclipseLink throws ValidationException when using nested embeddables with the same attribute name
PI68805 Potential leak of org.apache.bval.cdi.BValExtension$Releasable objects when using JAX-RS, CDI 1.2, and Bean Validation 1.1.
PI70680 Deployment of persistence unit fails with DescriptorException
PI70841 OpenJPA's ConfigurationImpl.loadGlobals() has java.util.ConcurrentModificationException
PI75607 javax.persistence.PessimisticLockException when javax.persistence.lock.timeout set to 0
PI75608 Add EclipseLink support for Java 2 Security
JavaServer MyFaces (JSF) Apache MyFaces implementation PI67525 inputFile tag is not working properly on Liberty
PI70441 FlowBuilderFactoryBean Concurrency Issue
JavaServer Pages (JSP) PI67257 An escaped EL expression is being run if an escaped dollar sign precedes the former expression
PI69028 Null CodeSource location for classes loaded by JSPExtensionClassLoader
PI69942 JSP property useJDKCompiler does not work in Liberty
PI71436 A debugger does not stop at a breakpoint in a JavaSever Page (JSP).
Liberty Application Services PI70600 Auto extracted web app files have incorrect timestamp.
PI70848 When application autoExpand is enabled changes to an ear file are not detected by the Liberty server
PI70870 ConcurrentModificationException in AppClassLoader when using the global library
PI71116 When certain features are enabled the application property autoStart has no effect
Liberty Kernel PI68170 Users of Liberty's OSGI EventAdmin service cannot change the topics of interest for a registered EventHandler
PI70104 Starting a Web Application Bundle (WAB) can result in a deadlock sometimes when the WAB is installed and started dynamically
PI70637 RuntimeException: Invalid call to WsByteBuffer occurs during shutdown
PI71457 NullPointerException after a failure to bind an IIOP transport port
PI71607 Schema for resource adapters contains an unused attribute.
Liberty System Management PI69561 REST API Discovery missing APIs in web applications with multiple JAX-RS application classes
Liberty z/OS PI67718 z/OS Connect is unresponsive to the STOP command from the z/OS Console
PI69625 Liberty server at 16.0.0.3 may fail to start when using AsyncIO
PI69886 When using the zosLocalAdapters-1.0 feature to talk to CICS, the CICS container LinkTaskRspContID already exists.
PI70090 WebSphere Liberty "server" and native launcher handle a # in the middle of a JVM property inconsistently
PI70896 Liberty Server hang in termination after a hard failure on z/OS
PI71417 Startup time for Liberty for z/OS is unnecessarily slow.
Messaging Providers PI62816 Allow more than one address to be specified in the remoteServerAddress field
PI70961 Corrections to messages in JMS Messaging
Performance Monitoring Tools PI70900 Events get lost when the logstashCollector config gets updated
Security PI62070 Full chain created in PKCS12 but not for JKS key store
PI62375 Potential code execution vulnerablity in WebSphere Application Server (CVE-2016-5983)
PI69141 Make sure HTTPS URL connection default is set at the same time SSLContext is set.
PI69161 Constrained delegation works only when Liberty trace is enabled
PI69277 Java 2 Security permissions are not granted to a shared library when using the file element instead of a fileset
PI69629 CWWKX8136W: Cannot validate the server identity
PI69840 A NoClassDefFoundError or NoSuchMethodError may be thrown when accessing Swagger annotations.
PI69870 IllegalAccessException on EL expression that processes isLast() of object referencing varStatus in JSTL for-each tag
PI71525 NullPointerException when registering a Custom User Registry that returns a null realm name
PI71585 NullPointerException when null password is passed into WSCallBackHandlerFactory
PI71751 Provide better message when bad SSL configuration is used by CSIv2.
PI71789 .InvalidNameException: Validation of the Collective DN failed. 0th element type was not dc
Systems Management Functions PI69286 Non-ASCII names used in remote operations from a collective controller may become corrupted.
PI69741 Remove extra information from trace file
PI71792 New files added to a controller's configDropins/defaults directory are not replicated to other controllers in the collective.
Virtual Member Manager (VMM) PI71825 CWWKS3006E error message seen during server shutdown.
Web Container PI64898 AsyncListener onError not being called correctly
PI65762 DestroyJavaVM() method call hangs and JVM fails to shut down when asynch servlet work has been performed
PI67393 Polish the ReadListener
PI68061 Option to display customized text for some server errors
PI69220 A plugin-cfg.xml is generated with missing applications and future auto-generation fails.
PI69803 A java.lang.NoClassDefFoundError error can occur when using the pluginUtility merge action.
PI70063 A decrease in throughput can occur when many concurrent requests for JSP pages that make use of tag libraries.
PI70184 WebSocket not working if application flushes without obtaining any outputStream or writer
PI70873 java.lang.NullPointerException might occur during a request's cleanup.
PI71851 Missing apostrophes in French and Italian pluginUtility text
Web Services (JAX-WS, JAX-RS) PI70196 PI70196: ibm rest servlet can't be mapped to two different urls:
PI70313 Swagger API Explorer ignores protocol schemes for operations
PI71238 IllegalArgumentException when getHours() is called
PI71887 JAX-RS Client fails when running in OSGi bundles
Web Services Security PI68101 JSON bits are missing from a URL when SAML authentication redirects a request
PI68809 WSAS XML crypto libraries cause classloader conflict with Java XML crypto in certain scenarios
PI69415 Support configurable context root for OIDC client redirect url
WebSphere Compute Grid PI70886 Java Batch REST: STOP request may not return JobNotRunningException even when the job batch status returns as COMPLETED.
PI70887 An exception in the batch executor may cause a message to roll-back onto queue (and get re-delivered) instead of consumed.
PI71718 Attempting to purge multiple job instances fails when their executions are not on the same endpoint
PI71719 Batch REST request for job instance job log links fails with remote executions
WMQ messaging providers PI68664 Record-level sharing (rls) is miscalculating the amount of data to be written to partner logs
PI69183 APAR PI18414 may result in the recovery log service using incorrect sequence numbers.
PI69314 ELException, Can not find @Transactional annotation
PI69328 CWWKZ0403E error message occurs due to error Unable to acquire the global write lock in time.

Fix Pack 16.0.0.3
Fix release date: 16 September 2016
Last modified: 16 September 2016
Status: Superseded

Download Fix Pack 16.0.0.3
Component
Security APAR
APAR
Description
Contexts and Dependency Injection (CDI) PI38270 NullPointerException in InvocationContextImpl.configureTarget when destroying an already destroyed bean
PI42311 EJB interceptors not called intermittently
PI48614 NullPointerExceptions from CDI code
PI51620 NullPointerException when doing injection with com.ibm.ws.cdi.immediate.ejb.start set to true
PI58669 CDI javax.decorator.decorator annotation not working as expected
PI61397 Ensure application scoped context is initalized properly and active during bean preDestroy
PI64374 Race condition with session scoped contexts
PI64812 Application ClassLoader leaked during application restart from CDI's RuntimeFactory
PI65337 Use of CDI interceptors in stateless EJBs causes exceptions to be wrapped in WeldException
PI66866 Memory leak occurs when an application is restarted
PI67388 Move up Weld level to 2.3.4.Final from 2.2.16.Final.
Database Access, Connection Management, Merant/DataDirect drivers PI66423 OraclePreparedStatement.getReturnResultSet and OracleCallableStatement.getCursor fail after unwrapping statement
EJB Container PI60567 New system property to configure the EJB pool wait timeout
PI62639 NullPointerException in CDIEJBManagedObjectFactoryImpl.getEjbDescriptor when creating EJB instance to pre-load the bean pool
PI63571 AccessControlException: "accessDeclaredMembers" from com.ibm.wsspi.injectionengine.MethodMap.getMethods.
PI63709 Application exception thrown from EJB constructor lost when @AroundConstruct interceptors present
PI63821 Resource reference names starting with java:comp/env are ignored in ibm-ejb-jar-bnd.xml
PI65205 FFDC for TransactionRolledbackException when using UserTransaction in stateful bean ejbRemove method
PI66565 com.ibm.wsspi.resource.ResourceInfo not provided to ResourceFactory for <resource-env-ref> XML elements
PI67070 Customer can get EJBExceptions related to non-persistent EJB Timers during server shutdown
General PI60893 Deadlock caused by SIP Subscribe
PI61548 Potential Denial of Service in WebSphere Application Server if using SIP services (CVE-2016-2960)
PI63871 NullPointerException in MemoryPersistenceManager
PI64472 Automatically determine whether a submit or restart should be issued from the batchManager and batchManagerZos utilities.
PI65456 Issuing "job.ended" CWWKY0010I message instead of "job.failed" CWWKY0011W message, upon job failure.
Install V8 and above PI65506 Display proper asset list when embedded asset repo is missing during IM modify_add flow
Intelligent Management Component PI59258 Dynamic Routing fails to recognize the application until Collective Controllers are restarted
PI63212 Reload of web server with Intelligent Management causes CWWKV0008W messages on a Liberty collective controller
PI66993 Health condition is not set to the Liberty server in the Docker container.
PI67392 dynamicRouting does not have route info for Liberty Docker on initial deployment
Java 2 Connectivity (J2C) PI63520 Parked connection created by PoolManager results in setting a pre-existing client ID to a MQ connection
PI66424 J2CA7002E is logged when server is stopped while in the process of installing a resource adapter.
PI67186 The value of FreeConnectionCount on the ConnectionPool MBean is not accurate when in use connections are destroyed
Java Persistence API (JPA) PI58114 ClassCastException when an equals comparison query is run on an entity with a composite @EmbeddedId
PI64129 CDI applications that inject Validator or ValidatorFactory beans cannot be failed over in a cluster
PI67305 EclipseLink assigns the same object instance to multiple embedded fields
JavaServer Faces (JSF) SunRI implementation PI64899 When using the jsf-2.2 and beanValidation-1.1 features an OSGI warning message can be seen.
JavaServer MyFaces (JSF) Apache MyFaces implementation PI63135 Custom type conversion is sometimes bypassed in EL 3.0
PI63633 Thread-safety issue in the underlying (Apache) JSF 2.0 code causes WebContainer threads to hang
PI64195 @PreDestroy methods are not invoked on session invalidation for JavaServer Faces (JSF) javax.faces.bean.ViewScoped beans.
PI64714 JSF message severities always set to ERROR after ValidatorException
PI64718 Validators are not called when using selectManyCheckbox
JavaServer Pages (JSP) PI64004 The scratchdir JSP attribute is not documented on Liberty
PI65333 A JSP error "unresolved compilation problem" is thrown during runtime
Liberty Application Services PI62861 Server stop runs before the ServletContextListener implementation completes
PI63542 ArrayIndexOutOfBoundsException may occur when doing a JNDI-lookup to a remote EJB that is located in another cell
PI64494 Timing window in generation of Type Code objects from class TypeDescriptors, causes performance problems during JNDI lookup
PI64806 java.lang.StackOverflowError on WAR
PI65244 EJB connection helpers are both null
PI65637 Starting an OSGi Application intermittently causes an endless loop.
PI66570 IllegalStateException thrown on server shutdown
PI67028 AccessControlExceptionthrown from AppClassLoader.getResources() call
PI67672 Extended use of remote EJB may cause error mentioning Phaser parties.
PI67674 Restarting ORB may cause socket bind exception
PI67719 AccessControlException from JTMThreadFactory, JNDI lookup, and JmsManagedConnectionFactoryImpl
PI67739 Configuring a non-default ORB may interfere with application client.
Liberty Archive Install PI66992 z/OS IM offering failed to modify asset due to error 'Failed to load bundle com.ibm.was.determine.job.type'
Liberty Kernel PI62609 When coreThreads and maxThreads are the same value, CWWKE1200W messages, which indicate a hung thread, may appear erroneously
PI63436 Embeddable Liberty command wlp/bin/server fails to run on old bourn shell used by Solaris 5.10
PI64318 Product validation error when running installUtility install
PI67017 Apache Commons Compress was incorrectly added to Liberty's JVM classpath
PI67231 Inconsistent installUtility/feature error messages when installing features or depending features not found on repository
PI67665 Path normalization of configuration variables can cause unwanted modifications
Liberty z/OS PI61412 HTTP access logs are not tagged on z/OS.
PI61645 CWWKF0015I and CWWKF0014W messages are misleading
PI63930 WEBSOCKET-1.1 feature does not work in Liberty Imbedded in CICS TS 5.3
PI64823 zosRequestLogging-1.0 feature does record the SAF mapped user ID in SMF 120 subtype 11 records.
PI65658 Liberty z/OS unauthenticated ID experiences ICH408I calling HttpServletRequest.login with syncToOSThread enabled
PI65709 Storage leak in subpool 249 key 2 when using the zosLocalAdapters-1.0 feature.
PI66150 Liberty server processes the start of WOLA workload to slowly
Security PI60769 IIOP sslRef mismatch not clear in error message
PI61592 Security context not propagated into JCA resource adapter
PI62626 jacc-1.5 feature does not package a separate API jar file even though it exposes the API.
PI62722 Attempting to start or stop a member from the Liberty Admin Center running in a collector on z/OS results in CWWKS2910E
PI63929 Potential open redirect security vulnerability in WebSphere Application Server Liberty CVE-2016-3040
PI63949 When auth-method tag is not used in Liberty a NullPointerException is thrown
PI64065 CWWKS9112W: Invalid run-as configuration for security-role name ApplicationRoleName in the application ApplicationName
PI64790 Cross-site scripting vulnerability in OpenID Connect client CVE-2016-3042
PI65716 configUtility and collective command line utilities do not support the custom password encryption
PI66628 The message when the custom password encryption is not available is not acculate.
PI67237 AccessControlException issued when an API tries to obtain an internal OSGi service via the kernel service SPIs.
PI67467 An intermittent MalformedURLException is issued during the server shutdown when Java 6 is used and there are permissions defined
Sessions and Session Management
PI60026 Bypass security restrictions in WebSphere Application Server (CVE-2016-0385)
Systems Management Functions PI62640 Collective utility help text for --keystorePassword is incorrect.
PI66520 A collective controller shared configuration file is removed after it is renamed.
PI66522 A deploy rule without a defined restart command produces an exception during a deploy operation.
PI66523 The --createConfigFile option of the collective utility allows the config file to be in the configDropins/defaults directory
PI66524 The collective utility writes an unnecessary request to edit server.xml.
PI67220 Liberty member in a Docker container ignores metadata defined in the admin-metadata.xml file included in the container.
PI67221 Docker registry commands in the Docker deploy rule mistakenly prepend the repository with the user name.
Virtual Member Manager (VMM) PI62392 Login failure if userFilter contains userAccountControl attribute
PI63471 getUserDisplayName returning null when basicRegistry is configured
Web Container
PI54459 Information Disclosure in WebSphere Application Server Liberty CVE-2016-0378
PI58875 Application is started even though there has been a listener exception during application start up
PI61651 An uncaught exception in javax.servlet.AsyncListener.onComplete() might cause threads to hang
PI63193 SRVE8094W might happen even if invokeFlushAfterServiceForStaticFile=false
PI65853 Websphere Application Server Web Container affected by Apache Struts vulnerability (CVE-2016-3092)
PI67093 Information disclosure in IBM WebSphere Application Server CVE-2016-5986
PI67470 ConcurrentModificationException thrown on getServletWrapper when serveServletsByClassname is enabled
PI67832 FFDC created when a feature is removed from server.xml.
Web Services (JAX-WS, JAX-RS) PI64462 NullPointerException in org.apache.cxf.jaxrs.impl.tl.ThreadLocal Providers.getContextResolver()
PI67586 ConcurrentModificationException in org.apache.cxf.jaxrs.JAXRSServiceFactoryBean
Web Services Security PI66148 OIDC Client Service is not thread safe
PI66354 OAuth provider does not encode non-ASCII characters properly
WMQ messaging providers PI45254 Collect more serviceability data for transaction log service
PI65127 Deadlock issue in tranlog database
PI65412 Transaction service may fail to log data correctly when its logs are stored in a database and connection failure occurs
Fix Pack 16.0.0.2
Fix release date: 24 June 2016
Last modified: 24 June 2016
Status: Superseded

Download Fix Pack 16.0.0.2

Component
Security APAR
APAR
Description
Contexts and Dependency Injection (CDI) PI58316 Changes to JSP in EAR or WAR not picked up if CDI-1.2 feature enabled
PI61971 CDI forces a creation of an extra session, which causes memory usage issues.
Dynacache PI59818 Servlet and Object Cache services are initialized multiple times during Liberty startup causing delays and exceptions
EJB Container PI58029 Classloader leak associated with PCRegistry
PI59443 A method named ejbCreate on a managed bean may be treated as a post construct interceptor method
General PI52696 WebSphere Application Server proxy - Too many open files
PI53321 Using WOLA with CICS version 5.3 causes BBOX abend
PI54666 NullPointerException when using IPv4/IPv6 loopback addresses
PI55413 CICS BBO (WebSphere) link server abends with WRITEQ TSQ BBO* error eibresp: 16 eibresp2: 0
PI57228 The HTTP Channel will consume additional memory, in specific circumstances, when processing inbound data.
PI58457 Quotes are automatically added to the cookie Path attribute on version 1 cookies
PI58692 NullPointerException when using batchManager to purge and no arguments specified
PI58800 High CPU utilization can occur for WebSocket sessions that expire using a non-default MaxIdleTimeout value
PI58918 Response Splitting Vulnerability using a specific API CVE-2016-0359
PI59273 A job instance with zero executions cannot be stopped or restarted.
PI61321 Serviceability changes for batch feature
PI61621 The persistent user data and metric values are invalid when a job fails in the middle of a chunk step
PI62053 HTTP Channel Access Log does not properly record how much is written to the file
PI64247 For Double Byte languages an FFDC IllegalArgumentException can occur for a WebSocket connection that closes due to an error
Intelligent Management Component PI61807 Web Server SSL certificate created by the Liberty dynamicRouting feature needs updating
Java Persistence API (JPA) PI47094 ClassCastException using a shared JPA module on JPA 2.1
PI55889 JPA Merge fails intermittently with FOREIGN KEY constraint error
PI58092 Delay in application startup on Liberty
PI58523 When using jpa-2.1 with Bean Validation, XML constraints are not recognized.
PI59004 Criteria Modelgen API is not included for the EclipseLink provider
PI59757 JPA PersistenceUnitUtil.getIdentifier() fails for nested EmbeddedId
PI59782 Eclipselink on Liberty is missing javax.json imports
PI59999 OpenJPA custom plugins can cause Classloader leaks
PI62022 Bean validation interceptor is invoked twice
JavaServer MyFaces (JSF) Apache MyFaces implementation PI57255 MyFaces CDI support is disabled if non-CDI application is loaded first
PI59422 Flow beans are destroyed before the flow is finalized
JavaServer Pages (JSP)
PI56811 XXE and RCE via XSL extension in JSTL XML parse and transform tags
PI59436 NullPointerException when using EL expressions returning null
PI60837 A StackOverflowError can occur when com.ibm.ws.el.reuseEvaluationContext is set to true
PI61400 There are unused message properties files packaged in the Expression Language (EL) 3.0 bundle.
Liberty Administrative Center PI58080 Admin Center toolbox can not save bookmarks with Explore search results which search on tags
PI62052 Potential security vulnerability in Admin Center for Liberty CVE-2016-0389
Liberty Application Services PI53419 Liberty server z/OS: Deadlock adding WABs to web container
PI58841 An OSGi web app using JSP and JSTL by default currently needs to explicitly import the JSTL spec packages.
PI59010 CWWKC2259E: "Unexpected child element defaultDatasource" in WebSphere Liberty for EJB 2.1
PI60496 EBA will fail to resolve when blueprint-1.0 is active
PI60749 Common shared library classes return null when calling getProtectionDomain().getCodeSource().getLocation()
PI61468 Application classloaders are leaked by transaction monitoring threads.
PI61906 Classloading trace doesn't contain details of classpath being traversed.
PI62078 ClassLoader leak in CDI's RuntimeFactory
PI62240 ClastCastException doing a JNDI lookup
PI62385 Classloading perfomance of the Liberty ORB has been slightly improved.
Liberty Archive Install PI60256 Failed to testConnection against wlp-feature-8559.zip
PI62355 License jar upgrade returns a confusing message when it fails due to invalid edition.
Liberty Debug and Tracing PI57488 Null characters added to logs when truncated by user
PI58309 NullPointerException seen with logstashCollector-1.0 feature when access log source is enabled
PI58310 logstashCollector-1.0 feature reports a NullPointerException during server shutdown operation
PI58311 TRAS0120W message reports incorrect lost events
PI58386 Duplicate FFDC records are sent for the same failure by logstashCollector-1.0 feature.
PI60821 NullPointerException when eventLogging feature is removed
PI61051 Removal of ISADC script
PI61371 High Performance Extensible Logging (HPEL) binarylog view does not sort by time stamp
PI62013 Warning message should be issued when wrong source is specified.
PI62015 Unexpected null pointer exception appearing in FFDC logs with logstash collector whenever updating the source
Liberty Kernel PI48971 ActiveMQ properties not being honored in JMSActivationSpec in Liberty
PI59235 Problems with serialization code
PI59906 Server command help is missing the --os option description
PI60941 When installUtility install serverName is run, the server logs and workarea were not created under WLP_OUTPUT_DIR
PI61175 During startup the application manager can cause an FFDC with a ConcurentModificationException causing no applications to start.
PI61177 Spurious error may be logged when bundle starts and immediately stops.
PI61178 Dynamically configuring one or more features from zero features will delay starting applications by 30 seconds
PI61319 The help for the productInfo command line tool reports an error rather than provide the help text.
PI61320 Missing attribute message is confusing
PI61324 Server package zips when unpacked lack file permissions for scripts in bin folder.
PI61451 installUtility command may fail with a SocketException: "Too many open files"
Liberty System Management PI57567 Merged plugin-cfg.xml generated by ClusterManager mbean generateClusterPluginConfig operation contains dup elements
PI58426 Collective create always treats --keystorePassword as a required argument
PI61176 Using the IBM JMX REST client from Liberty requires setting too many properties
PI61895 Swagger document and UI in apiDiscovery-1.0 did not show non-ASCII characters properly.
Liberty z/OS PI50018 linkTaskChanID property does not work when used with z/OS Connect service provider
PI52665 z/OS WOLA CICS BBOC control transaction can not support long command strings from the console
PI54756 Z/OS Connect JSON Parse Error message missing JSON payload.
PI56919 IllegalArgumentException: com.ibm.ws.security.saf.SAFException: CWWKS2910E: SAF service IRRSIA00_CREATE did not succeed
PI57546 UserRegistry.getUsersForGroup() is not implemented in Liberty server
PI58016 Asian characters in UTF-8 encoded payloads are converted to escaped unicode characters
PI58155 Liberty server takes ABENDEC6 RC0000FD1D due to CPU time limit exceeded
PI58468 WOLA fails to reconnet to CICS TS after previous executions have succeeded
PI59320 ABEND 0C4 RSN=00000004 or a CICS ASRA ABEND when you have more than 128 WOLA connections in an address space
PI61322 CICS programs called over WOLA are being passed an incorrect channel or container name.
PI61323 An ABENDDC2/ABENDSDC2 occurs in program BBOATRUE when CICS is configured to use an embedded Liberty server.
Performance Monitoring Tools PI60781 NullPointerException being thrown from requestTiming feature if any exception occured
Security PI55373 Collective framework needs to support certificates signed by third party signers
PI59813 Improve the exception generated when client does not trust the server.
PI61090 NullPointerException from FeatureWebSecurityCollaboratorImpl
PI61204 NullpointerException when using ibm_securitylogout in Liberty
PI61253 OAuth or OpenID Connect response does not contain state parameter
PI61622 The French help text of the PasswordUtility command line utility contains typographical errors.
Systems Management Functions PI58664 Liberty collective member status is incorrect
PI62453 When making a JMX Connection to a collective member, the JVM default for HTTPs connections is updated
Virtual Member Manager (VMM) PI54746 Federated repository does not allow a user login with Turkish characters
PI56819 User login failure when uniqueUserIdMapping inputProperty set to non default values
Web Container PI51122 Webcontainer intermittently generates a 500 error with StringIndexOutOfBoundsException
PI56833 WebContainer is setting the Content-Language
PI57951 Line feed code disappears when data is uploaded with enctype="multipart/form-data" in an HTML form
PI58920 Dispatcher type obtained from HttpServletRequest is not updated on post processes
PI59415 Development version of servlet SPI bundle does not match with runtime webcontainer bundle.
PI60797 Enable POST only for a form login
PI61594 AsyncContext.dispatch() might dispatch to an incorrect URI if using different versions of ServletRequest.startAsync()
PI61628 A 404 error might be generated when using redirectToWelcomeFile
Web Services (JAX-WS, JAX-RS) PI53319 ClassNotFoundException on WebSecurityHelper
PI56315 JAX-RS MessageBodyWriter is not run
PI56374 ClassCastException: java.util.TreeMap incompatible with javax.ws.rs.core.MultivaluedMap
PI58097 HTTP Response header with invalid Date string is added to the response on a WebServices request
PI58779 JAX-RS 2.0 @Context injection from client side provider reports NullPointerException
PI58799 IllegalArgumentException inJAX-RS InjectionUtils.java code
PI59519 Update product.json model to match recent changes in API Connect
PI59633 When using JPA to persist an object, the JAX-RS engine does not correctly catch any exceptions that are thrown
PI59640 Security definition is missing from the filtered Swagger document returned by API Discovery Framework
PI59643 Using @Context to get the HttpServletRequest and changeSessionId() always returns null
PI61936 Information disclosure in JAX-RS API
PI62155 Suppress SOAP FAULT error message
PI62450 Swagger processor may allow weaker than expected security
Web Services Security PI59665 OIDC Relying party auth flow fails with 401 error when security trace is enabled
PI59677 OIDC relying party authentication failure due to CWWKS1704E error
PI62735 The groupId(s) get lost in id_token and introspection
WMQ messaging providers PI59123 WS-AtomicTransaction participant recovery after a server crash may never complete
PI60966 Problem distributing transaction between WSAS traditional and Liberty using WS-AtomicTransaction.
Fix Pack 8.5.5.9
Fix release date: 18 March 2016
Last modified: 18 March 2016
Status: Superseded

Download Fix Pack 8.5.5.9
Component
Security APAR
APAR
Description
Contexts and Dependency Injection (CDI) PI50291 Beans searched for through instance interface are not found
PI51134 NullPointerException if all interceptors are on methods overriden, defined at class level or defined in a different method
PI51508 Reduce contention in AbstractOwbBean.equals use
PI52391 BeanManger.equals can not distingiush between two BeanManagers for the same module after a restart
PI52756 CDI is activated and generates error with no existence of beans.xml
PI52765 Provide a fix for Weld bug in CDI 1.2
PI57976 Objects of class NullInjectionPointImpl are visible in applicaiton code
PI58021 ClassNotFoundException if application contains a jar which contains other archives
Database Access, Connection Management, Merant/DataDirect drivers PI57239 Error when multiple threads attempt to authenticate to Mongo at the same time
EJB Container PI49639 CWWKC2259E: "Unexpected child element" in Liberty profile for EJB 2.1
PI50806 NullPointerException in AbstractEJBRuntime.bindAllRemoteInterfacesToContextRoot when using ejbRemote-3.2 feature
PI53807 Improve message text when EJB SessionContext fails to serialize
PI55049 Non-persistent EJB Timer created while application is stopping may not be removed
General PI48725 Initial TLSv1.0 application data packet read into the wrong buffer by the SSL channel
PI49508 At startup end users requests routed with HTTP 404 response
PI49566 WebSockets might not close the connection if sessionIdleTimeout is set
PI51523 HTTP Channel getCookieValue throws ArrayIndexOutOfBoundsException when cookie is only one-digit double quote "
PI51552 Unwanted CWWKC1556W warning when application starting or server shutting down
PI51740 The HTTP Channel could cause the Operating System to send an RST packet when the connection is closed
PI52417 Host name resolution with collectives on z/OS may not resolve properly
PI52845 SSL handshake fails due to a java.lang.IllegalArgumentException.
PI54212 Update one class in Apache Commons
PI55344 The job logs are producing a date such as 2016-12-28 as opposed to 2015-12-28 during the last week of the year
PI55874 Jobs containing split-flow may continue executing the (split-flow) even after the job is stopped.
PI56019 The com.ibm.websphere.appserver.api.mediaServerControl.1.0_1.0.11.jar file in the dev/api/ibm directory is empty.
PI56057 The MediaServerControl Javadoc provided contains accessibility issues.
PI56076 Batch job logs do not contain the exception stack trace on step or job failures.
PI57100 Remote partition wrongly ends in COMPLETED state when job is stopped, wrongly bypassing partition execution on restart.
PI57542 IOExceptions is not thrown on inbound connections
PI58014 Message's address is null in SipUdpConnLink
PI58049 The exitStatus after the restart of an executor is not properly being rolled back to the correct value.
Install V8 and above PI51130 Updating Liberty using group-mode Installation Manager does not set group-write bits
PI55969 An update to the licenses in IBM WebSphere Application Server Liberty V8.5.5.9 is required.
Intelligent Management Component PI53304 Auto scaling does not fully scale in to the minimum number of servers or scale out to the maximum number of servers
PI57006 A scaling controller might not register a scaling member correctly when the member starts.
PI57007 ConcurrentModificationException in com.ibm.ws.scaling.controller.topology.RepositoryMonitor$UpdateHandler
PI57982 In a Liberty collective, not all instances of an application are used when routing with Intelligent Management for Web Servers.
Java 2 Connectivity (J2C) PI53120 Datasource connection pool minimumPoolSize to be 0 by default for newly created datasources
PI54230 ClassNotFoundException when using generic RA in Liberty
Java Persistence API (JPA) PI46699 A null value is returned when trying to use OpenJPA's DelegatingConnection's unwrap()
PI47094 ClassCastException using a shared JPA module on JPA 2.1
PI47144 Merging an unmanaged entity multiple (3) times leads to an exception.
PI50341 Using java.sql.Timestamp data type for entity version value requests current timestamp from wrong SYSIBM table on DB2
PI50694 ClassCastException is thrown in JPA when QueryCache is enabled
PI51878 ddlGen script is shipped in ASCII instead of EBCDIC in Liberty 8.5.5.7
PI52209 EntityNotFoundException in OpenJPA
PI53589 OpenJPA fastpath broken on Java 8
PI56340 OutOfMemoryError from org.apache.bval.cdi.BValExtension$Releasable objects not being released.
PI56499 AbstractMethodError occurs when using JPA with beanvalidation-1.1 feature
PI58001 NullPointerException from org.eclipse.persistence.queries.ReadObjectQuery under heavy loads
PI58005 With a Liberty image consisting of only EE7 features, importing javax.persistence 2.1 with WDT requires an internal attribute.
JavaServer Faces (JSF) SunRI implementation PI46218 DeploymentException occurs if different web modules in an enterprise application have CDI beans with the same name
JavaServer MyFaces (JSF) Apache MyFaces implementation PI45044 JSF problem in a Portlet environment: Form inputs inside a data table lose their values if validation fails
PI47885 h:selectManyCheckbox and h:selectOneRadio components do not support f:ajax tags.
PI49486 MyFaces leaking file descriptors when reading stylesheet files
PI50108 JSF component binding with ViewScope beans does not work and causes an exception
PI51038 Fix EL 3.0 ImportHandler support in JSF 2.2
PI53555 JSF ViewScope implicit objects are not resolved in JSP pages
PI54702 Null renderer-type tag causes custom TagLib xml parse error
JavaServer Pages (JSP) PI52851 Changing JavaServer Pages (JSP) features between requests can result in a java.lang.NullPointerException.
Liberty Application Services PI51184 CWWKG0031E is received after commenting out a JNDI element and then adding it back at runtime
PI51375 Application Manager change to make time waiting for apps at startup configurable
PI52936 Application classes will provide incorrect values when calling getProtectionDomain().getCodeSource().getLocation()
PI54707 Intermittent ConcurrentModificationException thrown on startup when two Liberty apps use a privateLibraryRef.
PI55383 Client container application fails to run
PI55891 SPI classes under com.ibm.ws.container.service reference some non-SPI classes
PI56452 NullPointerException in WABInstaller.java results in "Unable to install bundle" message
PI56644 SPI classes under com.ibm.ws.javaee.dd reference some non-SPI types
PI56831 Classloader.getResource("") does not return url to WEB-INF/classes
Liberty Debug and Tracing PI51841 Request timing can accidently remove an executing request from the active request list
PI52003 New "json" format added to binarylog command
PI54917 ConcurrentModificationException in collector manager
PI55910 Logging in InvocationContextImpl outputs array ids instead of array contents
Liberty Kernel PI51988 Invoking productInfo with valid command but bad option does not give errors
PI52309 WebSphere Liberty default executor auto-tuning is disabled when an embedder overrides the default ThreadFactory.
PI53867 ScheduledExecutorService can temporarily leak classloaders for canceled tasks.
PI54458 Wrong charset returned in page-not-found error when incorrect context root is requested.
PI55031 Fix defect in Equinox framework to incorporate in Liberty
PI55670 Liberty File URLs contain incorrect number of '/' characters
PI56645 Configuration conflict warning message needs improvement
PI56678 FileNotFoundException when application start-up fails.
PI57314 JSP classloading ignores the application parent-last classloader setting
PI57974 OSGi applications may be able to get access to OSGi services provided by Liberty feature bundles which are not considered API.
PI57975 Deadlock may occur when creating a java util logging Logger
PI57980 Improper error when running Liberty scripts with unsupported Java version.
PI57981 Changing SSLDefault may still require unnecessary configuration of defaultKeystore
PI58006 Feature updates are less likely to result in unnecessary component activation and deactivation
PI58035 When installing features using the installUtility jaccWeb-1.5 and ejbComponentMetadataDecorator-1.0 are not installed
Liberty System Management PI53219 Wrong locale in the content when calling REST API to generate schema
Liberty z/OS PI50915 More details will be provided for some failures in WOLA connections via Liberty
PI51171 Allow WOLA client to re-connect after a Liberty server failure or recycle
PI51329 Default JAVA not read from java.env when server is started with a PROC.
PI53339 Liberty on z/OS fails to route messages to MSGLOG DD card
PI53469 z/OS Connect does not preserve JSON payload element ordering as shown in copybook files.
PI53842 Basic authentication not working z/OS Connect dynamic services
PI54855 Liberty on z/OS does not pick up the IFAUSAGE properties file in the product extension directory
PI54886 When starting a Liberty server that has zoslocaladapters configured the sever abends with a System 106.
PI55029 Liberty started task does not expand @WLP_INSTALL_DIR@ when used in the path specified by WLP_DEFAULT_JAVA_HOME in java.env.
PI56289 Calls to WOLA services BBOA1* may hang when Liberty server is cancelled or ABENDs
PI56385 Message CWWKB0101I does not provide enough information to diagnose problems connecting to an Angel process.
PI56987 WLP_SKIP_UMASK=true is not working when Liberty server is started from a started task on z/OS
Messaging Providers PI47483 [WARNING ] CWWKG0032W: Unexpected value specified for property
Performance Monitoring Tools PI55077 Monitor group filter does not work with the component which are not using the code intstrumentation.
Security PI50399 NullPointerException thrown at com.ibm.ws.transport.iiop.security in Liberty profile
PI51188 Login fails with mixed-case password phrase on z/OS.
PI52181 Liberty incorrectly displays warning message aboutWSGUEST user missing the RESTRICTED attribute
PI52566 Incorrectly returning CWWKS4306E when application URI is unprotected and Liberty receives an expired LtpaToken
PI57413 CWWKE0702E: Could not resolve module: com.ibm.ws.management.security is logged when zosSecurity-1.0 is enabled.
PI57668 Collective member certificate login fails with LDAP or Federated user registry
Sessions and Session Management PI53220 Session attribute not stored with Oracle as database session persistence and MultiRowSchema=true
Systems Management Functions PI58002 Collective replica restart may fail
Virtual Member Manager (VMM) PI48674 LDAP binary attribut handling in VMM
Web Container PI42598 Filter with only WebFilter annotation does not get invoked
PI43752 AsyncContext.dispatch() dispatches to an incorrect URI
PI52414 While using an upgrade request the quiesce operation did not complete
PI52415 isFinished on a stream can return true before the stream is fully read
PI53854 Unable to retrieve the REMOTE_USER from the WSRU header without using any security in Liberty
PI54235 A redirect using an URI relative to the current request URL redirects to the wrong URL
PI54414 Managed thread factory not available in ServletContextListener.contextInitialized
PI54701 The Servlet SPI was refactored to provide a complete set of SPI classes.
PI57884 Blocking write is not allowed once WriteListener is enabled.
PI58013 If an error occurs during a request with a ReadListener and is upgraded, a quiesce operation may not complete properly
Web Services (JAX-WS, JAX-RS) PI48389 @PreDestory method invoked twice when @RequestScoped annotated on resource class and no @Context field in the class
PI50692 Data conversion issue for Multi-part MIME on mainframe (z/OS)
PI51798 Liberty JAX-RS implementation may throw NullPointerException
PI52014 User customized provider life cycle annotation @PostConstruct @PreDestroy not work or throw NullPoint Exception when stop server
PI54152 Liberty profile JAX-RS 2.0 Client Side Built-in Providers Installation Performance Issue
PI55038 Injection on implementation of ParamConverterProvider in JAX-RS 2.0 fails with NullPointerException
PI55547 Customized EJB ExceptionMapper can not be mapped to user defined Exception in more than two JAX-RS 2.0 Applications
PI56455 ClassNotFoundException loading the jaxws-2.2 and appSecurity-2.0 features
Web Services Security
PI49272 Cross site scripting vulnerability in Oauth Service Provider CVE-2015-7417
PI57265 Add OpenID Connect relying party (RP) config option to specify whether to do client side redirect
PI58003 Cross-site scripting vulnerablility in OIDC client web application
WMQ messaging providers PI43413 Deadlock in controller due to timing window in the recovery log service; servant times out
PI53471 Extended Unit of Work API may not throw errors back to the application when they occur during transaction end processing.
PI53472 Thread safety defect in Unit of Work manager initialisation
PI53661 When inside an @Transactional declarative transaction, an error is thrown upon entering an @TransactionScoped context.
PI54151 Unable to find the @Transactional annotation
PI56465 @TransactionScoped bean instances do not have their @PreDestroy-annotated destructors called.
PI56466 Access to UserTransaction methods is not correctly disabled within nested @Transactional annotations
PI56467 @Transactional rollBackOn/don'tRollbackOn scans the exception class hierarchy in the wrong direction
PI56529 @Transactional annotation processing code emits FFDC when encountering RuntimeExceptions in the dontRollBackOn list

Fix Pack 8.5.5.8
Fix release date: 11 December 2015
Last modified: 11 December 2015
Status: Superseded

Download Fix Pack 8.5.5.8
Component
Security APAR
APAR
Description
Contexts and Dependency Injection (CDI) PI47250 Liberty Profile with CDI 1.2 and CDI enabled application has slow startup
PI49410 Publish the Weld 3rd party version on the repackaged Bundle-Description
PI49978 If CDI 1.2 is enabled then a BeanManager could be returned when resolving any JNDI value.
PI50790 Turn off beans.xml validation by default.
PI50802 ProcessInjectionTarget and ProcessInjectionPoint events are not fired when processing non-CDI Interceptors.
PI52419 Export weld packages so that DeltaSpike Scheduler can be supported
EJB Container PI47475 A NameNotFoundException occurs for injection of resource into ManagedBean in EJB module
PI48390 IllegalStateException thrown during server stop when j2eeManagement feature is installed
General PI42523 Root not injected on URL containing query but omitted path
PI45266 HTTP response splitting vulnerability CVE-2015-2017
PI47651 An OutOfMemory error can occur from a leak in WebSockets when websocket session timeout is set
PI47954 Future.get can hang during ManagedTaskListener.taskStarting for repeating task
PI48097 Cleanup of resources can be missed after Thread.run for threads created by a ManagedThreadFactory.
PI48327 WLP does not handle requests successfully during shutdown
PI48759 The TCP Channel's Host Name Include and Exclude lists are case sensitive
PI50766 ExecutionException raised instead of AbortedException for aborted task
PI51046 BATCHMANAGER SCRIPT WAS SHIPPED IN ASCII ENCODING ON Z/OS INSTEAD OF EBCDIC ON LIBERTY 8.5.5.7
PI51656 COMM_FAILURE exception raised during IIOP invocation due to IIOP connection being closed while in use
PI52303 Duplicate IIOP request IDs lead to incorrectly parsed response (from incorrectly handled reply message).
Install V8 and above PI51982 LIBERTY 8557 CANNOT ROLLBACK TO LIBERTY 8553 AND BELOW
Intelligent Management Component PI49835 java.lang.IllegalStateException: The ScalingMemberReplacementService service is not available
JavaServer MyFaces (JSF) Apache MyFaces implementation PI47095 A java.lang.ClassNotFoundException can occur during deserialization of the HTTP session
PI47578 An UnsupportedOperationException is thrown with an eager ManagedBean containing a ManagedProperty in JSF 2.2
PI47600 The "class" attribute cannot be set in a custom tag in JSF 2.2
JavaServer Pages (JSP) PI43036 JspTranslationException when using a JSP tag containing another tag with deferred-attributes
PI44611 JSP engine throwing an IllegalStateException when PageContext.findAttribute(string attributename) is called
PI46827 Memory leak in javax.el.BeanELResolver caused by application restarts
Intelligent Management Component PI52161 Liberty collective server status is not in sync with DataPower status query
Liberty Application Services PI50370 Unnecessary IllegalStateException FFDC created during some server stops
Liberty Archive Install PI50812 Some download error messages are shared with install error messages, but the content of the message only mentions install.
Liberty Debug and Tracing PI49056 NullPointerException when updating traceSpecification programmatically.
PI50369 NullPointer in MethodInfoImpl tracing
PI51010 Liberty core dumps when -Xhealthcenter:level=inprocess jvm option is used with health center agent version 3.0.5 or above
Liberty Kernel PI46358 Problem with notify call for updateTrigger="mbean"
PI46856 Unused server.env file generated when creating client processes using Java 8
PI47941 Liberty featureManager command may hang until killed
PI48377 Unable to use wlp-featureRepo-8.5.5.7.zip as a directory based repository in WDT
PI49759 When setting the trace file name to 'stdout', the distinction between error and general output messages is lost.
PI49927 UPDATE TO COMMAND PRODUCTINFO VIEWLICENSEINFO
PI50096 When java security is enabled application class loaders may get access to internal packages contained in liberty profile
PI50775 There needs to be a space character preceding the ellipses mark used in some install command line messages.
PI51403 SSL support does not start properly
PI52579 Errors after adding or configuring additional content to server when the server installation path contains unsafe characters
Liberty z/OS PI46937 Security identity not propagated from batchManagerZos to batch exectuor in multi-server environment causes JobSecurityException
PI47050 Unintall zosBundle addon fails if use Java7 to run Liberty installUtility
PI47248 PERMISSION ERRORS ACCESSING RESOURCES IN THE SERVER'S WORKAREA DIRECTORY USING APPLICATION SYNCTOOSTHREAD WITH JSP INCLUDE TAG
PI47476 CWWKT0022E IN LIBERTY SERVER WHEN USING DVIPA HOSTNAME DEFINED BY VIPARANGE
PI47730 SERVICEABILITY ENHANCEMENTS TO ENABLE TRACING IN THE TOOLING THAT Z/OS CONNECT USES
PI48362 The performance of inbound requests using the zosLocalAdapters feature is poor.
PI48528 Z/OS CONNECT USE OF HTTP GET WITH INVOKEURI FAILS WITH WOLA SERVICE PROVIDER
PI48823 HIGH I/O AND CPU USAGE WITH ZOSCONNECTDATAXFORM DATA TRANSFORMER
PI48987 AFTER RESTARTING LIBERTY WITH Z/OS CONNECT, NO Z/OS CONNECT SERVICES ARE AVAILABLE
PI50040 CWWKE0701E MESSAGES SEEN AT LIBERTY SERVER STARTUP
PI50389 CONVERTTOJSONPRIMITIVE DATA TRANSFORMATION PART OF Z/OS CONNECT USES HIGH CPU
PI50787 A z/OS modify command fails when running OSGi console commands.
Performance Monitoring Tools PI42967 Excessive appendCustomSetString calls cause high CPU when using VE and PMI.
PI49140 Health manager dumps many files into member server's /tmp directory
Security PI44880 Improve serviceability for form-logout processing.
PI47544 Fix keystore file monitoring so it is not polling by default.
PI47823 In Liberty profile ignoreCase=true is not honored for administrator-role entries
PI48220 The hashtable login module does not honor the uniqueId and security name when passing then userId
PI49157 App Server Classic to Liberty profile remote EJB lookup is not working when CSIv2 uses LTPA
PI50589 Liberty profile needs a meaningful message in the NO_PERMISSION exception when failing to decode a GSSUP token.
PI50717 Populating the users to the BasicRegistry might fail due to CWWKS3104E: Multiple users are defined error
PI50825 Access is denied with a WebSphereRuntimePermission for getSSLConfig in CSIv2 during a naming lookup.
Sessions and Session Management PI51030 There is a duplicate creating table problem when using Informix as session database on Liberty profile
Systems Management Functions PI50111 Automatically deployed member fails to start on Microsoft Windows
PI50484 Multiple clusters concurrently deploying to new host have JRE collision
PI50768 wlpInstallDir and/or jreInstallDir and/or otherInstallDir install to default location instead of to user specified one.
PI50824 Scaling member may change to automatic mode on member restart
PI50970 An improvement is made in the collective replica set management to better handle a network isolation condition.
PI50985 Collective controller does not start
PI52103 Vulnerability in Apache Commons Collections used by Liberty
Virtual Member Manager (VMM) PI46476 The principal name is listed as null in the error message CWIML4537E
Web Services Security PI36818 WebSphere OAuth TAI template cache has a synchronized lock and can block a lot of threads
PI51540 CWWKS1758E: Validation failed for the ID token.
WMQ messaging providers PI48396 Performance degradation on application startup
PI52986 In doubt transactions are not recovered on server restart

Fix Pack 8.5.5.7
Fix release date: 11 September 2015
Last modified: 11 September 2015
Status: Superseded

Download Fix Pack 8.5.5.7
Component
APAR
Description
Contexts and Dependency Injection (CDI) PI40544 CDI decorator for an interface must directly implement can not inherit from a super class
PI45878 Injected parameters passed in wrong order
PI46326 Performance Improvement on application startup
PI46615 The same class appearing in multiple war files might cause the wrong bean manager to be returned.
PI46639 Name given to a bean with @Named annotation is not the correct default if it begins with two or more capitals
PI47146 CDI does not correctly verify and publish events for JEE Component Classes which support injection
Database Access, Connection Management, Merant/DataDirect drivers PI45007 Allow the user to specify the TLS_CLIENT_CERTIFICATE_SECURITY option on the securityMechanism property on properties.db2.jcc
Dynacache PI45499 The webCacheMonitor feature does not work with JSP 2.3.
PI45536 The Liberty profile cache monitor does not work with application security enabled.
General PI33395 NullPointerException thrown by UDP channel when stopping server.
PI35277 Server not responding to Continue message as expected
PI36179 ReInvites are frequently canceled with NullPointerExceptions
PI42817 HTTP Channel prints FFDCs for MalformedMessageExceptions and IllegalStateExceptions while parsing request message
PI44958 Exceptions when requestTiming is re-enabled
PI46281 NullPointerException in batch JobOperatorImpl after dynamic server configuration change involving batch or its dependencies.,
PI46300 A call to the Batch REST interface to restart a job fails when the job was previously started via the JobOperator.,
PI46303 Issuing a STOP command to a Batch job does not result in the job being in the STOPPED state.,
PI46433 FFDC is produced for a NullPointerException in com.ibm.ws.tcpchannel.internal.SocketRWChannelSelector.updateSelector.
PI46543 Future.get hangs when attempted from taskSubmitted/taskStarting of tasks scheduled via a ManagedScheduledExecutorService.
PI46745 A retry with rollback performed before the first checkpoint is taken causes a NullPointerException to be thrown.
PI46747 Batch status of an instance is in STARTING when instance state is FAILED
Install V8 and above PI46415 Updating Liberty using Installation Manager on z/OS requires a large amount of disk space.
PI46420 Installing Liberty v8.5.5.6 with features or addons using Installation Manager in silent mode fails due to out of disk space
PI46422 Installation Manager unable to install assets from instance of the Liberty Asset Repository Service with no internet connection
PI46563 Update WebSphere Application Server Liberty profile V8.5.5.7 licenses
Java 2 Connectivity (J2C) PI37749 JDBC Wrapper implementation of ResultSet.isClosed returns false after DB2 JCC driver has closed the ResultSet
PI45839 Missing translatable message for error path where invalid valid is specified for a numeric connector property
Java Persistence API (JPA) PI45511 Expose the org.apache.openjpa.lib.rop package in the jpa-2.0 feature to enable the serialization/deserialization of ResultLists.
PI46623 When using the jpa-2.1 feature, an entity containing a lazy field may fail to deserialize
PI47287 Potential memory leak when both validation 1.1 and CDI 1.2 features are enabled.
JavaServer MyFaces (JSF) Apache MyFaces implementation PI38788 Hung thread caused by MyFaces
PI43692 A java.lang.ClassNotFoundException can occur when the session is invalidated and the jsf-2.2 feature is being used.
Liberty Administrative Center PI44185 Stopping Liberty profile 8.5.5.5 controller from the Admin Center causes error
Liberty Application Services PI43122 ValidationException occurs when using JAX-RS and more than one validation.xml
PI43130 Enable strict checking of a single validation.xml file per application classpath.
PI46803 Server with IIOP clients fills heap and throws OutOfMemoryError
Liberty Debug and Tracing PI44096 binarylog command causes java.lang.NullPointerException
PI46922 Request timing doesn't work with Java EE 7 features
Liberty Kernel PI28387 After a configuration update a web request may temporarily result in an error
PI41611 Collective controller returns garbled stdout of ServerCommands to JXM client
PI42400 OSGi applications that contain blueprint.xml in bundle fragments do not start after Liberty update to 8.5.5.5
PI43382 Product validation error using featureManager to install an add-on, such as extendedPackage-1.0 or javaee-7.0
PI45743 ServiceException when stopping the server immediately after a configuration update
PI45777 The configuration schema does not include a default value for the 'optional' attribute on the 'include' element.
PI45942 Creating a new server can result in a server.env file being generated in the wrong place
PI46475 IIOP/CSIv2 may fail to start correctly due to missing UserRegistry
PI46612 Server dump command fails when a Java dump file cannot be found.
PI47138 Default welcome page uses 'Beta' description for supported server
Liberty System Management PI46936 FileTransferMBean.deleteFile(String) may not be able to delete an empty directory on IBM i operating systems
PI47155 File transfer could sometimes fail due to controller deleting the file before the transfer is complete
PI47206 JSONConverter incorrectly de-serializes MBeanServerNotificationFilter
PI47351 If the appSecurity feature is installed no application will start unless SSL and a UserRegistry are configured correctly.
Liberty z/OS PI38734 Add mapped SAF identity to the SMF 120 subtype 11 records
PI38852 z/OS connect in Liberty is not recognizing the mapped RACF userid is a member of a group
PI45470 Abend S478 RC=4 when trying to stop the server
PI45472 ABEND0C4 when running batchManagerZos from a dataset
PI45842 Abend S478 RC=4 when trying to stop the server SP231
Security PI37396 Potential spoofing vulnerability in WebSphere Application Server CVE-2015-4938
PI43224 The authData configuration element needs enhancing to include alias and database in its description.
PI43359 Javadoc relating to isServerSecurityEnabled needs to be updated to apply to its function in Liberty profile
PI43583 Logout fails due to ConcurrentModificationException in high-stress, multi-threaded environment.
PI43768 Remove SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA from the strong cipher list.
PI46545 Add exception to security error message CWWKS1102E.
PI46748 Enabling security through adminSecurity-1.0 may cause Servlets to not configure completely
Systems Management Functions PI41230 Liberty 'collectiveController replicaPort' limits size of port number
PI42819 Collective join or replicate with --useHostCredentials option completes even if host credentials are missing.
PI43401 Incorrect error message when host authentication credentials cannot be retrieved by collective controller.
PI45838 A scaling member logs an FFDC with IllegalArgumentException during server shutdown
PI46378 Collective and cluster member started/stopped state not promptly updated.
PI47142 Improve collectives replica reconfiguration performance by improving internal storage structure in Frappe.
Virtual Member Manager (VMM) PI45051 LDAP: Error code 53 - R000128 Filter is not supported
PI46454 UserRegistry getUsers method does not use LDAP userFilter configuration specified in the server configuration
PI46472 LdapRegistry does not work when the search results cache is defined as <searchResultsCache enabled="true" />
PI53797 Ignore case configuration is not honored in LDAP repository configuration
PI54153 Login fails when ibm-entryuuid attribute value is null for a user
Web Container PI38116 Provide option to not flush internal response objects in FileServletWrapper.
PI41941 Improve error messages SRVE9002E and SRVE8011E
PI42281 Suppress SRVE0255E error message in systemout trace
PI44057 There is an increased performance overhead for users of the SSL feature in Liberty profile
PI44214 getParameter() does not work after getReader()
PI47153 Liberty profile performance issue when using @postContruct and @preDestory annotations in servlets
Web Services (JAX-WS, JAX-RS) PI38723 NullPointerException generated by Apache wink library when processing HEAD requests
PI40556 WebServiceContext is lost, resulting in a NullPointerException
PI42710 javax.xml.bind.UnmarshalException: unexpected element can occur on first request
PI46436 Wrong media type for the response when using JAXRS-2.0
Web Services Security PI44461 Must not call getClob for PostgreSQL
Fix Pack 8.5.5.6
Fix release date: 26 June 2015
Last modified: 22 June 2015
Status: Superseded

Download Fix Pack 8.5.5.6
Component
APAR
Description
Contexts and Dependency Injection (CDI) PI29421 CDI getInjectableReference() is not working as expected
PI36177 PostConstruct method is not called if there is a second method of the same name
PI40778 Nulls are being injected in place of EJBs that depend upon an @resource
PI41728 An inherited qualifier with a value is overridden but the more distant value's ancestor is applied to a bean.
Database Access, Connection Management, Merant/DataDirect drivers PI38333 Cleanup fails with an SQLException for unsupported operations
PI38941 IllegalArgumentException when attempting to configure DB2 data source property keepAliveTimeOut
Dynacache PI36904 Cache provider name description is incorrect and unclear.
EJB Container PI39344 EJB application update time greater than two minutes when server is under load
General PI31734 HTTP response might have multiple Set-Cookie: JSESSIONID headers
PI32026 The message: "BBOA8090E An error occurred during TRUE enablement with reason code 63" is not clear for client self-assist
PI33453 Chunked request might fail to receive all responses caused by delayed last CRLF.
PI36010 Channel framework NCSA access log service time
PI40058 Allow for pre-CDI injections to work for websocket Server Endpoints when CDI is disabled.
PI41780 The server will not shutdown with an active websocket session in use.
IBM i PI35258 server start fails with "Command /QOpenSys/QIBM/ProdData/JavaVM/jdk70/32bit/bin/java not found"
Install V8 and above PI40035 Update licenses for IBM WebSphere Application Server v8.5.5.6
Intelligent Management Component PI34716 Web server server-status page shows STARTED applications under STOPPED servers for Liberty collectives
PI37873 Potential server hangs are possible during server stop when using the scalingMember feature
PI39714 Dynamic routing in Liberty will not work if applications have an empty url-pattern for a servlet-mapping in web.xml
Java 2 Connectivity (J2C) PI39295 IllegalStateException: context is null prevents resource adapter from being stopped
PI40410 WorkContextLifecycleListener not notified of contextSetupCompleted
JavaServer MyFaces (JSF) Apache MyFaces implementation PI38066 Request to Prefix mapping of Faces servlet may return a 500 Error.
PI38898 The jsf-2.0 feature might fail to start with java2security enabled
PI38977 The el-3.0 and jsp-2.3 features should require a minimum of Java SE 1.7.
JavaServer Pages (JSP) PI31922 New JSF applications may fail after deployment if another JSF application is deployed in the server using its own EL parser
PI33328 javax.faces.application.FacesMessage is not serializable
PI37304 Incorrect JSP translation for the expression
PI37485 Comparison between encodings should be case-insensitive JSPG0088E
Liberty Administrative Center PI39293 AdminCenter line graphs plots can get out of sync with the summary field values.
PI39713 Alert panel in Admin Centre's dashboard may not display all alerts.
PI39717 Invisible close button on background task details dialog
PI39718 Misaligned background steps description.
PI39719 AdminCenter graphs do not display when using a browser with a Russian Locale.
PI39991 If the AdminCenter Graphs slow down because of system load, the X axis labels of some graphs can become unreadable.
PI40192 Bidirectional Preference toggle button on Mozilla Firefox browsers doesn't render correctly
PI40419 If edit button is clicked before tools are fully loaded in user's tool box, then there is no remove icon on newly loaded tools.
PI40633 A 400 error code displays in the console when loading Admin Center
Liberty Application Services PI29785 FFDCs with IllegalStateException: Cannot stop from state UNINSTALLED created when Liberty profile server is shut down
PI34959 Artifact SPI in Liberty profile missing classes StructureHelper and ArtifactContainerFactoryContributor
PI38923 Exception logged during server shutdown
PI39795 JNDI Contexts in the java: * namespaces are not serializable
Liberty Debug and Tracing PI38281 During High Performance Extensible Logging mode TruncatableThrowable exception is logged as wrapped exception
Liberty Kernel PI34141 An IllegalStateException may be generated by the com.ibm.ws.classloading bundle on shutdown when unregistering a service.
PI34161 Liberty profile %D NCSA access logging directive does not record the correct elapsed time for a request
PI34201 REST connector can potentially use an invalid endpoint
PI35483 400 bad request error from channel component while parsing headers with trailing white space
PI36907 Nested elements are not merged if cardinality is 1 or -1
PI36912 Updates to nested elements provided by a user extension may not result in a configuration update
PI36944 Nested configuration with unresolved references can have incorrect values
PI36999 An error parsing a file in configDropins will prevent other files in configDropins from being loaded
PI37977 Contextual proxy is not usable until the context service that created it is looked up or injected into an application.
PI37978 Direct lookup of ManagedScheduledExecutorService sometimes returns wrong type.
PI37983 Schema and feature list contain English when locale is set to pt_BR and zh_TW
PI39099 Liberty OSGi SPI JARs do not compile with Java 7
PI39798 Liberty executor can hang when work is submitted outbound over HTTP and back into the same server.
PI40224 Java 8 VM no longer supports MaxPermSize
PI40775 Symbolic links to server directories from Liberty usr/servers directory do not work as expected
PI40819 File permissions too restrictive when WLP_SKIP_UMASK=true specified for Liberty profile server
PI40996 IllegalArgumentException thrown when bootstrap property key is a zero-length string.
PI41012 NullPointerException when installing a corrupt jar file
PI41671 Files with extensions other than XML are read from configDropins
PI42525 Specific application elements may not be removed correctly
Liberty System Management PI37984 Collective deployment fails when using root directories as write paths.
Liberty z/OS PI33798 WebSphere Application Server for z/OS can encounter CML lock contention when under heavy load.
PI37650 UNPRINTABLE CHARACTERS IN SCRIPTS BBGJS2LS BBGLS2JS
PI38709 Server started on z/OS with a started procedure does not place logs into the location specified by WLP_OUTPUT_DIR.
PI38774 Using DFHJSON to format strings with numbers for the data, quotes(") were not placed around the data.
PI38851 Distributed ID not properly mapped when used with WOLA in Liberty
PI39623 Collectives are unable to start servers on z/OS that run as started tasks
PI41507 zosLocalAdapters (WOLA) requests run as the UNAUTHENTICATED user instead of the client user
Security PI28455 UnsupportedCryptoAlgorithmException is not included in com.ibm.websphere.appserver.spi.containerServices_1.0.0.jar
PI34405 Server SSL port is blocked indefinitely when client authentication is used and the truststore is empty.
PI35075 The certificateUtility createSSLCertificte tool does not give a useful message if the keystore already exists.
PI37897 SSL configuration attribute added to the metatype.
PI38712 Enforce the optional nonce parameter in the OIDC Authorization code flow(provider)
PI38713 Enforce the optional nonce parameter in the OIDC Authorization code flow(client)
PI38772 OpenID connect relying party fails when hostname contains "oidc"
PI39322 Fix poorly worded error message that appears when the a keystore fails to load.
PI39325 Allow larger ciphers, 256 bit ciphers, to be a part of the HIGH cipher list.
PI39647 Support JSON array as custom claim
PI41257 The securityUtility tool will not run if only the kernel feature is installed.
Systems Management Functions PI36632 A FFDC java.util.NoSuchElementException was reported on the collective controller by ServerCommandsMBeanImpl class
PI37256 Application ADDED notification being issued during Application removal.
PI38096 FFDC with java.lang.IllegalArgumentException is thrown when removing a member from collectives
PI40358 Concurrent cluster membership changes can result in a member being removed from a cluster.
PI40550 Collective remove command did not handle bad user name correctly
PI40561 Java home for the collective join command is not set correctly in a post join action operation with a server deployment.
PI41251 Removing a running member from the collective does not stop it publishing its state data to the collective repository.
Virtual Member Manager (VMM) PI38554 LDAP filter issues with VMM
PI40564 User filter expressions containing a '!' do not work as expected.
Web Container PI31292 getPathInfo returns a semi-colon for the ";xxxx" appended after the request URI
PI31447 The server adds a /(slash) to the response URI if the inbound request URI has a ;(semi-colon)
PI31622 Privilege escalation with serveservlets CVE-2015-1927
PI38357 Add more details to the WebAppHostNotFoundException
PI38383 Unhelpful message in console.log: Uncaught.init.exception.thrown.by.servlet
PI38782 Add property to initialize the class during Class.forName()
PI39941 Close does not wait for the timeout
PI40414 No access to all org.apache.japser.el classes
PI40416 Unsupported Operation Exception after programmattically added servlet context listener throws an exception
PI40418 WebContainer throws a java.lang.IllegalArgument exception when parsing parameters
PI41465 When HttpInputStream.isReady() is called after that same API has already returned false, an IllegalStateException can occur.
PI41894 A java.io.IOException is not propagated back to a dispatch caller.
PI42283 On an async request, fix the thread context state and transfer the security context between threads.
Web Services (JAX-WS, JAX-RS) PI38077 jax-ws-catalog.xml support for META-INF for WAR module
Web Services Security PI36866 Obtain sensitive information with Apache WSS4J CVE-2015-0226
WMQ messaging providers PI28223 NullPointerException in JNDINestedFrameworkSupport (JNDI lookup)
PI35539 Potential java.util.ConcurrentModificationException when starting OSGi applications within WebSphere Development Tools.

Fix Pack 8.5.5.5
Fix release date: 13 March 2015
Last modified: 11 March 2015
Status: Superseded

Download Fix Pack 8.5.5.5
Component
APAR
Description
Contexts and Dependency Injection (CDI) PI15310 StackOverflow error or NullPointerException occurs under heavy load
PI27526 The @Produces annotation method on class results in a non-null injectionpoint instance on first invocation.
PI30964 EJBs conflicting with listener configuration and CDI events
Database Access, Connection Management, Merant/DataDirect drivers PI28913 DSRA0304E and DSRA0302E messages with cause and exception as null creates confusion.
PI34199 Connection cleanup fails when using an unsupported JDBC driver.
PI34376 Unable to specify empty port number for DataDirect Connect for JDBC and Microsoft SQL Server JDBC Driver
Dynacache PI28515 Dynacache CWWDY1064E or DYNA1064E is written for containsKeyDisk() operation
EJB Container PI27706 Intermittent FFDC of IllegalStateException when stopping a Liberty profile server with a message-driven bean application
PI27924 UserTransaction cannot be used from a CDI instance created within the context of an EJB
General PI17680 SipApplicationSession accumulate after BYE transaction if reINVITE transaction not responded to
PI21665 WebSphere can use the same from tag and via branch in two different requests even if call-id is different.
PI23787 While using the B2bUAHelper the branch becomes longer when the UAS sends the re-Invite. This fix is to shorten the branch.
PI24850 Inbound 412 response not counted in PMI
PI26722 SIP container splits the reason header into two headers due to a comma inside a quoted string
PI27022 Print the levels of CICS modules to allow customer verification
IBM i PI26461 On Japanese IBM i partitions, when console.log exists, server start fails.
Install V8 and above PI31113 Installation Manager requires accepting license terms twice to install the Liberty offering with additional assets.
PI33671 Update legal license for IBM WebSphere Application Server V8.5.5.5
Intelligent Management Component PI32944 Dynamic Routing to some application instances might fail when the application is installed in multiple clusters.
PI33067 Liberty profile server may hang when using the scalingController feature
PI33071 Auto scaling not monitoring host-level cpu or memory usage
PI33123 Intelligent Management enabled WebSphere Plug-in will not route requests for Liberty servers with empty clone ID
PI33124 "dynamicRouting setup" creates JKS formatted keystore instead even when,-keystoreType=PKCS12 parameter is specified
PI33793 Scaling controller does not start a server to meet minimum instances when a host with capacity becomes available
Java Persistence API (JPA) PI16847 Schema setting in the ORM file does not propagate to the generated sequences
PI18178 NullPointerException in QueryKey.createKey using criteria with QueryCache enabled
PI19732 First JPQL with left join fetch for lazy loaded specified and data cache enabled. Subsequent does not get loaded.
PI20433 JPA pagination is not working
PI24575 Use of JoinColumn targets to another JoinColumn key exposed as an attribute will cause a ConstraintViolation exception
PI26049 OpenJPA PersistenceException: LongId cannot be cast to <class name>
PI35626 ApacheValidationProvider class not found when using third party packages that utilize Bean Validation.
JavaServer Faces (JSF) SunRI implementation PI29457 The jsf-2.0 bundle is unnecessarily declaring the org.apache.commons.logging.impl package as API.
JavaServer MyFaces (JSF) Apache MyFaces implementation PI27290 Multi-window usage with server-side state saving throws a javax.faces.application.ViewExpiredException
PI30335 Dependency injection of a JSF ManagedProperty comes after a @PostConstruct on Liberty Profile
JavaServer Pages (JSP) PI24001 The JspWriterImp is not properly cleaning up resources in memory after a request completes.
PI29973 Log the value of the jdkSourceLevel attribute used by the JSP container
PI30519 Issue with duplicate JSP attributes
Liberty Administrative Center PI33313 Screen scrolls down to the bottom while typing in the input fields in deploy tool
PI34787 Wrong message when deploying server package file located on the collective controller in Admin Center
PI34806 Extra line shown in browser when going from the toolbox to any tool
PI34808 Can not display server's actual status, always displays a straight line on monitor panel on Microsoft Internet Explorer
Liberty Application Services PI26941 Installing and uninstalling an application many times will cause OutOfMemory
PI27843 Deleting and re-adding the same zip application to the dropins folder can result in an IllegalStateException.
PI30922 The server does not automatically restart a running application after annotation-based metadata has changed
PI31351 The description of the autoStart attribute on the application config element is misleading.
PI33384 Value of context root configuration is silently ignored when not applicable
PI35537 Inability to resolve JSP modules due to incorrect internal feature dependencies for javax.jsp
Liberty Debug and Tracing PI35310 Timed Operations which are not available are displayed as null.
PI35314 isAnyTracingEnabled should evaluate object as a precondition then the primitive boolean type.
Liberty Kernel PI20344 Liberty embedded server writes .cache files to the incorrect location
PI28126 NullPointerException or IllegalArgumentException thrown during runtime class scanning or class weaving.
PI28337 FFDC error when updating configuration to remove a feature
PI28560 Add httpDispatcher property to control padding of a 404 message.
PI28985 WDT show "base instance from which to inherit context" under the main "Thread Context Propagation" section.
PI29210 ManagedServiceFactoryTracker/BundleContextImpl throw IllegalStateException when server is being stopped
PI31002 Error deleting configuration for context service
PI31143 The default executor of a WebSphere Application Server Liberty Profile server can deadlock in rare cases.
PI31247 Server takes 5% longer to start after moving the Liberty profile wlp install directory.
PI31531 Invoking the 'server' script from a shell with the CDPATH environment variable set may fail.
PI31565 If users use a script to run multiple install actions, they may not know which messages are for installing which feature.
PI32074 NullPointerException in thread pool code occurs during server shutdown
PI32690 Using symbolic links to applications outside of the WLP install directory could result in an IllegalStateException.
PI32778 Feature jca-1.6, jms-1.1, and mdb-3.1 cannot be installed from offline local directory
PI32942 Websocket client code can miss processing incoming data that is received immediately after HTTP upgrade response headers.
PI32943 Spurious FFDC reporting javax.management.InstanceNotFoundException
PI33015 Applications containing symbolic links do not always restart when the linked content is changed.
PI33376 Server shutdown hangs when using the sessionDatabase-1.0 feature
PI33526 collectiveMember-1.0 exposes third-party JAX-RS APIs
PI34128 When Liberty profile starts from a cached state the logs do not indicate the features that are installed.
PI34335 Incorrect lookup of provisioned public Liberty profile features
PI34797 A CWWKG0074E error message might be unnecessarily generated when certain server.xml elements are not properly configured.
PI34969 The SPI package com.ibm.wsspi.http references non-SPI types.
Liberty System Management PI32646 Structure of collective repository has changed in fix pack 8.5.5.4
PI34002 Unable to invoke file transfer operations on paths terminating with slashes on collective host
Liberty z/OS PI20582 Application attempt to do authorization with SAF fails w/error code of 03008XXX (if SyncToOSThread is enabled)
PI26263 The OLA load modules shipped by z/OS Connect Liberty Profile V8.5.5.2 are not compatible with same modules in WAS 8.5.5.2
PI26630 Liberty Profile on z/OS supports LDAP but does not propertly map LDAP identities to SAF-based Ids
PI26950 Message "IRR012I Verification Failed. User profile not found"
PI27338 Wildcards are not allowed in service URLs for z/OS Connect on z/OS Liberty
PI29459 Storage leak of ACEE objects in native storage when using zosSecurity-1.0 with certificate authentication
PI29823 Excessive contention of the MVS local lock is seen when using WOLA in WebSphere Application Server for z/OS Liberty Profile.
PI31147 Requests fail when Driving requests through z/OS Connect using data transformation.
Performance Monitoring Tools PI31214 ServletStatsMXBean is reporting errorneous data when thread terminates.
Security PI27787 Cannot encode password with leading/trailing spaces
PI27898 JaasLoginContextEntries with same name causes wrong behavior.
PI31523 NullPointerException when specifying both OAuth20Mediator and DataSource in oauthProvider
PI31809 CWWKE0701E when security ID value is null
PI33008 Privilege escalation with IBM WebSphere Application server Liberty profile
PI33281 Making the information returned by the certificateUtility to include the SubjectDN the certificate was created with.
PI33357 Privilege escalation vulnerability with Run-as user for EJB
PI35581 Possible performance degradation when doing programmatic login.
Systems Management Functions PI30931 Avoid creating member node path when cluster name is empty or null.
PI30985 On Z/OS environment, ServerCommandMBean failed to make remote connection as it used wrong encoding when is reading ssh key.
PI34003 Under some conditions, a request to the CollectiveRepositoryMBean exceeds a time out and results in a null pointer exception.
PI34011 After recovery from a failure Collective Repository Report: not ready
PI34012 Collective controller unable to establish a TCP connection with its replicas
PI34184 Adding or removing an application does not always reflect the correct final state of the application.
PI34417 Message CWWKX8000E can be erroneously logged when a collective member loses its connection to a collective controller
PI34486 Under extreme load, the controller cannot service all of the incoming http requests.
PI34573 java.io.IOException: The filename, directory name, or volume label syntax is incorrect
PI34796 Add National Language Support (NLS) for the default post transfer action.
PI34982 Provide backward compatibility for admin metadata publishing
PI35001 Repository monitor could not get service from repository member
PI35166 Prevent a multi-replica collective controller replica set from reaching an inconsistent state in the data under rare conditions.
PI36241 Server package deploying using host credentials failed with an ArrayIndexOutOfBoundsException
Virtual Member Manager (VMM) PI27333 Property case sensitivity is not handled properly in search expression.
Web Container PI15886 An invalid cookie name causes an IllegalArgumentException to be thrown.
PI23529 ServletConfig returns null on empty mappings list
PI26908 Error page handling is broken when the web application is CDI enabled.
PI28910 ServletRequest.isAsyncStarted() incorrectly returns false on a thread after AsynContext.dispatch() has been called.
PI29275 A java.lang.NullPointerException occurs when attempting to add a listener programatically that does not exist.
PI29820 Liberty profile SSL client certificate authentication does not work with IBM HTTP Server
PI31038 An IllegalStateException is thrown on calling setWriteListener when getOutputstream is called from the readListener.
PI31717 ServlerResponse.flushbuffer() does not work correctly.
PI34052 When running an upgraded request the application can not run a JNDI lookup.
PI34145 Do not Invoke onAllDataRead() once onError() is called from ondataAvailable()
PI34857 Need Plugin log file location as part of server.xml pluginConfiguration stanza
Web Services (JAX-WS, JAX-RS) PI22432 java.lang.NullPointerException in JaxWsInjectionMetaDataListener interface
PI27318 Applications using Apache Wink on WAS Liberty generate spurious ICH408I messages noting insufficient authority for guest user ID
PI30173 JAXRS1.1 declares 2 APIs and 1 SPI, but the packages are not encountered at runtime.
PI31063 There are no jars for javax.wsdl.* packages under the dev folder, although they are declared as spec API in the jaxws-2.2.mf.
PI33107 Upgrade Apache http client to the latest version 4.3
PI33130 @HandlerChain annotation can not work with @WebServiceClient annotation
PI33206 Liberty profile wsdlLocation attribute not working together with jax-ws-catalog.xml
Web Services Security PI32329 Access token not deleted in database when using custom mediator class
PI32912 ResourceOwnerValidationMediator.init() is never invoked
PI33202 Potential privilege escalation with OAUTH2
WMQ messaging providers PI19361 Application server failed to start because transaction recovery failed
PI29167 EBA start issue due to OSGi framework NullPointerException in Liberty Core
PI34587 XmlPullParserException when Liberty profile is configured with a local bundle repository
Fix Pack 8.5.5.4
Fix release date: 8 December 2014
Last modified: 4 December 2014
Status: Superseded

Download Fix Pack 8.5.5.4
Component
APAR
Description
Contexts and Dependency Injection (CDI) PI18530 Interceptors are ignored on generic methods defined in an interface and then overriden in a subclassi
PI25563 CDI issue is observed when an application is deployed with ScheduledExecutorService scheduled tasks
PI26680 CDI application gets error: passivation capable beans must satisfy passivation capable dependencies
PI32674 On extremely rare occasions a concurrent modification exception may be thrown during resource injection.
Dynacache PI24250 Error appears in message log using WebSphere Development Tool (WDT) generated cachespec.xml.
PI28117 Message observed message.log DYNA0044E: XML parsing warning: cvc-elt.1 when using a WDT generated cachespec.xml
PI28487 Apichk errors in distributedMap-1.0 and webCache-1.0
PI28503 distributedMap does not inherit properties of baseCache
PI28507 ExternalCacheGroup does not work in distributedMap-1.0
PI31235 Dynacache does not delete OSGi configuration of application defined caches when the application server is stopped.
PI31236 Web caching does not support cachespec.xmls generated by WebSphere Developer Tools (WDT)
EJB Container PI23290 EJB sessionContext.getCallerPrincipal() call not working in asyncbeans
PI25789 Reference binding fails for a service that implements an interface but does register it
PI25888 EJB container error scenarios should be improved
PI26025 Reference and injection error scenarios should be improved
PI31041 Adding an activationSpec or admin object for a started MDB fails intermittently
PI31045 persistence.xml fails if property names contain leading or trailing whitespace
PI31046 Extended persistence contexts are not joined to container-managed transactions
IBM i PI26623 server start status message is missing process Id on the IBM i platform
Install V8 and above PI28168 Update license notices files for Liberty Profile
PI31174 Improved the warning messges for invalid features that fail to be installed using the featureManager command.
Java 2 Connectivity (J2C) PI28115 Resource adapter installation is aborted prematurely during shutdown, leading to other problems
PI31210 Applications can be started before connection factories and administered objects from standalone resource adapters are ready.
Java Persistence API (JPA) PI28881 Some l10n feature names are missing information
JavaServer Faces (JSF) SunRI implementation PI25638 JSF MyFaces WebSocket issue
JavaServer MyFaces (JSF) Apache MyFaces implementation PI27409 JSP and JSF TLD jar Export-Package and Version Issues
PI32405 An UnsupportedOperationException will be encountered when initializing an eager application-scoped JSF ManagedBean
JavaServer Pages (JSP) PI12666 Getting the IllegalStateException: component with duplicate id message when using the shipped MyFaces 2.0
PI18404 The JSR 303 implementation of BeanValidation cannot be configured as expected.
PI18025 JSPG0046E: Unable to locate tagfile
PI25445 A performance degradation can occur under heavy load for applications using the EL
PM81849 Issue with JSP tag file compiled into invalid package/class name
Liberty Application Services PI20988 Problems when running the server package command
PI23168 java.lang.ClassNotFoundException in data sources after upgrading to Liberty Profile V8.5.5.2
PI24221 Application name or module filename containing the # character fail unexpectedly
PI24783 Setting classloader delegation mode to parentLast can result in JNDI lookup failures
PI25838 Application archive errors are unclear
PI26102 The javadoc for the com.ibm.wsspi.resource package is missing
PI26149 FileNotFoundExceptions when file paths include spaces.
PI27080 Message with prefix CWWKC0044W may be missing an insert.
PI27366 Need to throw NameNotFoundException for invalid names for parity with full profile
PI27414 Javadoc needs improvement
PI27693 Javadoc changes to make methods use correct list structure
PI28245 StateChangeException: CWWKS9110E when changing application deployment
Liberty Debug and Tracing PI20149 Access logging shows incorrect time taken to process the request
PI20363 Error message enabling trace specification in runtime even though the trace specification is valid.
PI21485 StackOverFlowError or Infinite loop using HPEL logging.
PI26064 Logging needs to be improved
PI26811 Logging of Throwable parameter for which getStackTrace() returns null fails
PI26813 When e.printStackTrace() is called, the output can be missing some lines of user code
PI27085 Expose logging SPI
PI27291 Binary log attribute cleanup
PI32852 HPEL API not visible from applications
Liberty Kernel PI22215 Liberty profile server uses excessive CPU when TCPIP is stopped
PI25220 Need improved messages for common parsing failures
PI25283 Potential hang in server stop
PI25294 Port listeners can be restarted twice when configuration is updated
PI25376 Versioning of repository content does not work so any breaking changes to the data will break old clients
PI25530 Error message when you try to install a feature from the Liberty repository does not indicate the first failure
PI25861 Path arguments to the featureManager tool are always relative to install directory
PI25863 Errors in command-line utilities
PI25869 Incorrect processing of configuration elements in the server.xml configuration file
PI26034 Toleration for java 7 and 8
PI26041 Kernel programming interfaces should be improved
PI26048 Kernel error scenarios should be improved
PI26065 The server command needs to be improved
PI26079 The handling of MIME types needs to be improved
PI26810 NullPointerException in HandlerHolder line 240 during server shutdown
PI27073 ProductUtility validate outputs errors multiple times
PI27210 Deployment of a large application with very detailed trace enabled may cause a tracing loop
PI27213 Running the ws-productutil.jar version command on z/os results in a missing property error.
PI27294 NullPointerException in ConfigSigner
PI27296 Minifying an empty server and installing an ESA feature causes a NullPointerException
PI27299 RuntimeException: Invalid call to WsByteBuffer method. Buffer has already been released.
PI27413 Liberty profile steals focus on Macs
PI27415 Unable to find out which configuration attributes can be overridden by variables
PI27418 Workarea paths too long
PI27431 Avoid extraneous warnings and errors during configuration processing
PI27558 Tolerate Equinox osgi.clean property
PI27697 Intermittent IllegalStateException in AtomicServiceReference
PI27702 IllegalStateException in FeatureManager
PI27737 Server dump does not include shared configuration files
PI28120 Private features are allowed to be included by features from different Liberty profile product extensions.
PI28124 Application reports java.io.IOException: Exception in opening zip file,
PI28125 OSGi application can fail to start with java.lang.Exception: ORPHANED,
PI28154 Insufficient error messaging for ServerLock waitForStart()
PI28265 Intermittent exceptions in org.apache.felix.scr.* classes
PI28380 Need improved error messages for file permission problems
PI28382 Liberty profile server incorrectly allows 2 data sources to be configured with the same JNDI name
PI28546 Suppress erroneous error messages during server shutdown
PI28547 NullPointerException in ThreadPoolController during server shutdown
PI28551 Default landing and some error pages provided by the server load slowly.
PI28776 Fix several kernel issues
PI28780 Incorrect class name in error reporting from DynamicVirtualHost
PI28880 NullPointerException during shutdown while updating features
PI28894 Liberty embedded server fails to notify the user if the server fails to start
PI29008 Feature display labels are translated into local language
PI30972 ClassNotFoundException: com.ibm.ws.kernel.productinfo.ProdctInfo when using featureManager
PI31047 The install directory cannot contain a plus sign
PI31059 The server start command sometimes uses jvm.options for non-server processes
PI31165 java.util.concurrent.RejectedExecutionException when default executor is dynamically updated
PI31266 CWWKE0701E java.lang.ExceptionInInitializerError thrown from [com.ibm.ws.http.internal.VirtualHostImpl((79)]
PI32649 Auto features that required an iFix were not previously installed by the featureManager install command but now are
Liberty System Management PI28128 Pax archives not supported in file transfer upload through a collective
Liberty z/OS PI19688 Outbound service from WSAS to CICS via WOLA hangs
PI23547 When REU=Y some requests to override a link succeed when all should fail
PI24444 WebSphere WOLA API calls failing with abend BBOX in CICS for CICS TS 5.2
PI24692 The WOLA three-part name allows mixed case while the CBIND class profile they must match requires upper-case
PI26809 java/lang/StackOverflowError with loop in ntv_mapDirectByteBuff
PI27687 java.lang.IllegalStateException: Native service for RRS transactional support is not active or available
PI28915 CWWKB0227E message should be more accurate
PI30941 An FFDC reporting a CTX4SWCH RC=368 is generated during server shutdown.
Messaging Providers PI28278 Enabling Messaging Security may cause com.ibm.websphere.sib.exception.SIResourceException: uniqueUserId is null
PI28473 Fix usability defects in JMS
Performance Monitoring Tools PI28558 Monitor attribute cleanup
PI28567 Application deployment occurs before all the system bundles are started while removing the monitor-1.0 feature
PI28572 When SUN Java is used for Liberty server, the processCPUUsage metric doesn't report the right CPU usage
PI32796 ClassNotFoundException occured while querying monitoring data with traditional PMI Mbean (Perf MBean)
Plug-in PI27023 Intelligent Management enabled WebSphere Plug-in stops routing after an application is removed and added.
Security PI08268 Information Disclosure in WebSphere Application Server
PI17688 WASReqURL cookie might be overwritten if multiple login processes are performed
PI17836 CWWKS4106E: LTPA configuration error when setting keysPassword in the server.xml,
PI25808 Principal names or unique IDs containing special characters are not handled properly
PI25813 Fix double-encoding of "state" parameter in OAuth flow
PI25819 Parameter order should not matter for securityUtility command line tool
PI25834 Exception could be thrown getting user registry during shutdown
PI25843 Cancel button on default OAuth/OpenID Connect consent form pages does not work
PI25853 Possible race condition could prevent access to keystore
PI26165 The periodic Authentication Cache cleanup stops under certain OSGi DS timing conditions
PI26166 Improvements to Javadoc accessibility for security SPIs and APIs
PI26513 Change to make sure the RC4 ciphers are not used by default.
PI26514 Improve the processing of multiple SSL configurations
PI26947 User registry updates: Add getUsersForGroup method, do not require a user registry with appSecuirty-2.0 feature
PI26962 NullPointerException from security collaborator
PI27195 Intermittent SSL problem where the keystore information seems to be missing.
PI27775 Remove unnecessary FFDC data while stopping the user registry
PI27778 Support Japanese CP1399 codepage on z/OS
PI28061 Add an option to track logged out LTPA tokens on a server so they can not be used login on that server again.
PI28127 A Trust Association Interceptor cannot commit an HTTP servlet response to send a redirection
PI28264 Expired tokens not cleaned from the token cache
PI28371 Fix issue with OAuth/OIDC consent no longer being cached
PI28395 User registry service is not ready for service and it causes creating the LTPA key to fail
PI28432 Fix NPE during authorization.
PI28600 Warning message CWWKS9112W may flood the logs when a security-role does not have valid run-as configuration
PI29911 Potential Information Disclosure with Liberty profile servlets
PI31385 Meta type is wrong for token limit per user and client
PI31388 The OIDC and OAuth response on HTTP needs to be URL Encoded
PI31396 An OAuth error message was hard-coded and did not exist in the message file
PI31415 No message indicating OAuth endpoint service has started/is ready
PI32465 Inconsistent behavior when OAuth20 configuration contains more than one identical filter.
Session Initiation Protocol (SIP) Container PI10457 Allow configuring response code when a non-confirmed session is invalidated
PI14132 SIP container does not handle error case where a UA uses the same to-tags in different responses.
PI17820 SIP custom property dip.no.route.error.code is ignored if the application is down
PI18729 SIP transaction is not being destroyed when application is un-deployed because of a timer
PI20221 SIP container removes data from reason header if it contains white space
PI20350 Unable to add Require: precondition to reliable 18x response
PI20505 Negative PMI counter
Systems Management Functions PI26676 Collective messages improvement
PI26678 Singleton service fixes
PI26826 Resolved multiple Frappe service registry and utility problems
PI26840 Resolve multiple collective repository test failures
PI26843 Resolve multiple collective member test failure problems
PI26848 Failed to remove cluster member
PI26855 Resolve multiple collective replica problems
PI26858 Security utility writes XML files using default charset without XML declaration
PI27277 Collective MBeans better report errors that occur when dependent services deactivate while in use.
PI27588 Remote file transfer via collective controller not working with backslash path on Microsoft Windows
PI28123 Extra information in log file
PI29528 Wrong cluster member is being removed during startup of a different cluster member within the collective.
PI31359 Resolved multiple Collective replication service issues
PI32466 Resolve multiple collective repository issues
PI32474 Resolve multiple collective singleton issues
PI32622 Failed to deploy zip to a remote host
Virtual Member Manager (VMM) PI25203 Propagation Login via external LtpaToken2 cookie does not create correct SecurityName when using Custom LdapRegistry
Web 2.0 and Mobile Toolkit PI24470 Update to IBM Dojo Toolkit (idt) version 1.10.0
Web Container PI08280 Tag file is not found in loose configuration deployment
PI20210 Request's parameters can be modified by the application (via string object modification).
PI20514 If servlet init() method throws an exception then the remaining servlets in the web module are not initialized during startup.
PI22830 404 not found error generated for a request without trailing slash
PI24225 The servlet name was not output in the SRVE8500W message.
PI25531 FFDC might be thrown by a filter when the server is shutting down
PI25625 com.ibm.ws.webcontainer.webapp.WebApp.handleRequest NullPointerException
PI26080 The configuration attributes for HTTP sessions should allow duration strings
PI26812 ServletContext.getServerInfo() doesn't return version
PI26852 Untranslated messages in the severe trace points
PI27348 An empty string "" as the URL pattern of a servlet causes an unwanted 302 redirection and an exception
PI27361 WebContainer Objects get nullified before final use, resulting in a NullPointerExceptions
PI27362 The expected java.lang.IllegalArgumentException is not thrown when <distributable> element is added to web.xml
PI27372 Call to getRequestDispatcher inside Filter init method causes an exception
PI27373 General changes and updates to com.ibm.ws.webcontainer-8.0's metatype-mbeans.properties
PI27556 Use of incorrect names in references in web.xml cause a NullPointerException
PI27557 NullPointerException when there is an active request and the server is shutting down
PI28404 Unable to generate a plugin-cfg.xml file when there is no http port declared in server.xml
PI28603 ServletRequest.getRequestedSessionId() returns null for a client created jsessionId.
PI31004 Cannot delete JSP using REST call
Web Services (JAX-WS, JAX-RS) PI22648 PreDestroy method is not being called when class is to be destroyed
PI26093 Info center documents use of LtpaAuthSecurityHandler, but we don't have this class available when using JAX-RS 1.1
PI26609 The com.ibm.websphere.appserver.thirdparty.jaxrs_1.03 bundle can't be resolved when loading jars under dev folder
PI26611 If there are multiple path parameter in a resource method, there is only one path parameter generated in its corresponding wadl
PI27070 Support third-party JAX-RS providers when jaxrs-1.1 feature is configured
PI28137 Redundant error message might be displayed if user defines different URL mapping in web.xml for webservice endpoint.
Web Services Security PI26957 Cannot resolve com.ibm.websphere.appserver.thirdparty.wssecurity_1.0.1 bundle when using only wlp/dev directory.
PI26959 Cannot read local cache file used in web services security configuration
WMQ messaging providers PI12571 WorkCompletedException occurs when importing transaction via JCA
PI16613 NullPointerException in FFDC coming from RecoveryManager.preShutdown
PI19445 OSGi EBA applications intermittently fail to resolve
PI25862 The osgi.jpa-1.0 feature is inexplicably superseded
PI26314 Various small bug fixes related to OSGi Applications
PI28889 Transaction log is created in the wrong location
PI28983 XAFlowBackControl L3 diagnostic facility enabled in Liberty
PI33257 Revised com.ibm.wsspi.uow javadoc to document new override of runUnderUow method on UOWManager
Fix Pack 8.5.5.3
Fix release date: 18 August 2014
Last modified: 12 August 2014
Status: Superseded

Download Fix Pack 8.5.5.3

APAR Description
PI05046 No thread pool stats MBean available when checking the MBeans thru JConsole
PI05668 Bottom-up web services fails to generate the WSDL on the Mac using Java 1.7 hotspot 64-bit
PI06904 Issue with JSF and WSRP
PI07204 VerifyError JVMVRFY012 using OSGi applications
PI08569 404 happens intermittently in Portal/WCM
PI09148 Redeploying OSGi apps without restarting generates a ClassCastException
PI09474 Default webapp error page is not provided
PI09594 Potential Information Disclosure with Exception handling
PI09596 NoClassdefFoundErrors for a particular JSP servlet. Causes permanent failure of loads
PI09875 Not all JVM javax packages are available to applications
PI09896 SRVE0288E appears at server startup
PI09981 Explicitly configured RDN properties are not retrieved for users during login.
PI10102 Subsystem-content with type=file in product extensions does not resolve relative to product extension location using with minify
PI10300 Honor the searchTimeout property for login
PI10769 AJAX form update with PrimeFaces 4.0 not rendering correctly
PI10792 OpenJPA FetchJoin does not always get the correct result.
PI11018 FileTransferMBean.deleteFile(String) method cannot delete an empty directory as documented in the javadoc.
PI11348 CWWKS3002E message might be logged while switching user registry.
PI11393 UIComponent.findComponent ignores overridden method findComponent of a NamingContainer.
PI11569 NullPointerException from a JSF MyFaces implementation
PI11628 OptimisticLockException may occur when JPA application uses Timestamp in @Version field
PI11642 CWWJP9992E: openjpa.Enhance: Error
PI11738 Spring load time weaving does not work with Liberty profile.
PI11788 Blueprint bundles using JPA fail to start.
PI12201 Application is redirected to HTTPs port of the applicaton server instead of IHS server port when confidential is set
PI12245 Inserting facets causes IllegalStateException
PI12399 Liberty server productInfo validate script fails after interim fix is installed
PI12496 EmptyStackException when accessing an Instance that is created by a producer method that has an InjectionPoint as parameter.
PI12546 Setting com.ibm.ws.logging.console.log.level=off still results in one line of output
PI12549 When JAVA_HOME environment variable is set, Liberty Profile server will not start
PI12737 OpenJPA runs superfluous select statement when calling EntityManager.persist(..)
PI12939 JSP gets re-compiled redundantly if the owner of the JSP class is different than server id that runs the server.
PI13004 Serviceability apar to enhance dynacache tracing.
PI13207 Transactional listeners added too late to observe begin event
PI13291 NullPointerException generated when trying to get a file with spaces using getResourceAsStream()
PI13560 Problems updating an application after a bad EBA has been installed
PI13592 Server start fails to create default server on IBM i
PI13616 OpenJPA-2286 ArgumentException: Attempt to compare incompatible types.
PI13641 The secure JFAP chain does not start on time
PI13914 java.sql.SQLException when performing a JPA query
PI14007 Persistence unit defaults are ignored when there is more than one "mapping-file" element in persistence.xml.
PI14034 Problem handling CDI interceptors
PI14205 Prevent NullPointerException during WebApp shutdown
PI14236 Deliver common install for Liberty profile repository features
PI14290 Remove temporarily deployed artifacts
PI14316 Liberty Profile restConnector does not release file handle after a file upload
PI14340 No option to set Secure attribute for WASPostParam cookie
PI14458 Quick restart of a Liberty Profile server results in port already in use error condition on Linux
PI14513 Parent naming-container not reflected in client-id
PI14544 Blueprint application startup deadlocks when using a bean for a reference-listeners and the bean uses the reference
PI14746 Memory leak in J2C PoolManager due to reaper alarms not being cancelled.
PI14747 Parsing of ibm-web-ext.xml might fail using some XML parsers
PI14841 z/OSMF V2R1 generates spurious ICH408I messages on user login
PI15121 Liberty Profile is locking certain war files on Microsoft Windows preventing the undeploy process.
PI15289 Issue with validation of strings with escaped commas
PI15291 The package command fails with message CWWKE0070W indicating an invalid loose configuration file.
PI15496 A join operation halts when the resouces/collective directory exists, but is empty.
PI15513 No default charset is specified for a post transfer join action
PI15549 Invoking isClosed() on native JDBC connection results in NullPointerException
PI16286 Controller flight recorder missing from server dump
PI16375 UnrecoverableKeyException: Cannot recover key: Invalid password for file
PI16382 CertificateUtility tool does not provide a parameter for the user to set the key size
PI16432 REST connector error "Argument type mismatch" when using CompositeData with byte []
PI16626 Basic authentication requests fail in Liberty Profile
PI16652 Configuration support needed for z/OS Connect
PI16667 Resource adapter stops immediately after it is started.
PI16669 Liberty sets incorrect product registration values when running in CICS
PI16677 z/OS local adapter support is missing
PI16678 Abend 0C1 reported in Liberty Profile V8.5.5 when trace on and zosSecurity enabled.
PI16718 java.lang.StringIndexOutOfBoundsException occurs when starting OSGi applicationn
PI16751 Help for "collective addReplica" does not explain "endpoint"
PI16845 Install time for resource adapter or start up time for application is not formatted correctly for some languages.
PI16961 Memory leak will occur for JAX-WS managed client if using ibm-ws-bnd to customize properties
PI16987 Memory leak when WAB bundles are stopped and restarted
PI17042 Unable to customize unique ID attributes for LDAP servers
PI17233 The output of the --createConfigFile option for the collective command should use a variable rather than an absolute path.
PI17246 The MBean information stored within the collective repository does not remove stale data across a restart.
PI17399 The initial state of a joined or replicated server is not set for a new server registered to the collective.
PI17457 Javacore file is packaged into the server dump in an incorrect encoding.
PI17600 Collective members are unregistered unexpectedly.
PI17624 The Apache foundation's CMS migration required modifying the xml schema namespace for OpenJPA extended ORM documents..
PI17634 Liberty server may hang when using the AdminCenter.
PI17830 Changing the configuration of shared libraries can result in NoClassDefFoundError or ClassNotFoundException
PI17879 Liberty generateClusterPluginConfig operation creates a plugin-cfg.xml file with extra entries that are not need
PI18177 Add additional check in session manager to remove incorrect cloneIds if HttpSessionCloneId property is set.
PI18279 z/OS local adapter support is missing
PI18352 VMM makes too many LDAP JNDI calls with ibm-allGroups configured.
PI18357 Add serviceability message to indicate missing login page or error page for form login
PI18437 Failure to switch RRS context onto thread
PI18467 binaryLog command missing expected results on filtering based on IncludeMessage filter.
PI18548 SSL context gets changed during execution of application, causing handshake issue between servers
PI19025 ClassNotFoundException in Liberty Profile when traditional PMI is enabled
PI19123 The output of ws-schemagen.jar is incorrect for some child elements.
PI19130 Server package command does not handle relative paths gracefully
PI19143 Plugin config generation fails when no applications are defined
PI19277 z/OS Connect service configured serviceGroupingName entry is missing from SMF 120 subtype 11 records.
PI19790 NullPointerException during a z/OS Connect's attempt to access HTTP request data after the asynchronous request timed out.
PI19830 Provide stack trace in FFDC when response already committed (SESN0066E) scenario occurs.
PI19831 Applications fail to start when running Liberty servers in embedded mode without the java agent.
PI19843 getUserDisplayName is not returning the correct result per the configured attribute for user display name
PI19845 Stop time for server is not formatted correctly for some languages.
PI19901 On a restart the controller can end up in a bad state and not be able to start up.
PI20025 A server package deployed through admin center deploy uses the host's default name, and not the deploy target host name.
PI20027 No MBean exists to identify which Liberty server is being used.
PI20170 Improve error message for installing wrong edition feature
PI20176 Admin center explore visual representation improvements.
PI20910 java.lang.IllegalStateException: BundleContext is no longer valid when undeploying application
PI21284 Weaker than expected security when installing features with Liberty Repository
PM96440 Bad login performance for the user if its is member of more number of groups.
PM98767 When using Data-Direct Connect JDBC Driver for Oracle, the connection cleanup fails
PM98768 Using CustomDataStoreHelper, TestConnection operation on Network Deployment edition fails with exception
PM99129 Injection of datasource into CDI bean does not work correctly
PM99163 A tag file is not found when an application is deployed with the option "Run server with resources within the workspace"
PM99381 WSAT transaction failed when using JDBC and JPA together



Fix Pack 8.5.5.2
Fix release date: 28 April 2014
Last modified: 25 April 2014
Status: Superseded

Download Fix Pack 8.5.5.2

APAR Description
PI11264 Files without group write permission when installing from a group mode installation manager on z/OS
PI05059 Fail to login to an application with SSLHandshakeException
PI05139 Support certificate authentication to fail over to a form base logon
PI05324 Potential Security vulnerability with JavaServer Faces (JSF) 2.0
PI05359 Tag attribute creates unnecessary string objects
PI05419 FeatureUpdate failure in zos Liberty profile
PI05509 Change description of maxConcurrency property to convey more details
PI05525 StringIndexOutOfBoundsException thrown when URI is not normailzed
PI05575 java.lang.NullPointerException may be thrown from the JAXB unmarshaller under load.
PI05661 Potential Cross-site scripting vulnerability on OAuth
PI05673 OpenJPA persistence.xml parameter roundTimeToMillisec causes cut-off of milliseconds in dates
PI05703 Race condition in Liberty profile server on z/OS
PI05749 Application resources are shut down before the application when shutting down a Liberty profile server
PI05837 @Inject into non-CDI managed instances can intermittently fail
PI05940 Liberty profile fails to package core dump on Linux
PI05956 Provide an option to disable running of 'ALTER SEQUENCE ... INCREMENT BY' statement for sequences
PI05977 EJB-in-WAR injection (JAX-RS) causes a ClassCastException
PI06080 CDI application fails to start with WebBeansConfigurationException when a decorator bean class
PI06211 Liberty Profile on IBM i does not properly load classes via a symbolic link
PI06340 An applied interim fix is not detected and is not available at runtime.
PI06613 A controller in a multiple-controller replica set fails to start. It never produces the 6011i message.
PI06687 The initial placeholder configuration is not canceled resulting in an unneeded file in the controller's fdb directory.
PI06699 The collective utility gives incorrect directions when a controller is replicated more than once to the same server.
PI07519 Criteria API creates INNER JOIN instead of the expected LEFT OUTER JOIN
PI07608 JSF MyFaces NavigationHandler throws a NullPointerException if current ViewId is null
PI07636 Error changing server application publishing option from loose to non-loose config when using Oracle JDK causes failure.
PI07726 Unclear error message when authentication data fails for JMS activation specification.
PI07811 Cannot use SSL termination
PI08109 When servlets are running premature deactivation of DataSourceService causes hangs and app restart
PI08267 Potential denial of service with XML parser
PI08333 The generated report message for timed operation need to be updated
PI08354 Timed operation junk collection
PI08401 Liberty Profile does not find the applications HandlerChain.xml file
PI08455 Running collective join in a non-English language the signer trust prompt doesn't accept the non-English confirmation options.
PI08462 Incorrect misleading error message output when installing Liberty Profile extensions archive on a incompatibly licensed Liberty install.
PI08476 Common install kernel for WebSphere Liberty profile repository
PI08496 Support for disabling the console bundle with Liberty profile on z/OS (Liberty/CICS)
PI08641 java.lang.ArrayIndexOutOfBoundsException when using restConnector.jar
PI08871 Support installing artifacts from WebSphere Liberty profile repository
PI08874 Conversion errors from JMX REST connector
PI09183 Allow container managed authentication for database session persistence
PI09206 Some ESAs have an empty line in the OSGI-INF/SUBSYSTEM.MF file which causes extended content installation to fail
PI09253 Third party security integration in Liberty profile server on z/OS
PI09492 500 error occurs if serializing a cache object to persist to disk fails.
PI09651 NullPointerException from LogViewer command
PI09696 Self-extracting jar created using 'server package --include=usr' fails with error Failed to find license agreement files
PI09715 Should be able to set up ISA DC whereever you want when installing Liberty core.
PI09925 Port conflict message is not generated on Liberty profile collective controller
PI09972 Cannot enable timedOperations report dynamically
PI10049 Base enablement for JCA support
PI10103 Support Certificate authentication to fail over to a Form Base Login
PI10134 Potential Information Disclosure
PI10294 JSP compile errors due to regular expressions
PI10340 Restore com.ibm.ws.session.service.SessionManager interface
PI10342 There are permission errors when accessing resources in the server's workarea directory using application syncToOSThread
PI10505 ClassNotFoundException when the ServleltStatsMxBean is accessed from the Liberty Profile JMX client
PI10925 Access logging does not appear to be dynamic
PI11516 Re-enabling the HttpEndpoint on Liberty profile server does not work
PI11949 WS-Adressing feature did not work correctly with JDK7
PI12051 Pooled threads have unexpected context class loaders
PI12116 Application reports java.io.IOException: Exception in opening zip file
PI12632 Allow defaultHttpEndpoint host to be overridden without configuration change.
PI12926 commons-upload.jar vulnerability
PI12983 Web request failure due to a NumberFormatException while decrypting an LTPA token.
PI12984 Collective member servers do not have read access to the collective repository outside of /sys.was.*
PI13273 Creating the collective configuration writes to WLP_OUTPUT_DIR but reads from WLP_USER_DIR
PI14355 Authentication errors when running under stress
PM43415 Registering tag library in JSPx with default XML namespace causes a NullPointerException
PM62691 Native Query with specified result class can throw NullPointerException when return data contains a null-valued column
PM81674 ELexpressions are not evaluated when preceded by two backslashes
PM86470 Timing window causing java.lang.IllegalStateException
PM87133 Performance Monitoring Infrastructure (PMI) ActiveCount may be inaccurate when a session is accessed by multiple threads.
PM87880 Slashes used in OpenJPA method EntityManager.createNativeQuery will be removed in the resulting JDBC query
PM88291 Transactions rolled back silently when coordinated by the UOWManager
PM89272 Liberty Profile server opens extra listener on ephemeral port and localhost
PM89432 Isolation level is not working properly for JPQL queries with nested sub-queries. It is generating incorrect query.
PM90293 Session manager makes an unnecessary call to the database to retrieve session information when multi-row session persistence.
PM90626 function publishEvent is called with UIComponent.class instead of source.getClass according to spec java doc
PM90664 NullPointerException when using AnnotatedType via ProcessAnnotatedType on @stateless EJB
PM91408 Result of aggregate function max is 0 on empty table (instead of null)
PM91573 CDI app fails to start with AmbiguousResolutionException due to how parameterized types are detected for injection
PM92677 The cookie does not get set in the browser
PM92967 Issues with download of files greater than 8gb.
PM92983 Custom feature is not loaded
PM93750 JPA finder cache does not account for dynamic FetchPlans
PM93829 Async servlet lost original identity after resume
PM94033 Incorrect locking behavior with JPA PESSIMISTIC_LOCK mode
PM94199 Servlet <error page> processing incorrect for <error-code> <exception-type>
PM94792 Exceptions are thrown if there is a new line after ${. The JSP will not load correctly.
PM95013 Creating OAuth 2 custom mediator sees NoClassDefFoundError
PM95057 GPF in Liberty Profile server in ntv_registerProduct
PM95097 Poor performance using WMQ JMS in Liberty Profile server only
PM95110 Liberty Profile throws IllegalStateException when browser closed connection.
PM95209 Configuration validation for the repository client heartbeat and timeout do not report when the configuration is out of bounds
PM95293 The url connection created when using the wsjar protocol does not properly implement the getContentLength() method.
PM95300 When servers leave or join a cluster group no notification is printed in the log file.
PM95424 Add secure flag to WASReqURL cookie for Liberty Profile
PM95534 When the aged timeout is set beyond integer range a negative value is returned
PM95662 The attribute 'id' is not a recognized attribute for the element 'wasJmsEndpoint'
PM95964 CWWKB0105E error when loading z/OS native code in a Liberty profile server.
PM96057 No cache control headers were received from WebSphere Application Server OAuth.
PM96140 Configuration in web.xml to load JSP during application initiation is not working.
PM96163 JSPs with references to tag files fail with SRVE0777E
PM96235 Unhandled exception during the initialization of the ServletContainerInitializer
PM96357 OpenJPA: Version field returns NULL when explicity projected from a JOIN in select clause
PM96443 Liberty Profile server starts despite port conflict failure in http endpoint/channel.
PM96445 OpenJPA ExternalValue mapping works incorrectly with CriteriaAPI multiselects
PM96464 NullPointerException thrown when determining the active user registry from the user registry service
PM96532 Setting converterId breaks converter selection by type.
PM96613 JSF.js: Calling JSF.getViewState() with a direct reference to a element throws an exception
PM96659 Entity object instance generated by native SQL query may have null embeddable field
PM97023 Console output for server start command does not currently indicate server startup failures.
PM97079 Expose receive action permission for temporary destination queue
PM97228 An exception can occur when an LTPA token timeout occurs and the CDI WebBeansConfigurationListener accesses the session
PM97353 Compilation errors when a JSP contains an auto increment variable.
PM97510 Stackoverflow in OpenJPA due to endless recursive calls in 'isLoaded'
PM97514 Unable to associate different applications to differing HTTP endpoints
PM97549 Liberty Profile for z/OS registers with IFAUSAGE using the wrong product owner.
PM98149 Liberty Profile will throw a NullPointerException from HttpDispatcherLink.sendResponse.
PM98238 Inconsistent resolution of the variables in f:ajax@listener MethodExpressions
PM98245 Liberty Profile web container does not destroy servlet when UnavailableException occurs
PM98301 z/OS Liberty Profile server does not unregister with IFAUSAGE at server shutdown
PM98409 NullPointerException occurred on Liberty Profile when performing programmatic isUserInRole check.
PM98421 CData section in web.xml causes Liberty profile RuntimeException
PM98653 Queries with a sort clause return fewer entries than the same query that does not have a sort clause.
PM98732 Web services cahcing does not work properly dynacache changes the configuration value of required in components
PM99374 JPA version field in a projection always returned as an integer
PM99378 Allow Liberty profile to return jar URLs rather than wsjar URLs from classloaders.
PM99775 Interim fixes do not apply new feature manifests
PM99783 Batch update fails due to java.sql.SQLException: Unsupported feature and -2 return code from Oracle JDBC driver


Fix Pack 8.5.5.1
Fix release date: 11 November 2013
Last modified: 10 November 2013
Status: Superseded

Download Fix Pack 8.5.5.1
APAR Description
PM86094 Liberty Profile fails to connect to LDAP when using SLDAP (SSL)
PM86131 Error message CWWKS2910E with internal error code 0x02008002 may occur in stress environment with SAF security enabled.
PM90352 SRVE0315E: An exception occurred: com.ibm.ws.webcontainer.webapp.web
PM98907 Remove unneeded data in Database Analyzer and logs

Refresh Pack 8.5.5
Fix release date: 14 Jun 2013
Last modified: 13 Jun 2013
Status: Superseded

Download Refresh Pack 8.5.5

APAR Description
PM73545 Authorized handler for the HTTPs protocol not found.
PM77507 OSGi applications using JPA can fail to start and issue no error messages.
PM78466 Properties files in a directory in an ear file are not added to the classpath of a war inside the ear
PM78567 java.net.MalformedURLExceptions are thrown when attempting to access URLs when multiple non-OSGi applications are installed
PM79227 No property to disable the Liberty Profile Server welcome page
PM80457 Server.xml is not honoring attributes for logging tag
PM82758 Unable to retrieve list of users from LDAP registry when using getUsers()
PM82831 Java.lang.NoClassDefFoundError during startup of Liberty Profile, shared library not available.
PM83557 IllegalStateException while processing transactions.
PM83572 Type2 datasource transactional="false" fails
PM84523 CWWKC0060W for VT_CLASS_RESOURCE in WLP not documented
PM85517 Message CWWKC0044W does not contain information necessary to debug problem
PM85520 JSPs inside directories are not pre-compiled
PM85563 FFDC reports contains excessive redundant information
PM85564 EJB application exceptions not output to messages log
PM85565 Unable to resolve included nested configuration located outside wlp\usr directory
PM85566 IllegalStateException when removing transaction feature from the server configuration
PM85567 IllegalMonitorStateException observed in trace incident reports
PM85568 httpOnlyCookies configuration attribute not honored
PM85569 Minor updates to transaction functionality
PM85570 Configuration validation error when there is whitespace in empty elements
PM85571 Configuration changes can be lost
PM85574 JSP taglibs not available to the tools
PM85653 Some HTTP requests are not served correctly
PM85656 NoClassDefFoundError: com.ibm.ws.jsf.util.FacesMessages
PM85657 Unexpected java.lang.IllegalArgumentException FFDC
PM86037 SRVE8043E error when Liberty Profile is installed in path that has spaces
PM86263 A web application throwing a RuntimeException prevents the servlet from being loaded
PM86268 Application stop waits for 30 seconds when stopping server
PM86271 Tools add wrong jars to client classpath
PM86272 Extra information in trace.log
PM86273 Untranslated message in log CWRLS0010_PERFORM_LOCAL_RECOVERY
PM86275 Java.lang.ClassNotFoundException running SecurityUtility and ProductInfo commands
PM86277 Some extra annotated fields are appearing in ffdc reports
PM86278 File monitor returns duplicate entries for deleted directories
PM86279 JPALookupDelegateImpl deactivate is not the inverse of activate
PM86281 Error: Could not find or load main class when running isadc command
PM86285 When using simple TAI Liberty Profile returns a 401 error when expecting a 403 error
PM86287 System properties not applied over bootstrap properties
PM86288 BundleException is thrown when there is only the beanvalidation-1.0 feature enabled
PM86289 Throwing a RuntimeException from FileMonitor can stop all file monitoring
PM86290 Translation error in help in French securityUtility
PM86291 SecurityUtility fails with 0 exit value
PM86292 Can not override the default JSP expression factory implementation.
PM86293 Log message CWWKZ0019I incorrectly suggests the application is not completely started
PM86294 JSP includes <%@include file="xxx.jsp" %> reports no error if file not found
PM86299 Liberty Profile support for one way hash
PM86304 REST connector client has JSONConverter marshalling problem for empty HashMap
PM86305 Error CWWKZ0056E if there are spaces in the dropins location filename
PM86306 Incorrect class version loaded by OSGi
PM86307 productInfo compare doesn't take interim fixes on target into account
PM86308 Running with session in memory and using the HTTP plugin, sessions may be lost
PM86309 z/OS native launcher does not support PID_DIR and PID_FILE
PM86310 OSGi application performance issue
PM86311 State mismatch running Oauth with multiple iterations
PM86315 Need to support the png mime-type by default
PM86316 A dump or javadump action directed to a server with an empty --include= generates an incorrect error message.
PM86318 Organize session config options into groups for Eclipse tooling
PM86319 Server JMX connection fails if the network connection is changed while the server is started
PM86321 Kernel launcher issues
PM86322 A redirected HTTPs request with invalid port number receives a vague error message
PM86323 ApplicationMonitor config element not dynamic
PM86324 CWWKS2911E appears in logs 5 times for one error
PM86325 Service difficulties due to bundle ordering issues
PM86326 Excessive FFDC for BundleException
PM86328 Inaccurate timestamps
PM86329 NullPointerException in DropinMonitor.tidyUpMonitoredDirectory
PM86330 Unconditional xx:MaxPermSize warning when using server script
PM86332 Command "server start <server>" fails when umask is set to other than 000
PM86333 Server.env doesn't override system.env if it contains an uncommented string in first line (liberty.env)
PM86334 CWWKS security messages unclear
PM86336 Tools show "Classloader Service" for the config entry for classloader
PM86337 AuthCache sizes do not specify a valid range
PM86339 Server config reports a nested element is removed when present
PM86342 Default error page doesn't show HTML
PM86343 Trace specification not using current format
PM86345 NullPointerException in jpaemfactory.isOpen if EM factory not created
PM86346 Applications attempt to start twice using RAD "RunAs" for JEE ear
PM86348 The exception message was null when using unknown tags in server.xml
PM86349 Keystore problem does not give a clear exception message
PM86350 Improve message for missing data-source configuration
PM86353 ABEND0EC3 with reason code 20F00400 in Liberty Server
PM86629 Enable transaction logging to an rdbms
PM86635 Application does not appear to have started
PM86636 Server config application element type attribute picks up default from location attribute
PM86895 java.lang.NoClassDefFoundError for javax.ws.rs.core.Application
PM87131 Oauth could allow a remote attacker to obtain someone else's credentials
PM87412 ProductInfo compare command output can be confusing when checking APAR inclusions.
PM87511 NullPointerException when web.xml has a reference mismatch.
PM87603 ExecutorService does not handle incorrect configuration nicely.
PM87604 Missing JNDI feature diagnostic improvement
PM87718 Improve performance for session database multi-row
PM87719 Javax.faces.el.MethodNotFoundException: java.lang.NullPointerException
PM87724 Improve values in generated plugin-cfg.xml file
PM88023 Numerous FFDC files are being created for an exception.
PM88040 Improvements to stack trace and logging

Document information

More support for: WebSphere Application Server
General

Software version: 8.5.5, 16.0.0.2

Operating system(s): AIX, HP-UX, IBM i, Inspur K-UX, Linux, Solaris, Windows, z/OS

Software edition: Base, Developer, Express, Liberty, Network Deployment

Reference #: 7043863

Modified date: 25 July 2017


Translate this page: