Fix (APAR):  PI36615

Status:  Fix

Release:  1.1.0.6

Operating System:  AIX,HP-UX,IBM i,Linux,Solaris,Windows,i5/OS

Supersedes Fixes:  

CMVC Defect:  xxxxxx

Byte size of APAR:  893109

Date: 2015-03-10

Abstract:  Confidential for Security Integrity ifix

Description/symptom of problem:  
PI36615 resolves the following problem:

ERROR DESCRIPTION:
Confidential for Security Integrity ifix.

LOCAL FIX:                                                      
If the following dojox  files are not used in your application, 
remove them from your application and redeploy the application. 
                                                                
                                                                
                                                                
dojox/av/resources/audio.swf                                    
dojox/av/resources/video.swf                                    
dojox/form/resources/fileuploader.swf                           
dojox/form/resources/uploader.swf                               

PROBLEM SUMMARY:
Confidential for Security Integrity ifix.

PROBLEM CONCLUSION:
Confidential for Security Integrity ifix.


Directions to apply fix:  

Fix applies to Editions:
Release 8.5.5
  Application Server Web 2.0 and Mobile Toolkit


Install Fix to all WebSphere installations unless special instructions are included below.

Special Instructions: None

NOTE:
The user must:
* Logged in with the same authority level when unpacking a fix, fix pack or refresh pack.
* Be at V1.4.3 or newer of the Installation Manager. Certain iFixes may require a newer version of the Installation Manager and the Installation Manager will inform you during the installation process if a newer version is required.

The IBM Information Center can provide details, if needed, on the use of the Installation Manager to apply the iFixes.
http://publib.boulder.ibm.com/infocenter/install/v1r4/index.jsp. 


This fix will update all Dojo 1.7, 1.8, 1.9, and 1.10 to the latest minor Dojo level containing the fix.  This fix contains the dojo, dijit, util, and some dojox files.  The other dojox files, including the ones fixed by this security problem, can be downloaded from the Web 2.0 and Mobile download site located here:

https://www14.software.ibm.com/webapp/iwm/web/reg/signup.do?source=swg-wasfpweb20&S_CMP=web_opp_ibm_ws_appinfra_butt_was20mobile&lang=en_US&S_PKG=wasfw201100-3

The fixes will be 1.1.0.6_PI34238_MobileToolkit_DojoX.jar.

Once done, you will need to updated your application with both the IM installable ifix and the downloaded content, then redeploy your application and restart any servers where the app is redeployed.

 Shutdown WebSphere Application Server before applying the iFixes.

  

Directions to remove fix:  

The IBM Information Center can provide details, if needed, on the use of the Installation Manager to remove the iFixes.
http://publib.boulder.ibm.com/infocenter/install/v1r4/index.jsp.  Shutdown WebSphere Application Server before removing the iFixes.  Restart WebSphere Application Server after removing the iFixes.

Directions to re-apply fix:  
1) Shutdown WebSphere Application Server.

2) Follow the Fix instructions to apply the fix.

3) Restart WebSphere Application Server.



Additional Information: