Fixes Defects:

PH10965,PH36861,PH39076,PH39829,PH40207,PH40250,PH40262,PI65044



This patch contains the following software changes:


PH10965:

   Problem: OSLC v2 (OSLC CM 2.0) query on the Short-String field with values "#/#/#" or "#-#/#" or "#/#/#" returns HTTP status 400 response since CQ query filter transfers those values into the Date Format, when in this use case they are not actually dates but identifiers/strings of text based on customer use case. Incorrectly interpreted these strings as dates previous to fix. 

   Fix: The  "#/#/#" or "#-#/#" or "#/#/#" values of Short-String in the filter is setup correctly and the results can be displayed correctly.


PH36861:

   Problem: Reference list item on the a record show up twice (in the view) before saving the parent record while an action is running, under certain circumstances leading to confusion.  Upon saving the record the view is correct.  CQ Web client only.

   Fix: Reference list item on the defect record wont show up twice before saving the parent record. There would be just a single occurrence in the view.

This was due to a previous fix for PI54443 which has now been reverted to previous behavior, see PI54443 for a workaround now that the fix has been reverted as of 9.0.1.13, 9.0.2.5, 9.1.0.2 2021B fixpacks.


PH39076:

   Problem: In ClearQuest Web, if Form Selection feature is disabled and Dynamic Forms feature is enabled, calling Dynamic Forms APIs will not work as expected.

   Fix: In ClearQuest Web, if Form Selection feature is disabled and Dynamic Forms feature is enabled, calling Dynamic Forms APIs will now work as expected.


PH39829:

   Problem: ClearQuest Web becomes UI becomes unusable when a floating cqweb record window is dragged to top left or right corner of the browser screen. [The floating window blocks access to the rest of the UI].

   Fix: CQWEB works fine even when the floating window is dragged to top left or right of the browser screen with the fix.

Temporary Workaround (not recommended):
After the CQWeb UI becomes unresponsive due to the issue, right click on a blank space in the cqweb main window and click on Inspect from the web browser developer tools context menu.

The bottom most <div> style with absolute position at 0,0 just before </body> is the cause of this issue. If you select it and then right click and select Hide Element or Delete Element, it will resolve the issue temporarily for this UI session.

Please upgrade CQ Web CM Server to the latest fixpack to address the issue for all users permanently.


PH40207:

   Problem: A change was made in Java 1.8.0_291 on how it creates arguments, this change exposed a defect in CQ Web leading to error when attempting to start CQRPC.

For further details on diagnosis, and temporary workaround see technote:
https://www.ibm.com/support/pages/node/6487499

   Fix: Fixed CQ Web code to not pass empty argument to CQRPC.


PH40250:

   Problem: CROSS-SITE SCRIPTING VULNERABILITY

   Fix: No more vulnerable to XSS attack for the mentioned scenarios


PH40262:

   Problem: When a ClearQuest OSLC query is executed to fetch the number of attachments in a record, the output is wrong if the record has zero attachments.

   Fix: When a ClearQuest OSLC query is executed to fetch the number of attachments in a record, the output is now correct if the record has zero attachment.


PI65044:

   Problem: ICU (time) LIBRARY may cause deadlocks and instability in CQWEB.

   Fix: Using the latest WebSphere will fix the issue as it uses the latest ICU and thus fixed indirectly.
Staying current on the latest available WebSphere fixpacks is a best practice for security posture, as well.