Fix (APAR): PH22080 Status: Fix Release: 19.0.0.12 Operating System: AIX,HP-UX,IBM i,Linux,Solaris,Windows,OS X Supersedes Fixes: CMVC Defect: Byte size of APAR: 3463582 Date: 20200327 Abstract: security vulnerability Description/symptom of problem: PH22080 resolves the following problem: security vulnerability For installing into a Docker application image based on Liberty images, please review: https://www-01.ibm.com/support/docview.wss?uid=ibm10961580 Directions to apply fix: 1. Open a console and direct it to the location of your iFix jar 2. Run the command "java -jar 190012-wlp-archive-IFPH22080.jar". The following launch options are available for the jar: --installLocation [LibertyRootDir] by default the jar will look for a "wlp" directory in its current location. If your WebSphere Liberty install location is different to "wlp" and/or is not in the same directory as the jar then you can use this option to change where the jar will patch. [LibertyRootDir] can either be relative to the location of the jar or an absolute file path. --suppressInfo hides all messages other than confirming the patch has completed or error messages. 3. Stop your WebSphere Liberty server(s). 4. When you next start your WebSphere Liberty server(s), the fix will become active in your runtime. Directions to remove fix: 1. Stop your WebSphere Liberty server(s). 2. You will need to delete the following files (file locations are relative to your WebSphere Liberty install root): - lib/com.ibm.ws.security.oauth.2.0_1.1.35.cl191220200227-1815.jar - lib/com.ibm.ws.security.saml.sso.2.0_1.0.35.cl191220200227-1815.jar - lib/com.ibm.ws.security.openidconnect.server_1.0.35.cl191220200312-2133.jar - lib/com.ibm.ws.security.saml.wab.2.0_1.0.35.cl191220200227-1815.jar - lib/fixes/190012-wlp-archive-IFPH22080_19.0.0012.20200327_2107.xml - lib/fixes/190012-wlp-archive-IFPH22080_19.0.0012.20200327_2107.lpmf 3. When you next start your WebSphere Liberty server(s), the fix will become inactive in your runtime. Directions to re-apply fix: 1. Follow the instructions to apply the fix. Additional Information: