Release Notes

What’s new in PMF9.1 release

• Apache Cordova SDK now supports
  • Android platform 14.0 and iOS version 18.0
  • Cordova Browser 7.0.0
• Support for OpenJDK 17.
• Support for Android Push on Target SDK 34.
• Recommended security configuration has been added for enhanced security to customers.
• Deployment on Red Hat OpenShift Container Platform (OCP) 4.15.

Test Environment

PMF 9.1 release has been tested on the following environments.

Security Configurations

Your application security can be enhanced by adding the following settings in the server.xml file. This is the best practice from the security aspect of the application.

• <ltpa expiration=”1H”/>

Expires single sign-on (SSO) Lightweight Third Party Authentication (LTPA) token from WebSphere Application Server Liberty within one hour to avoid any misuse for unintended access. If no value is set, then the default value for expiration is 2 hours.

• <webContainer disableXPoweredBy=”true” deferServletLoad=”false”/>

Disables exposure of servlet version that server is using or capable of, internally.

Security Fixes

PMF 9.1 release has 65 critical and 156 high vulnerabilities fixed. For the complete CVE list, please log in to the Persistent Support Portal.

Deprecations

Following application servers support is deprecated with this release

• WebSphere Application Server
• WebSphere Application Server Network Deployment

Windows Application

• Windows Mobile SDK is deprecated since PMF 9.0 (see Release Notes)
• As such, any Windows Mobile app is not supported in PMF 9.x.
• Therefore, customer is advised to remove any Windows Mobile apps in PMF Console.