Merative ™ Social Program Management 7.0.9.0 iFix10

Merative ™ Social Program Management is now Cúram ™ by Merative™

Release Notes

Abstract

Merative Social Program Management 7.0.9.0 iFix10 Release Notes

Content

Introduction
System Requirements
Download
Installation
Improvements, Resolved Issues and Third Party Updates
Known Issues
Notices

Introduction

Welcome to the Merative Social Program Management 7.0.9.0 iFix10 release.

This is a cumulative release which incorporates the Improvements, Resolved Issues and Third-Party Updates contained in all previous 7.0.9.0 interim fix releases. Details of these Improvements, Resolved Issues and Third-Party Updates are included separately in the release notes for each of the previous interim fix releases. For the latest version of the release notes, see https://curam-spm-devops.github.io/wh-support-docs/spm/release-notes.

Full product documentation can be found in the Product documentation and PDFs.

System Requirements

For information about the supported software and hardware for this release, see the Merative Social Program Management Prerequisites.

Download

See the download instructions for this release at /support/curam.

Installation

Before running the installer please ensure all files in your Merative Social Program Management installation are writable.

The installation steps are as follows:

• Extract the contents of the .zip file to a local drive location.
• Run the Merative Social Program Management installer, which can be found in the INSTALLER folder at that location.
• After installing, the appropriate build targets must be run as necessary for your installation.

Additional installation instructions can be found in the Development Environment Installation Guide.

Upgrading

If you are upgrading from a previous version, the Merative Social Program Management Upgrade Helper contains documentation and tooling to help you to upgrade your Merative Social Program Management application codebase and database to work with your new version of Merative Social Program Management. The Merative Social Program Management Upgrade Guide describes a recommended process for performing application and database upgrades. The Upgrade Helper contains tools to assist you with implementing the upgrade, including tooling to produce a schedule of required migrations for your upgrade, tooling to provide information about database schema changes and tooling to generate initial SQL scripts for applying changes to your database.

See the download instructions for this release at /support/curam.

Improvements, Resolved Issues and Third Party Updates

Third Party Updates

WorkItem: 275590 - Update the xmlsec JAR to the latest version: 2.2.3

The Apache XML Security for Java (xmlsec) library includes a mature Digital Signature and Encryption implementation. It is used in the Social Program Management (SPM) product as part of the Axis 2 secure web services solution.

The version of the xmlsec library used by SPM has been updated from 1.5.8 to 2.2.3. This new JAR file contains some minor bug fixes and enhancements.

As a result of this upgrade, the following changes have been made in the Java Development Environment deliverable.

• CuramSDEJ\lib\third_party_version.properties - the version of the specified xmlsec library has been updated.
• CuramSDEJ\lib\xmlsec-2.2.3.jar - the version of the JAR has been updated.

Note that any references in custom scripts and other artifacts must be updated to point to the new version of the JAR file as specified above.

WorkItem: 275778 - 7.0.9.0-iFix10 - The version of the logging framework used by the SPM product has been updated from Log4j-ibm-1.2.17 to Log4j-ibm-1.2.17.1

Apache Log4j is a Java-based logging utility that is used as the logging provider for the Social Program Management (SPM) product.

The JAR file log4j-ibm-1.2.17.1.jar is an IBM version of Log4j which was derived from Apache Log4j-1.2.17.jar .
Three classes in this JAR file were found to be incompatible with some logging configurations and could not be shipped. Therefore the JAR has been updated to remove the affected classes. The classes which have been removed from the JAR file are:

• org.apache.log4j.net.JMSAppender
• org.apache.log4j.net.SMTPAppender
• org.apache.log4j.net.SocketServer

As a result of this upgrade, the following changes have been made in the Java Development Environment deliverable:

• CuramSDEJ/lib/log4j-1.2.17.jar - This JAR file has been removed.
• CuramSDEJ/xmlserver/log4j-1.2.17.jar - This JAR file has been removed.
• CuramCDEJ/lib/ext/jar/log4j-1.2.17.jar - This JAR file has been removed.
• CuramSDEJ/lib/log4j-ibm-1.2.17.1.jar - This JAR file has been added.
• CuramSDEJ/xmlserver/log4j-ibm-1.2.17.1.jar - This JAR file has been added.
• CuramCDEJ/lib/ext/jar/log4j-ibm-1.2.17.1.jar - This JAR file has been added.

It should be noted that any references in custom scripts and other artifacts to the old 'log4j' JAR file should be updated to point to the new version of that JAR file as specified above. References to the JAR file which is no longer part of the JDE deliverable should be removed.

WorkItem: 275797 - Update the version of the Jsoup library to the latest version: 1.14.2

Jsoup is a Java library that is used to work with HTML. It provides an API for fetching URLs and extracting and manipulating data, by using HTML5 DOM methods and CSS selectors.

The version of the Jsoup JAR that is used by SPM has now been updated from 1.13.1 to 1.14.2. This new JAR file contains some minor bug fixes and enhancements.

As a result of this upgrade, the following changes have been made in the Java Development Environment deliverable.

• CuramSDEJ\lib\third_party_version.properties - the version of the specified Jsoup JAR file has been updated.
• CuramSDEJ\lib\jsoup-1.14.2.jar - the jsoup JAR has been added into the SDEJ at this location.
• CuramCDEJ\lib\ext\jar\jsoup-1.14.2.jar - the version of the JAR has been updated.

Note that any references in custom scripts and other artifacts must be updated to point to the new version of the JAR file as specified above.

WorkItem: 275822 - Update to the Dojo Toolkit library used in the SPM Client Development Environment for Java (CDEJ)

The Dojo Toolkit is an open source modular JavaScript library (or more specifically JavaScript toolkit) designed to ease the rapid development of cross-platform, JavaScript/Ajax-based applications and websites.

It is used as the JavaScript framework of choice in the CDEJ (Curam Development Environment for Java) delivered as part of SPM.

An issue with the version of Dojo used in SPM (dojo-ibm-V1.10.5) has been addressed. This has resulted in an update to the following module within the delivered toolkit:

• dojox/Grid/DataGrid

This change is not impactful as it does not modify any of the externally available Dojo APIs delivered.

Cúram Enterprise Framework

Business Services

WORD INTEGRATION

WorkItem: 275823 - Pre-signed Word Integration Applet JARs Certificate has an expired timestamp

Issue Description:

Microsoft Word Integration Applet JARs were signed with a signer certificate which had, in it's certificate chain, an intermediate certificate that expired on November 10th 2021. When the intermediate certificate expired, it broke the Word Integration applet solution in Internet Explorer 11, where those signed JARs were being used.

User Interface Impact: No

Steps to Reproduce:

1. Login as a caseworker using Internet Explorer 11.
2. Register a Person and create a Social Assistance integrated case.
3. Navigate to the Contact tab and click Communications.
4. Click the menu item to create a New Microsoft Word document.
5. Select a Case Participant and click Next.
6. Enter a Subject and click Save.
7. Issue: Microsoft Word should launch and present the document for editing. Word does not launch and the following error message is shown in the Java Console:
   • security: PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed
   • security: The TSA is not valid

Resolution:

This issue has now been resolved. Microsoft Word launches successfully and presents the Word document for editing when using the Internet Explorer 11 browser.

Technical:

The Microsoft Word Integration Applet JARs have been digitally signed with a new signer certificate.

Note that the new signer certificate has a different root CA (Certificate Authority) certificate, "DigiCert Trusted Root G4", in its certificate chain.
Customers should ensure that this certificate is in the "Trusted Root Authority Certificates" on the client Windows machine or that the root CA certificate is in the truststore for the Java Runtime Environment used by the Internet Explorer 11 Java Plug-in.

The certificate can be downloaded from here https://www.digicert.com/kb/digicert-root-certificates.htm.

Known Issues

See the Known Issues section in the 7.0.5.0 release notes.

Notices

Before using this information and the product it supports, read the information in "Notices".