Adobe Experience Manager Forms 6.5 LTS Hotfixes aem-form-hotfix

To install this hotfix, complete these steps in order:

Step 1: Install the patch

• JBoss: Windows- Hotfix for AEM Forms 6.5 LTS SP2 on Windows for JBoss JEE server
• Linux- Hotfix for AEM Forms 6.5 LTS SP2 on Linux for JBoss JEE server
• WebLogic: Windows- Hotfix for AEM Forms 6.5 LTS SP2 on Windows for Weblogic JEE server
• Linux- Hotfix for AEM Forms 6.5 LTS SP2 on Linux for Weblogic JEE server
• WebSphere: Windows- Hotfix for AEM Forms 6.5 LTS SP2 on Windows for Websphere JEE server
• Linux- Hotfix for AEM Forms 6.5 LTS SP2 on Linux for Websphere JEE server

Install the patch using the standard AEM Forms on JEE patch installation procedure.

Step 2: Install the vulnerability fix bundle

• Vulnerability fix bundle for AEM Forms 6.5 LTS SP2

1. Open the OSGi console at http://<host>:<port>/lc/system/console/bundles.
2. Click Install/Update.
3. Select the Start Bundle and Refresh Packages checkboxes.
4. Click Choose File, and then upload the downloaded bundle.
5. Wait until the log settles and the bundle shows as Active.

Step 3: Update the AEM Forms Workbench installer

You must update to the latest AEM Forms Workbench installer. Download it from AEM Forms Workbench installer.

Step 4: Update client library files (developers)

This patch includes a major update to the SDK client library adobe-livecycle-client.jar (see Including AEM Forms Java library files). If your project uses this JAR file, update adobe-livecycle-client.jar in your project's classpath after you install the hotfix. The latest version is available at <AEM_Forms_Installation_dir>\sdk\client-libs\common\adobe-livecycle-client.jar.

The hotfix is cumulative, so you can apply it on AEM Forms 6.5 LTS Service Pack 2 or an earlier Service Pack without installing Service Pack 2 first.

• FORMS-26818 After Apache Shiro is updated to version 2.1.0, AEM Forms on JEE fails to bootstrap with a NoClassDefFoundError for the Shiro security manager. This hotfix restores successful bootstrapping.
• FORMS-26819 AEM Forms on JEE fails with a "no class found" error for org.owasp.esapi.reference.JavaLogFactory. This hotfix resolves the missing class.
• FORMS-26584, FORMS-26589 After upgrading to AEM Forms 6.5 LTS, TaskManager endpoints are removed. This hotfix restores the TaskManager endpoints.
• FORMS-26569 On JEE, the Configuration Manager MergeEars step fails with a DOCTYPE declaration error (ALC-LCM-010-200) because of the secure XML builder. This hotfix lets the MergeEars step complete.
• FORMS-25063 Application-level logs are missing on IBM WebSphere Liberty deployments. This hotfix restores application-level logging.
• FORMS-24892 On JBoss, email fails with "IMAPProvider not a subtype." This hotfix restores email functionality on JBoss.
• FORMS-24692 On WebSphere Liberty Profile (WLP), email fails with "Could not convert socket to TLS." This hotfix restores email over TLS on WLP.
• FORMS-26688 Updates the Gibson library to version 6.0.29665850.
• FORMS-25222 Backports SAML assertion validation improvements.
• FORMS-26733, FORMS-26734 Updated Apache Log4j to version 2.25.5.
• This hotfix also includes security fixes.

Build: AEMForms-6.6.0-0008

• Windows- Hotfix2 for AEM Service Pack 6.5 LTS on Windows
• Linux- Hotfix2 for AEM Service Pack 6.5 LTS on Linux
• MacOS- Hotfix2 for AEM Service Pack 6.5 LTS on MacOS

• Enhanced form submission reliability by addressing an issue where submissions may fail when Server-Side Validation (SSV) was enabled If you encounter any issues, contact [Adobe Experience Manager Forms Support](https://business.adobe.com/in/support/main.html)