The following is the list of CVEs fixed with this release.

• CVE-2015-5253, CVE-2017-5656, CVE-2017-5653, CVE-2017-12624, CVE-2022-46364, CVE-2025-23184
• Issue fix for redundant query executing from all pods/servers for ILMT and purging the database.

Installation instructions

Prerequisites

• IBM MobileFirst Platform Foundation 8.0.0

Applying the fix

Server

• Upgrade, download, and install from the following IBM Fix Central link: MobileFirst Platform Foundation v8.0.0.0 InterimFix 202506252149.
  OR
• Refresh your MobileFirst Platform Foundation service from your service dashboard.

Client SDKs

• Upgrade, download, and install the latest SDK using the link: MobileFirst Platform Foundation v8.0.0.0 InterimFix 202506252149.
• Issues Fixed in SDK
  • Vulnerability fix for the IBM-strings package. For more information, see SDK_Vulnerabilities_Fixes.docx.
  • App Authenticity is failing on release build on gradle version 8.8.0 and above. For more information, see SDK_Vulnerabilities_Fixes.docx.
  • SDK contains bitcode for Xcode 16 series. For more information, see SDK contains bitcode for XCode 16 series.docx.

Artifacts

The artifacts updated in the iFix are emphasized.

MobileFirst DevKit

• 8.0.0.0-MFPF-DevKit-Linux-IF202506252149.bin
• 8.0.0.0-MFPF-DevKit-MacOSX-IF202506252149.zip
• 8.0.0.0-MFPF-DevKit-Windows-IF202506252149.exe

Cordova plugins

• mfp-cordova-version=8.0.2025050617
• cordova-plugin-mfp-analytics 8.0.2022100306
• cordova-plugin-mfp 8.0.2024082705
• cordova-plugin-mfp-fips 8.0.2022100306
• cordova-template-mfp 8.0.2022100306
• cordova-plugin-mfp-jsonstore 8.0.2023071003
• cordova-plugin-mfp-encrypt-utils 8.0.2023040605

• cordova-plugin-mfp-push 8.0.2023041111
• cordova-plugin-mfp-liveupdate 8.0.202003051505
• ibm-mfp-web-sdk 8.0.2022091607

• passport-mfp-token-validation 8.0.2017010917


Tools

• mfpdev-cli-8.0.2025050612
• mfpmigrate-cli 8.0.20180813050750 

iOS SDK

• worklight-ios-publish-8.0.2025031013-imf-client-sdks.zip
• mfp-client-ios-parent-version=8.0.2025031010
• IBMMobileFirstPlatformFoundation 8.0.2024092510
• IBMMobileFirstPlatformFoundationOpenSSLUtils 8.0.2023040410

• IBMMobileFirstPlatformFoundationPush 8.0.2024082808
• IBMMobileFirstPlatformFoundationJSONStore 8.0.2024092510

• IBMMobileFirstPlatformFoundationAnalytics 8.0.2024092510

• IBMMobileFirstPlatformFoundationLiveUpdate 8.0.202005041257

Android SDK

• worklight-android-publish-8.0.2025061805-imf-client-sdks.zip
• ibmmobilefirstplatformfoundation 8.0.2023061608
• ibmmobilefirstplatformfoundationpush 8.0.2024082808

• ibmmobilefirstplatformfoundationjsonstore 8.0.2024041413
• ibmmobilefirstplatformfoundationliveupdate 8.0.202003051505

• IBMMobileFirstPlatformFoundationAnalytics 8.0.2020081208
• adapter-maven-plugin 8.0.2024082809
• adapter-maven-archetype-sql 8.0.2024082809
• adapter-maven-archetype-java 8.0.2024082809
• adapter-maven-archetype-http 8.0.2024082809

• adapter-maven-api 8.0.2024082809
• mfp-security-checks-base 8.0.2018030404

• mfp-java-token-validator 8.0.2017020112

Windows SDK

• IBM.MobileFirstPlatformFoundation 8.0.2023021013
  IBM MobileFirstPlatform FoundationPush 8.0.2020013116 

Xamarin SDK

• IBMMobileFirstPlatform sdk 8.0.2020061906

React Native SDK

• react-native-ibm-mobilefirst 8.0.2023020913

• react-native-ibm-mobilefirst-jsonstore 8.0.2022081612
• react-native-ibm-mobilefirst-push 8.0.2020032412 

Push SDK

• IBM.MobileFirstPlatformFoundation 8.0.2020062206
• IBM.MobileFirstPlatformFoundationPush 8.0.202408280