Disclaimer: 

Please note: Although OBSOLETED patches are available on SunSolve, Sun recommends using the most recent patches and the most recent revision of those patches. OBSOLETED patches do not include the latest bug fixes and/or product enhancements, and may require the installation of additional patches as a corrective measure.

Status: OBSOLETE

Patch Id: 118202-11

***********************************************************************
READ THE TERMS OF THE AGREEMENT ("AGREEMENT") IN THE LEGAL_LICENSE.TXT
FILE CAREFULLY BEFORE USING THIS SOFTWARE. BY USING THE SOFTWARE, YOU
AGREE TO THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE
TERMS, PROMPTLY DESTROY THE UNUSED SOFTWARE.
***********************************************************************

Summary: Obsoleted by: 118202-12 Web Server 6.1: Sun ONE Web Server 6.1 RHEL2.1 Linux: Product Patch (SP7)

Date:  Mar/13/2007

Installation Requirements:

None

Solaris Release: Note:  Redhat

Sun OS Release: Note:  RHEL2.1

Unbundled Product: Sun ONE Web Server

Unbundled Release: 6.1

Xref: This patch available for Solaris SPARC as patch 116648 and Solaris i386 as patch 116649.

Topic: 

Web Server 6.1: Web Server 6.1: Sun ONE Web Server 6.1 RHEL2.1 Linux: Product Patch (SP7)

Relevant Architecture: i386

BugId's fixed with this patch:

4856895 4879994 4896881 4905412 4939260 4957123 4978243 4991884 4996219 5004542 5012107 5015181 5016494 5024330 5026607 5039633 5042600 5048543 5048940 5063134 5088267 6066228 6066230 6067407 6158040 6170938 6171132 6171311 6171389 6171400 6172953 6173039 6173293 6175828 6176231 6176264 6177544 6180991 6185904 6192797 6193318 6193967 6195007 6195820 6197731 6197890 6203247 6206179 6213097 6219618 6222728 6225900 6229472 6232465 6234284 6234758 6239342 6239388 6240704 6244615 6246214 6247263 6247997 6253489 6254121 6259257 6261200 6262885 6273472 6275413 6276594 6279790 6280778 6281323 6285129 6285848 6285879 6292582 6294743 6302377 6312702 6315783 6316262 6316387 6316881 6318003 6318200 6318406 6324034 6326965 6329109 6332442 6334248 6335483 6336309 6342394 6343584 6348395 6350122 6350502 6353988 6356179 6358858 6360180 6361485 6364678 6367672 6367812 6370001 6370089 6376035 6376082 6376278 6380777 6381747 6382704 6384456 6384640 6387189 6388092 6388766 6392159 6392644 6400307 6418529 6421617 6426382 6428199 6428403 6429293 6433752 6435723 6436535 6437635 6438408 6439519 6441402 6442651 6448255 6451182 6451285 6455812 6458771 6465691 6471388 6473494 6477953 6477981 6478972 6480026 6482272 6482560 6482816 6488468 6489275 6494886 6496892 6507264 6508084 6508092 6510957

Changes incorporated in this version:

6358858 6292582 6384640 6376082 6387189 6276594 6428403 6442651 6392644 4856895 6455812 6439519 6388092 6382704 6473494 6384456 6488468 6066230 6158040 6206179 6213097 6315783 6348395 6350502 6367672 6376035 6380777 6381747 6388766 6392159 6400307 6418529 6421617 6426382 6428199 6429293 6433752 6435723 6436535 6437635 6438408 6441402 6448255 6451182 6451285 6458771 6465691 6471388 6477953 6477981 6478972 6480026 6482272 6482560 6482816 6489275 6494886 6496892 6507264 6508084 6508092 6510957

Patches accumulated and obsoleted by this patch:

Patches which conflict with this patch: 

Required Patches:

Obsoleted by:

Files Included in this Patch: 

Note:
sun-webserver-6.1.7-1.i386.rpm

Problem Description: 

6358858 HTTP4352: zlib internal error. Return code from zlib is -5
6292582 SNMP MIB for "iwsFractionSysMemUsage" not showing correct results for iws6.0 sp9
6384640 Restart while previous restart is in progress kills the webserver processes
6376082 Needs to provide support for JNDI Simple name, e.g. "jdbc/sample" as in App Server
6387189 Java Logging issues in a deployed module
6276594 Request body of PUT requests sent with the Transfer-encoding:chunked header is not read.
6428403 Crash when filtering static content
6442651 If the URL (from browser) to a web app contains URI params, then it causes recursive redirection
6392644 Incorrect URL in README.txt file supplied with iWS 6.0SP10/6.1SP6 along with RPP and fast cgi README
4856895 uxwdog process crashes on multiple CPUs machine during shutting down.
6455812 magnus.conf directive thread safety
6439519 SEGV in service_plain_range
6388092 RFE: /ns-icons gif image files cannot be displayed properly in IE
6382704 iWS 6.0SP9: Admin server unable to turn off "Monitor Web Server Statistics" -Admin GUI still monitor
6473494 PKCS#1 signature DigestInfo parsing problems in NSS
6384456 Ill-behaved web apps can crash Web Server
6488468 installer should not bundle jdk for hp platforms
6066230 Displaying buggy page numbers on the search results screen
6158040 Problem with migration from 4.1 to 6.1:related to missing JAVA parameter in server.xml file
6206179 WS6.1sp2: Internal log rotation rotates files twice if the system time was changed.
6213097 ktsearch.jar is not getting migrated correctly on JES3
6315783 WS 6.1.5 point product: Links to search OLH lead to English pages on fr locale
6348395 sessionDestroyed is not called when session is invalidated with IWSSessionManager.
6350502 Pragma and Cache-control headers cause interoperability problems
6367672 Problem restarting the server with restart script having MaxProcs > 1
6376035 Problem finding the library files while executing the standlone jsp file ( not webapp)
6380777 type=magnus-internal/cgi in mime.types can not add pl file suffix properly
6381747 Use of 'HttpSessionBindingListener' causes session to be expired incorrectly
6388766 Adminserver treat the japanese backslash differently in manupilating cgi shell directory on windows
6392159 Servlet container hang on restart
6400307 Cluster Control functionality of Admin GUI breaks after adding a variable
6418529 i18n search: search pages content have a mix of both English and the other language
6421617 Problem having server-parsed HTML (ParseHTML) and .htaccess with restricted group option
6426382 compression filter flush call doesnot flush all buffer data
6428199 search filter failing due to "," (comma) in userid when such users are a member of a group
6429293 Security Vulnerability in web server 6.1 sample apps
6433752 ssl-check is not working with NSAPI based plugin
6435723 High CPU usage in Reverese Proxy Plugin - DaemonChannel::unchunk()
6436535 Server hangs on stop/restart when a connection is in the connection queue
6437635 WS 6.1SP5:Users with Revoked Client certificate can access WS instance                                                                                
6438408 magt bundled with webserver 6.1sp5 leaks memory with each connection request
6441402 LDAP server configuration fails with iWS 6.1sp5 64 bit version
6448255 Windows 6.1sp5: file handle is not released by webservd process under certain conditions
6451182 high cpu utilization in parseParameters()
6451285 Failed assertion in 6.1 SP6 debug bits
6458771 watchdog can crash when ./start is executed before ./stop completes
6465691 Display problem with html page in <jsp:include> with tiles
6471388 Windows hidden shared network drives as document directories do not work                                                                                
6477953 windows: standalone web server modifies NSPR/NSS bits, breaking FIPS mode
6477981 FIPS140 mode is broken in standalone web server because chk files are missing
6478972 JDK shipped with WS 6.1SP6 not compatible with 2007 DST changes
6480026 some KA connections dont get closed after the specified time
6482272 SNMP master agent does not send traps when the web server instance operational status changes
6482560   web server crash with 1.4.2.09 + and 1.5.0.3+ HP JVMs
6482816 Web Server 6.1 SP5 Reverse Proxy Plugin replaces commas in a cookie header with semi-colons
6489275 Integrate webserver 6.1 with latest NSS
6494886 low-latency/high concurrency mode sometimes doesn't get switched dynamically as release note mention
6496892 WS installer should not bundle jdk for AIX platform
6507264 finer log shows in startup step although the default log level is INFO
6508084 webserver 6.1 sp7 License text refers to SP6 on all the platforms
6508092 Server startup fails in ws6.1 sp7 on HPUX platform, when installed through express/silent mode
6510957 pkginfo file on Solaris and RPM spec file point to old service pack(SP5).
 
(from 118202-10)
 
4957123 Search Query Operators are not documented in Web Server 6.1 Admin Guide
4991884 Indexing a collection of files requiring conversion fails if total size is great
6197731 Internal Error on accessing Admin Server.
6246214 Search indexing hangs on large files
6279790 Preserve .pdb files for Windows debugging
6280778 PDF files unable to be indexed with WS 6.1 search on HP-UX with OS patch PHSS_28871 installed
6281323 Request to add Windows 2003 SP1 in the supported platform.
6285129 Using % in the value of jsp:param fails in some circumstances
6294743 update JSP search collection creates new tmp files
6302377 Servlet container UTF-8 URI mapping vulnerability
6312702 HttpServletResponse.reset() doesn't work as expected.
6316262 Admin GUI does not reflect change to accesslog path change
6316387 Web server does not respond correctly when handling the "if-unmodified-since" header
6316881 Multibyte characters in headers can't be retrieved by req.getHeader().
6318003 webserver sends back the actual content with 412 code for request with if-unmodified-since and range
6318200 Buffer overflow when formatting installer error messages
6318406 redeploy the webapp will causes ownership change on files
6324034 http post limit
6326965 admin password in plain text in a file readable by anyone
6329109 WS6.1: lock file conflict for multiple installs running on the same port (but diff. ips)
6332442 Web Server on Linux will crash when Init fn="stats-init" is in magnus.conf
6334248 Windows 2003 mapped network drive not readable as a document_root dir
6335483 6.1 HPUX builds are stripped of their symbols
6336309 Problem with rewriting the special character in server.xml
6342394 Cron log rotation can create invalid archive logs with a specific instance name.
6343584 deadlock in keepalive subsystem caused by NSS blocking
6350122 iWS6.1SP5 on Windows Cron based log rotation failed with garbage inside scheduler.conf file
6353988 6.1sp4/sp5: Cannot set client trust or server trust on some built in CAs6356179 AdminServer of web6.1 doesn't change the id of USERDB tag in server.xml.6360180 crash in select 3 webapps/qa_app/jsp/encodedurlforwarder
6361485 htaccess not working in Web Server 6.1 SP5 for User Document Directories.
6364678 Reference to Sun ONE Studio in the WebServer documents needs to be updated.
6367812 Doc RFE: add infodoc 76202 into online doc for iWS 6.1 SPx
6370001 Change service pack version number, README file, License File and Linux RPM version for new patches
6370089 Integrate Webserver 6.1 SP6 to NSS 3.11
6376278 HP-UX gat -setup fails.
6378473 validate-server-cert should be set to true in order to avoid MITM attacks.
6383377 Release note 64-bit Fast CGI, RPP and JWSDP support in 6.1 Sp6
6383971 Release note the requirement of AIX update patch 5100-09 for 6.1 SP6
6387080 GAT select 2 and 6 has failures
6388230 GAT search select 14 is hanging on solaris
6388243 Installing a CRL on WS 6.1SP4 (Windows) adds it to the CKLs section in the GUI
6391505 Document config file writability, root security risks, and Solaris net_privaddr privilege
6391515 JES4:win: WS Release note have typo and non releated information.
6394888 Memory leak
6404983 Searching of Users and Groups through LDAP server using AdminGUI is failing
 
(from 118202-09)
 
6253489 ClassCastException thrown when nested includes are present in jsps
6285848 Requests with Double 'Content-Length' header should get rejected ( HRS Vulnerability )
6285879 Web Server JES4 bld7 patches for Solaris SPARC/x86 check for Java in /usr/j2se and terminate on fail
 
(from 118202-07)
 
6261200 Configuration of Web Server failed in Configure-Later mode.
 
(from 118202-06)
 
5042600 cannot migrate 6.0 SP7 web server instance to 6.1 SP2
6171389 WS6.1sp2: filter is only called for the first request on persistent connections
6175828 JES3: Incorrect information in the install log; Web Server Install
6219618 JES WebServer 6.1sp2 failed to index PDF version 1.5(Acrobat 6.x) doc for Search Collection Creation
6225900 webserv-rt.jar ships with META-INF/javamail.default.providers which doesnot contain imaps
6234758 Migration cgis do not check for scripts tags
6244615 WS migration needs to update RootCerts correctly
6247263 After upgrading JES3 Webserver through patchadd, it is not updating the pkginfo contents
 
(from 118202-05)
 
4879994 SSL: data larger than 8K is lost when the request triggers new ssl handshake
5048543 6.0sp8: web server does not start with LD_PRELOAD of libCld.so on Solaris 5.6
6066228 admin app is allowing duplicate ports in the add server screen
6170938 Acceptlanguage does not work for User Document Directories
6180991 Internal-Daemon Log Rotation does not work for files greater than 2GB
6195820 Global resources are not available to load-on-startup servlets
6197890 Applying Patch 116648-11,116649-11 of Webserver on JES1/2 causes server startup failure.
6229472 Regression: .htaccess Require directive broken
6232465 RFE: build options for HPUX web server versions
6234284 JES 3 webserver installation fails while giving shell meta-characters ($&^*()) etc in admin password
6239342 cross-site scripting vulnerability in a default error page
6239388 Displaying wrong version number on the comand line while starting the websever and on the UI
6240704 Modify Linux RPM script to update the RPM release/ version number and shared components  for JES4
 
(from 118202-04)
 
6195007 Javascrtip validation does not allow resizequantity < steadypoolsize
6203247 Certificate based Authentication ACL Test Cases are failing in GAT
 
(from 118202-03)
 
6192797 sjsws6.1sp4 linux rpm fails to upgrade properly if the instance name contains "-" e.g.https-iws-test
6193318 No software was installed in build8 nightly Linux (dated on 10/11/2004)
6193967 Web svr patches 116648-10 have incorrect use of CLIENT_BASEDIR
 
(from 118202-02)
 
4905412 UI doesn't seem to permit manage users in keyfile db.
5048940 Superuser Access Control page in Admin UI not accessible after upgrade from SP1
6067407 Problems using ACL_LDAPSessionFree()
6171132 61sp2 webservd crashes in JES2 ComExpress load tests
6172953 JES3: Web Server RPM patches can't have a new Version string
6173039 Web Server has private copy of libnssckbi.so and NSPR libraries
6173293 web server always sets content type to text/html when servlet filter is set
6176231 SJSWS6.1SP4 admin delete certificate(bin/https/admin/security) core dumps with NSS 3.9.3.beta.
6176264 SJSWS6.1SP4 Solx86 unable to start the SSL instance through Admin GUI
6177544 libpassthrough.so not present after RPM installation of plugin
 
(from 118202-01)
 
5039633 Update NSS to 3.9 series.
5063134 does not use Java ES symlink for J2SE location
5088267 WS 6.1 sp4 admin console is dependent on JDK 1.4.2
6171311 jsp invoking command line execution failed on 6.1sp4 using jdk1.5
6171400 With webserver running JDK1.5 the applets fail to start of in portal

Revision History: 

118202-10 118202-04 118202-09

Patch Installation Instructions: 

--------------------------------
 
To install this patch, run the command:
 
        rpm -U 'rpmname'
 
This will freshen your existing RPM installation. Note that if this is a
relocatable binary RPM and you have installed into a non-default location
using the --prefix switch, you must specify the --prefix switch with the
non-default location when you install this patch.
 
Consult the rpm(1) man page for more details.

Special Install Instructions: 

-----------------------------
 
None.

README -- Last modified date:  Friday, July 27, 2007