Disclaimer: 

Please note: Although OBSOLETED patches are available on SunSolve, Sun recommends using the most recent patches and the most recent revision of those patches. OBSOLETED patches do not include the latest bug fixes and/or product enhancements, and may require the installation of additional patches as a corrective measure.

Status: OBSOLETE

Patch Id: 121524-04

***********************************************************************
READ THE TERMS OF THE AGREEMENT ("AGREEMENT") IN THE LEGAL_LICENSE.TXT
FILE CAREFULLY BEFORE USING THIS SOFTWARE. BY USING THE SOFTWARE, YOU
AGREE TO THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE
TERMS, PROMPTLY DESTROY THE UNUSED SOFTWARE.
***********************************************************************

Summary: Obsoleted by: 121524-05 Sun ONE Web Server 6.1 SP8 Windows Patch

Date:  Jul/27/2007

Installation Requirements:

None

Solaris Release: Note: WINDOWS

Sun OS Release: Note: WINDOWS

Unbundled Product: Sun ONE Web Server

Unbundled Release: 6.1

Xref: This patch is available for Solaris sparc as 116648, Solaris i386 as 116649, Linux as 118202 and for HPUX in patch 121510

Topic: 

WS 6.1 Windows 2000: core patch

Relevant Architecture: i386

BugId's fixed with this patch:

4737204 4856895 4957123 4991884 6066230 6152655 6158040 6197731 6206179 6213097 6235473 6246214 6276594 6279790 6280778 6281323 6285129 6292582 6294743 6302377 6312702 6315783 6316262 6316387 6316881 6318003 6318200 6318406 6324034 6326965 6329109 6332442 6334248 6335483 6336309 6342394 6343584 6348395 6350122 6350502 6353988 6356179 6358858 6360180 6361485 6364678 6367672 6367812 6370001 6370089 6376035 6376082 6376278 6376634 6377343 6378473 6379347 6380777 6381747 6382704 6383377 6383971 6384456 6384640 6387080 6387189 6388092 6388230 6388243 6388766 6391505 6391515 6392159 6392644 6394888 6400307 6404983 6418529 6421617 6426382 6428199 6428403 6429293 6433752 6435723 6436535 6437635 6438408 6439519 6441402 6442651 6448255 6451182 6451285 6455812 6458771 6465691 6471388 6473494 6477953 6477981 6478972 6480026 6482272 6482560 6482816 6488468 6489275 6494886 6496892 6497487 6497690 6497870 6507264 6508015 6508084 6508092 6509623 6510957 6512624 6513358 6513362 6519021 6519551 6519839 6520528 6524399 6526460 6531111 6534216 6540248 6540809 6541955 6541968 6546233 6567841

Changes incorporated in this version:

6235473 6520528 4737204 6152655 6379347 6497690 6508015 6509623 6512624 6513358 6513362 6519021 6519551 6519839 6524399 6526460 6531111 6534216 6540248 6540809 6541955 6541968 6546233 6567841

Patches accumulated and obsoleted by this patch:

Patches which conflict with this patch: 

Required Patches:

Obsoleted by:

Files Included in this Patch: 

Note: 
121524-04.exe

Problem Description: 

6235473 Introduce the ability to change the permissions a directory is created with when using WebDAV.
6520528 WS 7.0: Problem with response.sendRedirect()
4737204 'wdeploy delete' improperly follows syslinks!!!
6152655 form-based auth webapp with file based session persistence suffers unexpected logouts
6379347 All Versions of WebServer6.1 crash on load, Access Manager deployed on the webserver
6497690 Problem having full URL for the search results , rather than relative  URL/URIs
6508015 getParameterNames() does not return non-parameterized names in query string
6509623 ws 6.1 sp7 : On Win XP/2003, the release notes from Release Notes shortcut doesn't open
6512624 GAT tests htaccess22, htaccess23, htaccess24 fails on windows for WS6.1sp7
6513358 Webserver RPP not handling chunked data
6513362 GAT test failures of webserver 6.1sp6 with JDK 6
6519021 6.1SP6: Admin server generated new virtual server class obj.conf has typo and errors inside
6519551 Issue in JDBC Connection Pool feature (may actually be in com.sun.enterprise.util.Utility.java)
6519839 Vulnerability with Web Server redirect functionality
6524399 ws 6.1 ldap servers needs to be changed to ws-ldap
6526460 ldap connection failure errors with WS6.1 SP7
6531111 htaccess AuthGroupFile should support empty files as equivalent to not specifying the directive
6534216 Update README,version string and License file for 6.1 SP8
6540248 Webserver 6.1 SP8 to be integrated with latest security bits
6540809 Checkin RPP testcases into ws6.1 RTM branch
6541955 Bringing HP-UX JES4 packaging from Porting Branch to RTM Branch
6541968 Bringing HP-UX JES4 patching from Porting Branch to ws6.1 RTM Branch
6546233 Update RPM spec and pkginfo file with SP8 release and version number.
6567841 Form auth bypass and JSP source code disclosure
 
(from 121524-03) 
6358858 HTTP4352: zlib internal error. Return code from zlib is -5
6292582 SNMP MIB for "iwsFractionSysMemUsage" not showing correct results for iws6.0 sp9
6384640 Restart while previous restart is in progress kills the webserver processes
6376082 Needs to provide support for JNDI Simple name, e.g. "jdbc/sample" as in App Server
6387189 Java Logging issues in a deployed module
6276594 Request body of PUT requests sent with the Transfer-encoding:chunked header is not read.
6428403 Crash when filtering static content
6442651 If the URL (from browser) to a web app contains URI params, then it causes recursive redirection
6392644 Incorrect URL in README.txt file supplied with iWS 6.0SP10/6.1SP6 along with RPP and fast cgi README
4856895 uxwdog process crashes on multiple CPUs machine during shutting down.
6455812 magnus.conf directive thread safety
6439519 SEGV in service_plain_range
6388092 RFE: /ns-icons gif image files cannot be displayed properly in IE
6382704 iWS 6.0SP9: Admin server unable to turn off "Monitor Web Server Statistics" -Admin GUI still monitor
6473494 PKCS#1 signature DigestInfo parsing problems in NSS
6384456 Ill-behaved web apps can crash Web Server
6488468 installer should not bundle jdk for hp platforms
6066230 Displaying buggy page numbers on the search results screen
6158040 Problem with migration from 4.1 to 6.1:related to missing JAVA parameter in server.xml file
6206179 WS6.1sp2: Internal log rotation rotates files twice if the system time was changed
6213097 ktsearch.jar is not getting migrated correctly on JES3
6315783 WS 6.1.5 point product: Links to search OLH lead to English pages on fr locale
6348395 sessionDestroyed is not called when session is invalidated with IWSSessionManager
6350502 Pragma and Cache-control headers cause interoperability problems
6367672 Problem restarting the server with restart script having MaxProcs > 1
6376035 Problem finding the library files while executing the standlone jsp file ( not webapp)
6380777 type=magnus-internal/cgi in mime.types can not add pl file suffix properly
6381747 Use of 'HttpSessionBindingListener' causes session to be expired incorrectly
6388766 Adminserver treat the japanese backslash differently in manupilating cgi shell directory on Windows
6392159 Servlet container hang on restart
6400307 Cluster Control functionality of Admin GUI breaks after adding a variable
6418529 i18n search: search pages content have a mix of both English and the other language
6421617 Problem having server-parsed HTML (ParseHTML) and .htaccess with restricted group option
6426382 compression filter flush call doesnot flush all buffer data
6428199 search filter failing due to "," (comma) in userid when such users are a member of a group
6429293 Security Vulnerability in web server 6.1 sample apps
6433752 ssl-check is not working with NSAPI based plugin
6435723 High CPU usage in Reverese Proxy Plugin - DaemonChannel::unchunk()
6436535 Server hangs on stop/restart when a connection is in the connection queue
6437635 WS 6.1SP5:Users with Revoked Client certificate can access WS instance                                                                                 
6438408 magt bundled with webserver 6.1sp5 leaks memory with each connection request
6441402 LDAP server configuration fails with iWS 6.1sp5 64 bit version
6448255 Windows 6.1sp5: file handle is not released by webservd process under certain conditions
6451182 high cpu utilization in parseParameters()
6451285 Failed assertion in 6.1 SP6 debug bits
6458771 watchdog can crash when ./start is executed before ./stop completes
6465691 Display problem with html page in <jsp:include> with tiles
6471388 Windows hidden shared network drives as document directories do not work                                                                                
6477953 windows: standalone web server modifies NSPR/NSS bits, breaking FIPS mode
6477981 FIPS140 mode is broken in standalone web server because chk files are missing
6478972 JDK shipped with WS 6.1SP6 not compatible with 2007 DST changes
6480026 some KA connections dont get closed after the specified time
6482272 SNMP master agent does not send traps when the web server instance operational status changes
6482560 web server crash with 1.4.2.09 + and 1.5.0.3+ HP JVMs
6482816 Web Server 6.1 SP5 Reverse Proxy Plugin replaces commas in a cookie header with semi-colons
6489275 Integrate webserver 6.1 with latest NSS
6494886 low-latency/high concurrency mode sometimes doesn't get switched dynamically as release note mention
6496892 WS installer should not bundle jdk for AIX platform
6507264 finer log shows in startup step although the default log level is INFO
6508084 webserver 6.1 sp7 License text refers to SP6 on all the platforms
6508092 Server startup fails in ws6.1 sp7 on HPUX platform, when installed through express/silent mode
6510957 pkginfo file on Solaris and RPM spec file point to old service pack(SP5) 
 
(from 121524-02)
4957123 Search Query Operators are not documented in Web Server 6.1 Admin Guide
4991884 Indexing a collection of files requiring conversion fails if total size is great
6197731 Internal Error on accessing Admin Server.
6246214 Search indexing hangs on large files
6279790 Preserve .pdb files for Windows debugging
6280778 PDF files unable to be indexed with WS 6.1 search on HP-UX with OS patch PHSS_28871 installed
6281323 Request to add Windows 2003 SP1 in the supported platform.
6285129 Using % in the value of jsp:param fails in some circumstances
6294743 update JSP search collection creates new tmp files
6302377 Servlet container UTF-8 URI mapping vulnerability
6312702 HttpServletResponse.reset() doesn't work as expected.
6316262 Admin GUI does not reflect change to accesslog path change
6316387 Web server does not respond correctly when handling the "if-unmodified-since" header
6316881 Multibyte characters in headers can't be retrieved by req.getHeader().
6318003 webserver sends back the actual content with 412 code for request with if-unmodified-since and range
6318200 Buffer overflow when formatting installer error messages
6318406 redeploy the webapp will causes ownership change on files
6324034 http post limit:-(
6326965 admin password in plain text in a file readable by anyone
6329109 WS6.1: lock file conflict for multiple installs running on the same port (but diff. ips)
6332442 Web Server on Linux will crash when Init fn="stats-init" is in magnus.conf
6334248 Windows 2003 mapped network drive not readable as a document_root dir
6335483 6.1 HPUX builds are stripped of their symbols
6336309 Problem with rewriting the special character in server.xml
6342394 Cron log rotation can create invalid archive logs with a specific instance name.
6343584 deadlock in keepalive subsystem caused by NSS blocking
6350122 iWS6.1SP5 on Windows Cron based log rotation failed with garbage inside scheduler.conf file
6353988 6.1sp4/sp5: Cannot set client trust or server trust on some built in CAs
6356179 AdminServer of web6.1 doesn't change the id of USERDB tag in server.xml.
6360180 crash in select 3 webapps/qa_app/jsp/encodedurlforwarder
6361485 htaccess not working in Web Server 6.1 SP5 for User Document Directories.
6364678 Reference to Sun ONE Studio in the WebServer documents needs to be updated.
6367812 Doc RFE: add infodoc 76202 into online doc for iWS 6.1 SPx
6370001 Change service pack version number, README file, License File and Linux RPM version for new patches
6370089 Integrate Webserver 6.1 SP6 to NSS 3.11
6376278 HP-UX gat -setup fails.
6378473 validate-server-cert should be set to true in order to avoid MITM attacks.
6383377 Release note 64-bit Fast CGI, RPP and JWSDP support in 6.1 Sp6
6383971 Release note the requirement of AIX update patch 5100-09 for 6.1 SP6
6387080 GAT select 2 and 6 has failures
6388230 GAT search select 14 is hanging on solaris
6388243 Installing a CRL on WS 6.1SP4 (Windows) adds it to the CKLs section in the GUI
6391505 Document config file writability, root security risks, and Solaris net_privaddr privilege
6391515 JES4:win: WS Release note have typo and non releated information.
6394888 Memory leak
6404983 Searching of Users and Groups through LDAP server using AdminGUI is failing
6376634 magnus.conf directives SSL3SessionTimeout and SSLSessionTimeout broken
6377343 need to support newer critical extensions, e.g. PolicyConstraints, etc in RFC3280
6497487 HP-UX: Remove shared component dependency from patch psf for HP-UX for WS6.1SP6
6497870 HP-UX : Generation of Readme file based on Readme template for WS6.1 HP-UX Patch

Revision History: 

121524-01 121524-03

Patch Installation Instructions: 

-------------------------------- 
To Install the patch:
1. Add NSPR/NSS patchid 124392-03 before installing webserver patch
2. Unzip the contents of patch-id.zip file.
2. Invoke the setup launcher (121524-04.exe) to install the patch.
3. Refer to patch installtion log  %TEMP%SUNJAVAES-<patch-id>.log for details.
 
To Remove the patch:
1. Invoke the Uninstall_121524-04.bat which is available in the patch-id.zip

Special Install Instructions: 

-----------------------------

README -- Last modified date:  Monday, May 5, 2008