Patch-ID# 116287-10
Keywords: solaris security
Synopsis: Sun One Application Server Unbundled Core Patch _x86
Date: Jun/02/2004


Install Requirements: None                      
                      
Solaris Release: 9_x86

SunOS Release: 5.9_x86

Unbundled Product: Sun One Application Server

Unbundled Release: 7.0_x86

Xref: This patch available for SPARC as patch 116286

Topic: Sun One Application Server Unbundled Core Patch _x86

Relevant Architectures: i386

BugId's fixed with this patch: 4724728 4776091 4811431 4818853 4819412 4830338 4849513 4851218 4853543 4860400 4861767 4861948 4862994 4869664 4870233 4884552 4886253 4886683 4888612 4890613 4892587 4893954 4895814 4902210 4904100 4904764 4907283 4909380 4909796 4910686 4913290 4913458 4914362 4917206 4922884 4925548 4926972 4928341 4930027 4930986 4931379 4933997 4937416 4937667 4938319 4942044 4942341 4942381 4947231 4949318 4950035 4954609 4958393 4958395 4962225 4965713 4969036 4978369 4978647 4980136 4980660 4987217 4996111 5004406

Changes incorporated in this version: 

Patches accumulated and obsoleted by this patch: 116785-02

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/opt/$ASCONFDIR/appserv.lic
/opt/$ASCONFDIR/asenv.conf
/opt/$ASINSTDIR/LICENSE.txt
/opt/$ASINSTDIR/README.txt
/opt/$ASINSTDIR/SunONE/appserv-ideplugin.jar
/opt/$ASINSTDIR/docs/about.html
/opt/$ASINSTDIR/include/nsapi.h
/opt/$ASINSTDIR/include/nspr/prinit.h
/opt/$ASINSTDIR/lib/adminapp.ear
/opt/$ASINSTDIR/lib/admincgi/avaedit
/opt/$ASINSTDIR/lib/admincgi/calcount
/opt/$ASINSTDIR/lib/admincgi/dnedit
/opt/$ASINSTDIR/lib/admincgi/doauth
/opt/$ASINSTDIR/lib/admincgi/domodify
/opt/$ASINSTDIR/lib/admincgi/dosearch
/opt/$ASINSTDIR/lib/admincgi/dsconfig
/opt/$ASINSTDIR/lib/admincgi/dsexpldif
/opt/$ASINSTDIR/lib/admincgi/dsimpldif
/opt/$ASINSTDIR/lib/admincgi/edit
/opt/$ASINSTDIR/lib/admincgi/genscreen
/opt/$ASINSTDIR/lib/admincgi/getlang
/opt/$ASINSTDIR/lib/admincgi/install
/opt/$ASINSTDIR/lib/admincgi/rename
/opt/$ASINSTDIR/lib/admincgi/sec-migrate
/opt/$ASINSTDIR/lib/admincgi/security
/opt/$ASINSTDIR/lib/admincgi/setlang
/opt/$ASINSTDIR/lib/admincgi/snmpcomm
/opt/$ASINSTDIR/lib/admincgi/viewacc
/opt/$ASINSTDIR/lib/admincgi/viewerr
/opt/$ASINSTDIR/lib/admingui.ear
/opt/$ASINSTDIR/lib/appserv-admin.jar
/opt/$ASINSTDIR/lib/appserv-agt
/opt/$ASINSTDIR/lib/appserv-cmp.jar
/opt/$ASINSTDIR/lib/appserv-ext.jar
/opt/$ASINSTDIR/lib/appserv-jstl.jar
/opt/$ASINSTDIR/lib/appserv-rt.jar
/opt/$ASINSTDIR/lib/appserv-tags.jar
/opt/$ASINSTDIR/lib/appservd-wdog
/opt/$ASINSTDIR/lib/install/applications/adminapp/adminapp.war
/opt/$ASINSTDIR/lib/install/applications/admingui/adminGUI_war/WEB-INF/lib/admingui-jsp.jar
/opt/$ASINSTDIR/lib/install/applications/admingui/adminGUI_war/WEB-INF/lib/admingui.jar
/opt/$ASINSTDIR/lib/install/applications/admingui/adminGUI_war/com/iplanet/ias/admin/server/gui/help/hsacled.html
/opt/$ASINSTDIR/lib/install/applications/admingui/adminGUI_war/help/hsacled.html
/opt/$ASINSTDIR/lib/install/templates/asenv.conf.template
/opt/$ASINSTDIR/lib/install/templates/index.html
/opt/$ASINSTDIR/lib/install/templates/rotate
/opt/$ASINSTDIR/lib/install/templates/server.xml.template
/opt/$ASINSTDIR/lib/install/templates/server.xml.template.admin
/opt/$ASINSTDIR/lib/install/templates/stop
/opt/$ASINSTDIR/lib/instancecgi/classindex
/opt/$ASINSTDIR/lib/instancecgi/custsig
/opt/$ASINSTDIR/lib/instancecgi/dirmap
/opt/$ASINSTDIR/lib/instancecgi/index
/opt/$ASINSTDIR/lib/instancecgi/pubinfo
/opt/$ASINSTDIR/lib/instancecgi/version
/opt/$ASINSTDIR/lib/instancecgi/viewacc
/opt/$ASINSTDIR/lib/instancecgi/viewerr
/opt/$ASINSTDIR/lib/instancecgi/vsindex
/opt/$ASINSTDIR/lib/libcis.so
/opt/$ASINSTDIR/lib/libinstallCore.so
/opt/$ASINSTDIR/lib/libj2eeplugin.so
/opt/$ASINSTDIR/lib/libns-httpd40.so
/opt/$ASINSTDIR/lib/libpassthrough.so
/opt/$ASINSTDIR/lib/messages/cgi-src40_root.res
/opt/$ASINSTDIR/lib/messages/cgi-src_root.res
/opt/$ASINSTDIR/lib/messages/newadmin1_root.res
/opt/$ASINSTDIR/lib/messages/newadmin_root.res
/opt/$ASINSTDIR/lib/sun-appserv-ant.jar
/opt/$ASINSTDIR/modules/appsrvSUN.jar
/opt/$ASINSTDIR/modules/docs/appsrvSUN.jar
/opt/$ASINSTDIR/pkg/SUNWaslco/install/copyright
/opt/$ASINSTDIR/pkg/SUNWaslco/pkginfo
/opt/$ASINSTDIR/pkg/SUNWaslco/pkgmap
/opt/$ASINSTDIR/samples/connectors/cci/cci.ear
/opt/$ASINSTDIR/samples/connectors/cci/cciblackbox-tx.rar
/opt/$ASINSTDIR/samples/connectors/simple/backend.jar
/opt/$ASINSTDIR/samples/connectors/simple/comet.ear
/opt/$ASINSTDIR/samples/connectors/simple/comet.rar
/opt/$ASINSTDIR/samples/dukesbank/DukesBankApp.ear
/opt/$ASINSTDIR/samples/ejb/bmp/enroller/bmp-enroller.ear
/opt/$ASINSTDIR/samples/ejb/bmp/order/bmp-order.ear
/opt/$ASINSTDIR/samples/ejb/bmp/robean/bmp-robean.ear
/opt/$ASINSTDIR/samples/ejb/bmp/salesrep/bmp-salesrep.ear
/opt/$ASINSTDIR/samples/ejb/bmp/savingsaccount/bmp-savingsaccount.ear
/opt/$ASINSTDIR/samples/ejb/bmp/simple/bmp-simple.ear
/opt/$ASINSTDIR/samples/ejb/cmp/roster/cmp-roster.ear
/opt/$ASINSTDIR/samples/ejb/cmp/simple/cmp-simple.ear
/opt/$ASINSTDIR/samples/ejb/mdb/simple/mdb-simple.ear
/opt/$ASINSTDIR/samples/ejb/stateful/simple/stateful-simple.ear
/opt/$ASINSTDIR/samples/ejb/stateless/checker/stateless-checker.ear
/opt/$ASINSTDIR/samples/ejb/stateless/converter/stateless-converter.ear
/opt/$ASINSTDIR/samples/ejb/stateless/simple/stateless-simple.ear
/opt/$ASINSTDIR/samples/ejb/subclassing/subclassing.ear
/opt/$ASINSTDIR/samples/i18n/simple/i18n-simple.ear
/opt/$ASINSTDIR/samples/i18n/simple/src/samples/i18n/simple/servlet/ForwardedServlet.java
/opt/$ASINSTDIR/samples/i18n/simple/src/samples/i18n/simple/servlet/IncludedServlet.java
/opt/$ASINSTDIR/samples/i18n/simple/src/samples/i18n/simple/servlet/LocaleCharsetServlet.java
/opt/$ASINSTDIR/samples/i18n/simple/src/samples/i18n/simple/servlet/SimpleFilter.java
/opt/$ASINSTDIR/samples/i18n/simple/src/samples/i18n/simple/servlet/SimpleFilterServlet.java
/opt/$ASINSTDIR/samples/i18n/simple/src/samples/i18n/simple/servlet/SimpleI18nServlet.java
/opt/$ASINSTDIR/samples/javamail/simple/javamail-simple.ear
/opt/$ASINSTDIR/samples/jdbc/blob/jdbc-blob.ear
/opt/$ASINSTDIR/samples/jdbc/simple/jdbc-simple.ear
/opt/$ASINSTDIR/samples/jdbc/transactions/jdbc-transactions.ear
/opt/$ASINSTDIR/samples/jms/queue/simple/queueSample.ear
/opt/$ASINSTDIR/samples/jms/soaptojms/simple/SOAPtoJMSMessageSample.jar
/opt/$ASINSTDIR/samples/jms/topic/simple/topicSample.ear
/opt/$ASINSTDIR/samples/jndi/url/jndi-url.ear
/opt/$ASINSTDIR/samples/lifecycle/jdbc/lifecycle-jdbc.jar
/opt/$ASINSTDIR/samples/lifecycle/multithreaded/lifecycle-multithreaded.jar
/opt/$ASINSTDIR/samples/lifecycle/rmiserver/lifecycle-rmiserver.jar
/opt/$ASINSTDIR/samples/lifecycle/simple/lifecycle-simple.jar
/opt/$ASINSTDIR/samples/logging/simple/logging-helloworld.ear
/opt/$ASINSTDIR/samples/nsapi/docs/index.html
/opt/$ASINSTDIR/samples/packaging/pkgingA/pkgingAApp.ear
/opt/$ASINSTDIR/samples/packaging/pkgingB/pkgingBApp.ear
/opt/$ASINSTDIR/samples/packaging/pkgingD/pkgingDApp.ear
/opt/$ASINSTDIR/samples/packaging/pkgingE/pkgingEApp.ear
/opt/$ASINSTDIR/samples/petstore1.3_01/opc.ear
/opt/$ASINSTDIR/samples/petstore1.3_01/petstore.ear
/opt/$ASINSTDIR/samples/petstore1.3_01/petstoreadmin.ear
/opt/$ASINSTDIR/samples/petstore1.3_01/src/apps/petstore/src/docroot/ja/order_completed.jsp
/opt/$ASINSTDIR/samples/petstore1.3_01/src/apps/petstore/src/docroot/order_completed.jsp
/opt/$ASINSTDIR/samples/petstore1.3_01/supplier.ear
/opt/$ASINSTDIR/samples/rmi-iiop/cpp/src/client/javax/ejb/Makefile
/opt/$ASINSTDIR/samples/rmi-iiop/cpp/src/client/samples/rmi_iiop/cpp/ejb/Makefile
/opt/$ASINSTDIR/samples/rmi-iiop/simple/rmi-simple.ear
/opt/$ASINSTDIR/samples/security/realms/rdbms/jdbcsecurity.jar
/opt/$ASINSTDIR/samples/smartticket1.1.1/bin/ejb_client.jar
/opt/$ASINSTDIR/samples/smartticket1.1.1/bin/ejb_st.jar
/opt/$ASINSTDIR/samples/smartticket1.1.1/bin/smarticket.ear
/opt/$ASINSTDIR/samples/smartticket1.1.1/bin/web_st.war
/opt/$ASINSTDIR/samples/transactions/ejb/bmt/simple/transactions-globalbmt.ear
/opt/$ASINSTDIR/samples/transactions/ejb/bmt/teller/transactions-teller.ear
/opt/$ASINSTDIR/samples/transactions/ejb/cmt/bank/transactions-bank.ear
/opt/$ASINSTDIR/samples/transactions/ejb/cmt/simple/transactions-globalcmt.ear
/opt/$ASINSTDIR/samples/transactions/web/simple/transactions-globalweb.ear
/opt/$ASINSTDIR/samples/webapps/bookstore/bookstore1/bookstore1.ear
/opt/$ASINSTDIR/samples/webapps/bookstore/bookstore2/bookstore2.ear
/opt/$ASINSTDIR/samples/webapps/caching/webapps-caching.war
/opt/$ASINSTDIR/samples/webapps/jstl/webapps-jstl.war
/opt/$ASINSTDIR/samples/webapps/security/basic-auth/WebBasicApp.ear
/opt/$ASINSTDIR/samples/webapps/security/form-auth/WebFormauthApp.ear
/opt/$ASINSTDIR/samples/webservices/cb/cbserver.war
/opt/$ASINSTDIR/samples/webservices/cb/jaxm-client.jar
/opt/$ASINSTDIR/samples/webservices/cb/jaxm-coffee-supplier.war
/opt/$ASINSTDIR/samples/webservices/cb/jaxr-org.jar
/opt/$ASINSTDIR/samples/webservices/cb/jaxrpc-client.jar
/opt/$ASINSTDIR/samples/webservices/cb/jaxrpc-coffee-supplier-portable.war
/opt/$ASINSTDIR/samples/webservices/cb/jaxrpc-coffee-supplier.war
/opt/$ASINSTDIR/samples/webservices/jaxm/jaxm-provider/jaxm-provider.war
/opt/$ASINSTDIR/samples/webservices/jaxm/jaxm-provideradmin/jaxm-provideradmin.war
/opt/$ASINSTDIR/samples/webservices/jaxm/jaxmtags/jaxmtags.war
/opt/$ASINSTDIR/samples/webservices/jaxm/saaj-simple/saaj-simple.war
/opt/$ASINSTDIR/samples/webservices/jaxm/simple/jaxm-simple.war
/opt/$ASINSTDIR/samples/webservices/jaxm/soaprp/jaxm-soaprp.war
/opt/$ASINSTDIR/samples/webservices/jaxm/translator/jaxm-translator.war
/opt/$ASINSTDIR/samples/webservices/jaxr/jaxrClient.jar
/opt/$ASINSTDIR/samples/webservices/jaxrpc/dynamic/jaxrpc-dynamic-portable.war
/opt/$ASINSTDIR/samples/webservices/jaxrpc/dynamic/jaxrpc-dynamic.war
/opt/$ASINSTDIR/samples/webservices/jaxrpc/dynamic/jaxrpc-dynamicClient.jar
/opt/$ASINSTDIR/samples/webservices/jaxrpc/proxy/jaxrpc-proxy-portable.war
/opt/$ASINSTDIR/samples/webservices/jaxrpc/proxy/jaxrpc-proxy.war
/opt/$ASINSTDIR/samples/webservices/jaxrpc/proxy/jaxrpc-proxyClient.jar
/opt/$ASINSTDIR/samples/webservices/jaxrpc/simple/jaxrpc-simple-portable.war
/opt/$ASINSTDIR/samples/webservices/jaxrpc/simple/jaxrpc-simple.war
/opt/$ASINSTDIR/samples/webservices/jaxrpc/simple/jaxrpc-simpleClient.jar
/opt/$ASINSTDIR/samples/webservices/jaxrpc/simplebean/jaxrpc-simplebean-portable.war
/opt/$ASINSTDIR/samples/webservices/jaxrpc/simplebean/jaxrpc-simplebean.war
/opt/$ASINSTDIR/samples/webservices/jaxrpc/simplebean/jaxrpc-simplebeanClient.jar
/opt/$ASINSTDIR/samples/webservices/jaxrpc/toejb/GreetingApp.ear
/opt/$ASINSTDIR/samples/webservices/jaxrpc/toejb/jaxrpc-toejb.ear
/opt/$ASINSTDIR/samples/webservices/jaxrpc/toejb/jaxrpc-toejbClient.jar
/opt/$ASINSTDIR/samples/xml/xslt/xslt-samples.jar

Problem Description:

This patch revision created to address patch construction issues.
 
(from 116287-09)
 
This patch revision created to address patch construction issues.
 
(from 116287-08)
 
4996111 webcore memory growth
 
(from 116287-07)
 
4978647 Petstore: org.apache.jasper.JasperException: Unable to compile class for JSPNote
4987217 REG in UR3 JSP compiler
 
(from 116287-06)
 
4724728	Redefined finder methods in spr/subclass home intfs duplicated in generated code
4776091	MSTR: CLI -License key with leading and trailing spaces not honored 
            (Problems exists in RMT)
4811431	cannot access a web module if the location attribute in server.xml ends in /
4818853	LocalTransaction association with ManagedConnection not preserved between EJBs
4819412	i18n "is not valid entry" is hard-coded
4830338	Korean characters in cookie not working
4849513	dynamic reloading does not pick up changes to sun-application.xml
4851218	DOC: unable to install self-signed certificate
4853543	MODEL: should allow for PK class to have inherited fields
4860400	EJB Classloader returns null when calling Class.getPackaged()
4861767	SECURITY BUG FIX:Accept language issue (SB)
4861948	getEJBMetaDATA0 fails with exception after context re-initialized
4862994	Domain Creation fails on RedHat 9 (New Linux version support)
4869664	two-byte characters cause problems in the http GET URLs
4870233	JSP with page directive "buffer=none" does not work when using s1as7.0
4884552	SECURITY BUG FIX: auth-method=CLIENT-CERT forces the SSL client auth regardless
	      of uri-pattern
4886253	unable to retrieve X509 Client Certificate behind a pass through proxy listener
4886683	S1AS7:UR2 installation on Win2003 enterprise throws "Unsupported platform 
             (New Windows OS Version support)
4888612	failed to start server instance after installing eval build on X86 
             (New Eval installer for X86)
4890613	UR2 Linux installer not upgrading existing JDK
4892587	SECURITY BUG FIX: S1AS7 does not enforce "grant signed by" policy
4893954	Rotate logs script causes watchdog process to die, and all other app server processes
4895814	request getRequestUR1() returning inconsistent values
4902210	REG: incorrect support JDK version provided in java config page
4904100 At S1AS7 SE, rich client always sees an exception
4904764	could not stop the admin-server when running Redhat 8.0
	     (New Red Hat OS version support)
4907283	code fix as in lWs60SP5 for Bugid 4846815 to S1AS7
4909380	Orion Uninstall of unbundled AS7 pkg-based product removes shared components
4909796	UR2: Upgrade installer fails if JDK used by S1AS is at non-default location
4910686	app-server does lazy auth even if http port is not client auth enabled
4913290	form-based authentication does not provide the same functionality as in iAS6.x
4913458	web container thread names are not unique
4914362	SECURITY BUG FIX: enabling WebPub or Remote File Manipulation allows any user 
             to obtain a director (SB)
4917206	unable to set ACL for anything but entire server through admin GUI
4922884	Web Service invocation from JAXRPC client throws Internal Server Error
4925548	Exceptionininitializer Error with JDK 1.4.2
4926972	S1AS-UR2-Bld3: eval upgrade: error about lmissing archive file during upgrade
4928341	using chunk data causes endless loop/high CPU in appserver (SB)
4930027	app server performance problem with jsp:useBean
4930986	throw appropriate error msg when abrupt termination of upgrade corrupts pkgs
4931379	SECURITY BUG FIX: S1AS 7.0 U1 crases when AS_NSS points to /usr/lib/mps/secv1
	     in Orion1_B09 +
4933997	app server startup problems after upgrade on Linux (iMQ upgrade)
4937667	upgrade script to use the same packages that complete install
4937416	SECURITY BUG FIX:  User Principle class throws ClassCastException
4938319	RN: Online doc: Need to document the workaround for escalation 548517
4942044	migrating NSS/NSPR from 3.3.4 t0 3.3.6
4942341	code generated for <jsp:useBean> differs based on class or beanName attr usage
4942381	could not initialize ORB monitoring
4947231	libpassthrough.so(AS7.0-UR3) causes WS6.1 to crash on x86 Solaris Keywords
4949318	Reg: Petstore sample deployment failed on Windows 2000 advanced server
4950035	Performance Tuning doc refers to both obj.conf and <instance_name>-obj.conf
4954609	-passwordfile doesn't work on Appserver 7.0MU1 create-domain
4958393	ServletContext.getContex(String) does not return other contexts
4958395	Reg: not able to install mainstream build if an eval build pre-installed on windows
4962225	RN: we should remove Smartticket sample on X86.
4965713	SECURITY BUG FIX:  LDAP: user can enter wildcard '*' for UID in basic auth
              (WEbserver:4957829)
4969036	SECURITY BUG FIX:  regression: after entering username/password appserver
              changing URI
4978369	SECURITY BUG FIX: flex log buffer overflow
4980136 SolSparc: 7.0.0_03 UR3 B02-Upgrade script fails while adding SUNWpr package
4980660 SOAP server array DoS
 
(from 116287-05)
(from 116287-04)
(from 116287-03)
(from 116287-02)
(from 116287-01)
 
(116785-02)
 
This patch revision created to address patch construction issues.
 
(116785-01)
 
5004406 --passwordfile does not work with mix of upper/lowercase characters

Patch Installation Instructions:
-----------------------------------------------
Refer to the man pages for instructions on using 'patchadd' and
'patchrm' scripts provided with Solaris, to install and remove patches.

Special Install Instructions:
-----------------------------------------
During the installation of this patch, existing files which may have been
customized will be saved before being updated. When this occurs, the saved
file should be compared to the updated file and any customizations
will have to be merged back into the updated file.
 
Customizable files which are saved during the installation of the patch
will be identified by the message:
 
   EXISTING_FILE_SAVED_TO_OLD: <file> <file>.old
 
A list of these messages will also be written to the file /tmp/CLEANUP.
After the customizations have been merged, the /tmp/CLEANUP file should
be removed.
 
 
If the patch is removed, the customizable files are NOT restored.
Therefore it is not advised to remove this patch without familiarity
of customizable files.

README -- Last modified date:  Wednesday, June 2, 2004

