OBSOLETE Patch-ID# 138686-03


Download this patch from My Oracle Support

Your use of the firmware, software and any other materials contained in this update is subject to My Oracle Support Terms of Use, which may be viewed at My Oracle Support.
For further information on patching best practices and resources, please see the following links:
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.

Keywords: java_es-5 portal server security
Synopsis: Obsoleted by: 138686-04 Portal Server 7.2 Solaris (sparc): Maintenance Patch
Date: Jun/30/2009


Install Requirements: See Special Install Instructions

Solaris Release: 9 10

SunOS Release: 5.9 5.10

Unbundled Product: Portal Server

Unbundled Release: 7.2

Xref: This patch available for i386 as patch 138687-03

Topic: Portal Server

Relevant Architectures: sparc

Bugs fixed with this patch:

Sun CR # Bug #
659820412210606
667109112229575
668040112232197
669060712235030
672348012243196
675003612248425
675462912249470
675510212249547
675873112250361
679926912260873
681218012263812
682574912266829
682579012266847
683841212269708
684350112270795


Changes incorporated in this version: 6754629 6598204 6812180 6843501 6838412

Patches accumulated and obsoleted by this patch:

Patches which conflict with this patch:

Patches required with this patch:

Obsoleted by:

Files included with this patch:

/opt/SUNWportal/bin/gateway
/opt/SUNWportal/lib/SRAversion.properties
/opt/SUNWportal/lib/desktop.jar
/opt/SUNWportal/lib/gateway.jar
/opt/SUNWportal/lib/ps_util.jar
/opt/SUNWportal/lib/ubt.jar
/opt/SUNWportal/lib/ubtreport.jar
/opt/SUNWportal/portletapps/filesharing/src/filesharing.war.tokenized
/opt/SUNWportal/template/themeExtension.list
/opt/SUNWportal/web-src/WEB-INF/classes/PortalThemeServlet.class
/opt/SUNWportal/web-src/WEB-INF/xml/communitysampleweb.xml
/opt/SUNWportal/web-src/netfile/nfuijava2.jar
/opt/SUNWportal/web-src/netlet/jnlpclient.jar
/opt/SUNWportal/web-src/netlet/netletdetect.jar
/opt/SUNWportal/web-src/netlet/netletjsse.jar
/opt/SUNWportal/web-src/proxylet/downloadmgrlite.jar
/opt/SUNWportal/web-src/proxylet/jnlpclient.jar
/opt/SUNWportal/web-src/proxylet/jwsdetect.jar
/opt/SUNWportal/web-src/proxylet/proxyletapplet.jar
/opt/SUNWportal/web-src/proxylet/proxyletscript.jar
/opt/SUNWportal/web-src/proxylet/regx-win32-native.jar
/opt/SUNWportal/admin/psconsole.war

Problem Description:

6754629 Gateway generated URL contains internal port when scheme is null in a request
6598204 User's role is changed but channels from previous role exists 
6812180 com.sun.portal.desktop.DesktopException:attempt to reference unknown channel
6843501 File Sharing portlet does not use max file size parameter
6838412 Portal Gateway ignores "Login Success URL"
 
(from patch release 02)
 
6750036 XSS vulnerability in SUN ONE Portal error page 
6758731 Patchshould contain details about install procedure for Dist.Env
6799269 Expired netlet applet certificate
6825749 Gateway virtual hosting is not working as expected
6825790 Rwproxy checkacl is not functional and always denies access
 
(from patch release 01)
 
6723480 Downed rwproxy produces endless flood of messages and prevents effected user sessions from continuing
6755102 gateway in dmz connects to LDAP during startup 
6680401 PDC not working when AM and PS are not colocated
6671091 Gateway custom HTTP-Headers missing when log in via PDC
6690607 Portal Server UBT Log file DB Connectivity breaks after long idle activity.


Patch Installation Instructions:
--------------------------------
1) Root privileges are required to install patches. Change user to root if not
   already a root user.
 
2) Enter the directory where patches are available.
 
   If patches are available in /export/<patch-id>...
   example#  cd /export
 
3) Install the patch.
 
   example# patchadd <patch-id>
 
4) Verify that the Web Container's JVM setting for MaxPermSize is
   set to at least 300M, i.e.:
 
     -XX:MaxPermSize=300M
 
 
   Use the following "asadmin" commands to verify, and if necessary, modify 
   the JVM settings for all instances involved with Portal web application deployment:
 
      * get
 
        Hint:  asadmin get -u <admin> <instance-name>.java-config.jvm-options
        If your deployment is sharing the DAS' web container, <instance-name>
        is "server".
 
      * delete-jvm-options
      * create-jvm-options
 
      Refer to the following for more information regarding "asadmin" commands:
 
      http://docs.sun.com/app/docs/doc/819-3671/gcode?a=view
 
5) Restart Web Container
 
6) Verify that the community database is running.  If Java DB is hosting
   the community database, and if it is not already running, you may
   issue the commands described in:
 
   http://docs.sun.com/app/docs/doc/820-2053/geklx?l=en&q=java+db&a=view
 
7) Restart Common Agent Container
 
   example# /usr/lib/cacao/bin/cacaoadm restart
 
8) Confirm that Common Agent Container is running
 
   example# /usr/lib/cacao/bin/cacaoadm status
   This command should return uptime like 'Uptime: 0 day(s), 0:1' .
   If Common Agent Container is not started, wait for sometime and run status
   command again, until it returns Uptime.
 
9) Run psupdate script.
 
   example# <PS_PROD_DIR>/bin/psupdate -a
   where <PS_PROD_DIR> is the Portal Server product directory.
 
10) Restart Common Agent Container and web container.
 
11) Read the Patch Release Notes. After the instalation these are available at :
   http://{portal_server.domain}:{portal_server.port}/portal/PS7.2patchRN


Special Install Instructions:
0


README -- Last modified date: Saturday, November 10, 2012