Patch-ID# 147674-11

24763693 problem with Oracle Java Web Console
 
(from 147674-10)
 
20631272 wcadmin should also use TLSv1 instead SSLV3
 
(from 147674-09)
 
19197013 OSC 3.x GUI, exposes port 6788 unsecure port while it is not utilizing it
19830852 problem with Oracle Java Web Console
 
(from 147674-08)
 
16799455 problem with Oracle Java Web Console
 
(from 147674-07)
 
16177514 Non-Persistent Cross-Site Scripting (XSS)
 
(from 147674-06)
 
7203151 lack of functionality in patch 147673-05/147674-05
 
(from 147674-05)
 
7191813 patch 147673-04/147674-04 should delete old files in Web Console 3.0.2 as patch 125952-20
 
(from 147674-04)
 
7133659 problem with Oracle Java Web Console
7162359 problem with Oracle Java Web Console
 
(from 147674-03)
 
6993452 problem with Oracle Java Web Console
 
(from 147674-02)
 
7011217 problem with Oracle Java Web Console
 
(from 147674-01)
 
7100413 integrate Lockhart 3.1 on Solaris 10 Admin Gate
 
(from 125953-20)
 
6886380 CR 6723096 is unresolved when applying 125952-19/125953-19 to a live system that is in DAP context
6885562 CR 6735967 does not look to be resolved when installing 125952-19 via cluster install scripts
6886378 125952-19/125953-19 patch level scripting noise on applying/removing patch from sparse zone
6925641 Web Console branding must be changed to match Oracle brand
6936053 MiniButtons appear concatenated in IE7/8
15517758 cross-site scripting (XSS) vulnerability reported in two Sun Java Web Console help jsp scripts
 
(from 125953-19)
 
6735967 svc:/system/webconsole:console get stuck in stop/restart after upgrade
6706657 Web Console 3.1 timeout mechanism does not refresh the browser window
6707908 Lockhart 3.1 base console packages for Solaris 11 fails to install
6716572 blank left panel in SunMC 4.0 Web Console
6723096 webconsole SMF service thrashes after applying patch 125952-16/17 & 125953-16/17
6746984 SUNWmconr should not bundle their own i.manifest/r.manifest
6751843 /usr/sbin/shutdown -y -g0 -i6 does not shutdown the system
6750988 rendering in Topology Example in Tag Library Examples is unstable
6795085 errors while installing JWC 3.1
 
(from 125953-18)
 
6722988 SBD for JWC services to run local only seem to be undone
6731783 /console/faces/jsp/login/BeginLogin.jsp (redirect_url takes arbitrary URLs)
6734398 cc.tld is not compliant to web-jsptaglibrary_1_1.dtd
6707645 no "Help" button available (admin privilege only) when trying to access outside a firewall
6723375 125952-16/17, 125953-16/17 need metadata and README corrections
 
(from 125953-17)
 
6711704 regression on Sun Java Web Console rev-16
6701378 registrationservlet.jar location incorrectly moved for 3.1
6698750 pkg copyright for 3.1 nv console packages must be updated to 2008
 
(from 125953-16)
 
6337359 smcwebserver needs to be integrated with SMF
 
(from 125953-15)
 
6450888 JavaHelp2.0 window is not doing context switching for help links
6516563 wcswap allows for swap to Application Server 9.0_01
6584097 adding domain to host declaration causes IOexceptions with context sensitive help
6590211 support Tomcat 6.0.xx
6599508 add console backing bean support for Woodstock components
6601685 add support for Woodstock product name image generation to the console
6602377 provide Woodstock files in console for importing into web applications
6607328 rewrite console Launch page using Woodstock common task components
6615419 Jato-based component classes do not build with 1.5 bytecodes
6618691 no longer need file:// syntax when adding a specific jar file to shared.loader property
6624316 explicitly set JVM GC threads to smaller value
6651143 upgrade console JSF 1.2 libraries
6651215 deprecate the Jato-based component set
6652790 console webapp does not show branded images
6654174 3.1 console help popup missing masthead and close button
6668535 Jato-based components do not compile with JDK 1.6
6673821 Sun Java Web Console 3.1: support for Application Server 8.2 EE Patch does not work with sparse zone
 
(from 125953-14)
(from 125953-13)
(from 125953-12)
(from 125953-11)
(from 125953-10)
(from 125953-09)
(from 125953-08)
 
        Revisions skipped.
 
(from 125953-07)
 
6619279 economize console start and stop times
6614074 adminverifier needs to bracket its privileges
6609812 cc_service JNI library fails on SuSe Linux - invalid functions to get uid and gid
6541878 system/webconsole files to start with high stress
6633825 the following directory /var/webconsole/tmp should have the sticky bit set
6608118 Sun Java Web Console outputs garbage character in ja_JP.PCK and ja_JP.eucJP locales
6623857 smreg records deferred changes to the current root and not the alternate root
6628812 change version number for micro release 3.0.5
 
(from 125953-06)
 
6530724 XSS vulnerability in Sun Java Access Manager
6590101 Web Console fails to start - no applications loaded before timeout period on very slow systems
6591633 context help popup window always displays default-content HTML file
6563904 Lockhart auditing should be updated to use new login record format
 
(from 125953-05)
 
6569221 change the value of SUNW_PRODVERS of patch to be 3.0.3 to enable upgrade installs over S10U3
6544801 WS70u1: button label (name) is not located in the center of the button on IE7 src/bundled/app/webmgt/webapps/com_sun_web_ui/css/css_ie6up.css
 
(from 125953-04)
 
6534399 3.0.2 console patches should update the version string to 3.0.3
6563091 upload filter changes can cause incompatibility for console web applications
6563667 wrong or incomplete errors returned from parsing context XML files for Tomcat web server
 
(from 125953-03)
 
6515040 wcadmin -V version doesn't contain the "Java"
 
(from 125953-02)
 
6519423 configuring for AS does not copy console policy file
6527115 default web.xml template file for sjsas does not disable JSP tag pooling (tag caching)
6531703 update console jars to components 3.0.3
6526812 Secure-by-Default not supported when using App Server as container
6534701 3.0.2 console patch missing install.info file
6540441 JES5U1 b2 post install wcswap fails due to missing /service.properties
6515994 wcswap port switch accepts alphanumeric characters\ src/bundled/app/webmgt/bin/wcswap
6534421 3.0.3 patch -- error copying domain template on Linux - start domain \failed, server cannot start
 
(from 125953-01)
 
6516483 wcswap -o options does not account for adding options, only replacing them
6486816 webconsole service in maintenance after upgrade
6491335 console stop command should make sure jars on shared class path still exist
6496980 SUNWmcon depends on SUNWtcatu, but SUNWtcatu not in JES5
6498276 remove dependency on display being set for build to succeed
6498951 smreg add -l -s ALL doesn't write valid location to legacy regnot file
6505096 security vulnerability in Sun Java Web Console
6514835 update the console version to 3.0.3
6515895 wcswap error message has typos
6515930 wcswap usage should not indicate that -t tomcat -d tomcatinstalldir allowed
6519616 reset smf timeout to 10 minutes to accommodate lower end machines
6521511 undesirable messages printed to terminal when Lockhart console starts
6529094 wcswap used without container type, errors out saying config.properties missing; should post help

--------------------------------
 
Please refer to the man pages for instructions on using 'patchadd'
and 'patchrm' commands provided with Solaris.
 
The following example installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/123456-07
 
The following example removes a patch from a standalone system:
 
       example# patchrm 123456-07
 
For additional examples please see the appropriate man pages. Any
other special or non-generic installation instructions should be
described below as special instructions.

-----------------------------
 
NOTE 1:  When installing this patch in a non-running zone or in an inactive
         Boot Environment, svc:/system/webconsole:console service can go into
         a restart loop when this zone or this BE is booted up.
 
         Apply the following workaround in the non-global zone or BE to
         correct the problem:
 
         /usr/share/webconsole/private/bin/wcremove -i console
         /usr/sbin/svcadm clear system/webconsole:console