5060906 

Authorization dialog pops up for an unprotected directory without index file. 

Additional information: As for 6.1 SP1, if a directory does not have an index file such as index.html, index.jsp, or home.html, then while turning on ACL authentication anyone with read and write permission are denied the list access even though this directory is unprotected.

Workaround: To revert back to the previous behavior of 6.1, change the default ACL so that anonymous users are allowed list privileges. Make the changes as follows:

allow (read, execute, info, list) user = "anyone"

4642650 

Option needed to disable appending of absolute URL in Servlet/JSP container. 

Fix details: New property added to sun-web.xml: relativeRedirectAllowed

Default value: false

Description: If true, allows the web application to send a relative URL to the client using the HttpServletResponse.sendRedirect() API (that is, it suppresses the container from translating a relative URL to a fully qualified URL).

4793938 

Enabling Remote File Manipulation from the Server Manager GUI allows any remote user to obtain a listing of any directory in the server's URI space. 

4904201 

javahome path wrongly set when adding a server with no bundled JDK.

4911580 

Adding a new server instance may fail with a Server Error message. 

4928794 

Server restarts when trying to create null resource by PUT. 

4929913 

Search engine does not extract and index FTS information from PDF files. 

Fix details: This fix applies to all supported platforms except Linux.

The Author, Subject, and Keywords meta tags are always indexed. Functionality has been added that now allows arbitrary meta tags to be indexed, including those produced when converting the FTS_* attributes from PDF files. Manual configuration of a new setting in server.xml is required, as described below.

• In the SEARCH section of server.xml, add a PROPERTY with name="indexMetatags". The value should be a comma-delimited list of meta tag names (note that the Author , Subject, and Keywords meta tags are always indexed, regardless of this setting).

• To index the meta tags resulting from the conversion of PDFs and other types of documents, this configuration must use the name of the meta tag, rather than the name of the “field” in the particular document type. For example, to index the FTS_Title contents from PDF files, "Title" must be a component of the "indexMetatags" setting:

  <PROPERTY name="indexMetatags" value="Title">

See issue 4956415 for details about displaying custom meta tag information in search results.

4933935 

On Solaris 9: reconfig does not work in package-based installs.

4945089 

ASN.1 parsing issue in SSL. 

A problem has been identified in the implementation of the SSL protocols used by the Web Server that may be exploited as a Denial of Service attack. Sun Java System Web Server 6.1 SP1 fixes this problem. If you use the Web Server to host sites that utilize SSL version 3 or TLS, you are strongly encouraged to install this service pack. 

4950388 

The reconfig command does not work on Windows XP.

4964069 

The commit.exe utility crashes on Windows platforms.