OEM patches & vulnerabilities
Tools:
Agent: agentpatcher
OMS: omspatcher
coherence/weblogic: optach
1. Agent JDK update. please refer the below oracle reference page
Supported Java SE Downloads on MOS (oracle.com)
2. Removing log4j-core-2.8.2.jar
validate jar file exist
cd $OEM_BASE/gc_inst/user_projects/domains/GCDomain/servers/EMGC_OMS1/tmp/_WL_user/emdb/1danf1/database/jet/emsaasui/emcdbms-ui/ear/APP-INF/lib
$OEM_BASE/agent_13.5.0.0.0/oracle_common/jdk/bin/jar tvf log4j-core-2.8.2.jar | grep JndiLookup.class
output
2974 Sun Apr 02 15:24:22 AEST 2017 org/apache/logging/log4j/core/lookup/JndiLookup.class
stop OMS
$OEM_BASE/middleware/bin/emctl status oms -details
$OEM_BASE/middleware/bin/emctl stop oms -all
remove log4j
zip -q -d log4j-core-2.8.2.jar org/apache/logging/log4j/core/lookup/JndiLookup.class
validate jar file exist
$OEM_BASE/agent_13.5.0.0.0/oracle_common/jdk/bin/jar tvf log4j-core-2.8.2.jar | grep JndiLookup.class
start OMS
$OEM_BASE/middleware/bin/emctl status oms -details
$OEM_BASE/middleware/bin/emctl start oms
3. Apply Agent and OMS PSU patches. please refer the oracle doc id.
Enterprise Manager 13.5 Main Release Update List (Includes Plug-ins) (Doc ID 2760230.2)
4. Apply CPU patch for weblogic, coherence etc.. search in google and login into support oracle to download the patches
Critical Patch Update (CPU) Program Jan 2023 Patch Availability Document (EM-only) (oracle.com)
5. upgrade OMS JDK version
https://support.oracle.com/knowledge/Enterprise%20Management/2776765_1.html
Comments
Post a Comment