OEM patches & vulnerabilities

 

Tools:

Agent: agentpatcher

OMS: omspatcher

coherence/weblogic: optach

1. Agent JDK update. please refer the below oracle reference page

Supported Java SE Downloads on MOS (oracle.com)

2. Removing log4j-core-2.8.2.jar

validate jar file exist

cd $OEM_BASE/gc_inst/user_projects/domains/GCDomain/servers/EMGC_OMS1/tmp/_WL_user/emdb/1danf1/database/jet/emsaasui/emcdbms-ui/ear/APP-INF/lib

$OEM_BASE/agent_13.5.0.0.0/oracle_common/jdk/bin/jar tvf log4j-core-2.8.2.jar | grep JndiLookup.class

output

2974 Sun Apr 02 15:24:22 AEST 2017 org/apache/logging/log4j/core/lookup/JndiLookup.class

stop OMS

 $OEM_BASE/middleware/bin/emctl status oms -details

 $OEM_BASE/middleware/bin/emctl stop oms -all

remove log4j

zip -q -d log4j-core-2.8.2.jar org/apache/logging/log4j/core/lookup/JndiLookup.class

validate jar file exist

$OEM_BASE/agent_13.5.0.0.0/oracle_common/jdk/bin/jar tvf log4j-core-2.8.2.jar | grep JndiLookup.class

start OMS

 $OEM_BASE/middleware/bin/emctl status oms -details

 $OEM_BASE/middleware/bin/emctl start oms

3. Apply Agent and OMS PSU patches. please refer the oracle doc id.

Enterprise Manager 13.5 Main Release Update List (Includes Plug-ins) (Doc ID 2760230.2)

4. Apply CPU patch for weblogic, coherence etc.. search in google and login into support oracle to download the patches



Example:

Critical Patch Update (CPU) Program Jan 2023 Patch Availability Document (EM-only) (oracle.com)

5. upgrade OMS JDK version

https://support.oracle.com/knowledge/Enterprise%20Management/2776765_1.html

EM 13.5: How to Use the Latest Certified JDK 8 Update with OMS 13.5 (Doc ID 2776765.1)


Comments

Popular Posts

AWR Report Analysis

Goldengate 19c Installation with issue resolution

Oracle 12c 2-node RAC setup in VMware Player 15 -- Part01

Oracle to Postgres

Execution_Explain Plan

Active Session History Analysis

General Queries

Fragmentation & Re-organisation

Postgresql installation offline using NGINX