WebLogic 12.2.1.4.0 2022年4月关键补丁

Oracle� WLS Patch Set Update 12.2.1.4.220329 README Patch Set Update (PSU) for Bug : 34012040 Date : 29-Mar-22 Platform Patch for : Generic Platform Product Patched : Oracle WebLogic Server Product Version : 12.2.1.4.0 This document describes how to install patch # 34012040. It includes the following sections: - Section 1: Zero Downtime Patching - Section 2: Prerequisites - Section 3: Pre-Installation Instructions - Section 4: Installation Instructions - Section 5: Post-Installation Instruction - Section 6: Deinstallation Instructions - Section 7: Post Deinstallation Instructions - Section 8: Bugs Fixed by This Patch Section 1: Zero Downtime Patching ------------------------------------------ This patch has been marked as eligible for Zero Downtime Patching. The type of Zero Downtime Patching supported by this patch is FMW_ROLLING_ORACLE_HOME. With Zero Downtime Patching, a Patch can be applied to a system in a manner that does not incur any downtime. This ensures that the system can remain available and functioning during the patching process. Certain pre-requisites, however, must be met before the patch can be applied. For more information, see the following: Doc ID 1942159.1 Introduction to Zero Downtime (ZDT) Patching for Oracle Fusion Middleware / WebLogic Server https://support.oracle.com/epmos/faces/DocumentDisplay?id=1942159.1 Section 2: Prerequisites ------------------------------------ Ensure that you meet the following requirements before you install or deinstall the patch: 1. Understand the PSU program: Review the following before applying PSUs for the first time: Doc ID 1306505.1 Patch Set Update (PSU) Administration Guide for Oracle WebLogic Server (WLS) https://support.oracle.com/rs?type=doc&id=1306505.1 2. Update Java SE (JDK/JRE): In order to maintain security, users of Oracle JDKs and JVMs, we strongly recommend applying the latest Java Critical Patch Updates (CPUs) as soon as they are released. Doc ID 2855980.1 Oracle Critical Patch Update (CPU) April 2022 for Oracle Java SE https://support.oracle.com/epmos/faces/DocumentDisplay?id= 2855980.1 Refer to the following for further information: Doc ID 1506916.1 Obtaining Java SE (JDK/JRE) for Oracle Fusion Middleware Products https://support.oracle.com/rs?type=doc&id=1506916.1 Certain fixes in this WebLogic Server Patch Set Update for deserialization vulnerabilities depend on JEP 290 filtering and JEP 290 global scope filtering features provided in July 2018 JDK Updates and later JDK updates. These fixes for deserialization vulnerabilities are not effective without these JDK updates. Users applying this Patch Set Update without these JDK updates will receive warnings in the WebLogic Server console and in WebLogic Server logs. Refer to the following document for details. Doc ID 2421487.1 Restricting Incoming Serialized Java Objects to Oracle WebLogic Server https://support.oracle.com/rs?type=doc&id=2421487.1 3. Update OPatch: The ORACLE_HOME should be installed with OPatch version 13.9.4.2.8 or higher. The latest OPatch version can be obtained from the following link: https://support.oracle.com/rs?type=patch&id=28186730 To verify the OPatch version, run the following command: <ORACLE_HOME>/OPatch/opatch version To upgrade OPatch, follow the below steps: Refer to this OPatch README.txt for most up to date instructions on upgrading OPatch in the ORACLE_HOME. 4. Validate the OUI inventory with the following commands: $ ORACLE_HOME/OPatch/opatch lsinventory Section 3: Pre-Installation Instructions ------------------------------------------------ 1. Stop all WebLogic servers (AdminServer and all Managed server(s)). 2. Its recommended to create a complete backup of DOMAIN_HOME, ORACLE_HOME and CENTRAL INVENTORY Refer the following Backing Up Your Environment for Oracle recommended backup strategies. 3. AntiVirus software may need to be temporarily stopped, if installed before applying patches. Note: Only if if there are problems copying files during patching. 4. Ensure that the same user who installed WLS is used for applying patches via the OPatch tool. 5. Set the ORACLE_HOME environment variable to the directory where you have installed Oracle WebLogic Server. Section 4: Installation Instructions --------------------------------------------- 1. Unzip p34012040_122140_Generic.zip into PATCH_TOP Notes: You must make sure that the target directory for unzip has required write and executable permissions for "user" with which the component being patched is installed. On some platforms, the zip/unzip utility may not be able to extract the jar files in the zip correctly. On Windows, the native zip utility will show a 'path too long' error. Java provides the jar utility which will avoid this problem, e.g., jar -xvf p34012040_122140_Generic.zip. 2. Set your current directory to the directory where the patch is located. $ cd PATCH_TOP/34012040 3. Run OPatch to apply the patch. $ opatch apply Microsoft Windows: When applying patches for Microsoft Windows platform <ORACLE_HOME>\OPatch\opatch.bat apply PATCH_TOP/34012040 Note: ----- When OPatch starts, it validates the patch and makes sure that there are no conflicts with the software already installed in the ORACLE_HOME. In case of opatch conflict, you will see a warning message similar to the one mentioned below: Interim Patch XXXX has Conflict with patch(es) [ YYYY ] in OH ... Conflict patches: YYYY Patch(es) YYYY conflict with the patch currently being installed (XXXX). If you continue, patch(es) YYYY will be rolled back and the new patch (XXXX) will be installed. If a merge of the new patch (XXXX) and the conflicting patch(es) ( YYYY) is required, contact Oracle Support Services and request a Merged patch. Do you want to proceed? [y|n] n You must stop the patch installation and the following should be reviewed: Doc ID 1329952.1 Oracle Fusion Middleware Patch Conflict Resolution https://support.oracle.com/rs?type=doc&id=1329952.1 Contact Oracle Support if the conflict cannot be resolved or you need a Merge Request. Section 5: Post-Installation Instructions ------------------------------------------------ 1. Verify the WebLogic Server PSU patch is in the ORACLE_HOME inventory: <ORACLE_HOME>/OPatch/opatch lspatches or Login to console -> monitoring tab and confirm that the patch is applied successfully. Refer Obtaining a List of Applied Patches 2. Refer to the following document for any further Post-Install advice: Doc ID 2764668.1 Security Advice and Post-Install Information for Oracle WebLogic Server PSUs https://support.oracle.com/rs?type=doc&id=2764668.1 3. Start all Weblogic Servers. Section 6: Deinstallation Instructions ---------------------------------------------- If you experience any problems after installing this patch, remove the patch as follows: 1. Make sure to follow the same Prerequisites or pre-install steps (if any) when deinstalling a patch. This includes setting up any environment variables like ORACLE_HOME and verifying the OUI inventory before deinstalling. 2. Change to the directory where the patch was unzipped. $ cd PATCH_TOP/34012040 3. Run OPatch to deinstall the patch. $ opatch rollback -id 34012040 Section 7: Post Deinstallation Instructions -------------------------------------------------- Restart all servers (AdminServer and all Managed server(s)). This is necessary to redeploy the original applications and bring the environment back to it's original state. NOTE: A PSU fix may add support for new configuration attributes for the new console security warnings feature. In normal cases if you roll back the PSU there would be no issues. If you specify a non-default value for these new attributes and activate the change, then it is persisted to