Gagandeep virk: PATCHING

Weblogic Patch - WLS PATCH SET UPDATE 14.1.1.0.210930 (Patch 33416881)

+ WLS OVERLAY PATCH FOR 14.1.1.0.0 OCT 2021 PSU (Patch 33660731) for CVE-2021-44228

export MW_HOME=/wls14c/app/oracle/middleware

export WLS_HOME=$MW_HOME/wlserver

export WL_HOME=$WLS_HOME

export DOMAIN_BASE=$MW_HOME/user_projects/domains

export DOMAIN_HOME=$DOMAIN_BASE/base_domain

export JAVA_HOME=/wls14c/app/java/jdk-11.0.13

export ORACLE_HOME=/wls14c/app/oracle/middleware

export PATH=$ORACLE_HOME/OPatch:$PATH

export PATH=$JAVA_HOME/bin:$PATH

export PATH=$PATH:$HOME/.local/bin:$HOME/bin:$ORACLE_HOME/bin

Update OPatch:

Ensure that ORACLE_HOME has minimum required OPatch version, i.e. 13.9.4.2.6 or higher.

[oracle@xxxxxxx OPatch]$ /wls14c/app/oracle/middleware/OPatch/opatch version

OPatch Version: 13.9.4.2.3

OPatch succeeded.

[oracle@xxxxxxx patches]$ unzip p28186730_139427_Generic.zip

Archive: p28186730_139427_Generic.zip

creating: 6880880/

inflating: 6880880/README.txt

inflating: 6880880/opatch_generic.jar

inflating: 6880880/version.txt

[oracle@xxxxxxxxxx patches]$

[oracle@xxxxxxxxxxx 6880880]$ java -jar opatch_generic.jar -silent oracle_home=/wls14c/app/oracle/middleware

Launcher log file is /tmp/OraInstall2021-12-15_10-54-38AM/launcher2021-12-15_10-54-38AM.log.

Extracting the installer . . . . Done

Checking if CPU speed is above 300 MHz. Actual 1995.312 MHz Passed

Checking swap space: must be greater than 512 MB. Actual 8191 MB Passed

Checking temp space: must be greater than 300 MB. Actual 27462 MB Passed

Preparing to launch the Oracle Universal Installer from /tmp/OraInstall2021-12-15_10-54-38AM

Installation Summary

Disk Space : Required 41 MB, Available 68,189 MB

Feature Sets to Install:

Next Generation Install Core 13.9.4.0.1

OPatch 13.9.4.2.7

OPatch Auto OPlan 13.9.4.2.7

Session log file is /tmp/OraInstall2021-12-15_10-54-38AM/install2021-12-15_10-54-38AM.log

Loading products list. Please wait.

40%

Loading products. Please wait.

42%

43%

45%

Saving the inventory oracle.glcm.opatch.common.api.classpath

Component : oracle.glcm.oplan.core.classpath

Saving the inventory oracle.glcm.oplan.core.classpath

The install operation completed successfully.

Logs successfully copied to /u01/app/oraInventory/logs.

[oracle@xxxxxxxx 6880880]$ /wls14c/app/oracle/middleware/OPatch/opatch version

OPatch Version: 13.9.4.2.7

OPatch succeeded.

[oracle@xxxxxxx 6880880]$

Applying Patch Set Updates (PSUs)The patch set updates (PSUs) come with a "README.txt" file that explains how to apply the patches. You should always follow the patch note, but the basic format is typically as follows.Unzip the patch into the correct location

[oracle@xxxxxx 33416881]$ /wls14c/app/oracle/middleware/OPatch/opatch lspatches

There are no Interim patches installed in this Oracle Home "/wls14c/app/oracle/middleware".

OPatch succeeded.

[oracle@xxxxxx 33416881]$

[oracle@xxxxxx 33416881]$ /wls14c/app/oracle/middleware/OPatch/opatch apply

Oracle Interim Patch Installer version 13.9.4.2.7

Oracle Home : /wls14c/app/oracle/middleware

Central Inventory : /u01/app/oraInventory

from : /wls14c/app/oracle/middleware/oraInst.loc

OPatch version : 13.9.4.2.7

OUI version : 13.9.4.0.0

Log file location : /wls14c/app/oracle/middleware/cfgtoollogs/opatch/opatch2021-12-15_11-08-40AM_1.log

OPatch detects the Middleware Home as "/wls14c/app/oracle/middleware"

Verifying environment and performing prerequisite checks...

OPatch continues with these patches: 33416881

Do you want to proceed? [y|n]

User Responded with: Y

All checks passed.

Please shutdown Oracle instances running out of this ORACLE_HOME on the local system.

(Oracle Home = '/wls14c/app/oracle/middleware')

Is the local system ready for patching? [y|n]

User Responded with: Y

Backing up files...

Applying interim patch '33416881' to OH '/wls14c/app/oracle/middleware'

ApplySession: Optional component(s) [ oracle.commons.collections.commons.collections, 3.2.2.0.0 ] , [ oracle.commons.collections.commons.collections, 3.2.2.0.0 ] , [ oracle.fmwconfig.common.wls.shared, 14.1.1.0.0 ] , [ oracle.webservices.wls.jaxrpc, 14.1.1.0.0 ] not present in the Oracle Home or a higher version is found.

Patching component oracle.wls.security.core, 14.1.1.0.0...

Patching component oracle.org.apache.logging.log4j.log4j_1_2.api, 2.11.1.0.0...

Patching component oracle.fmwconfig.common.config.shared, 14.1.1.0.0...

Patching component oracle.wls.security.core.sharedlib, 14.1.1.0.0...

Patching component oracle.wls.common.cam.wlst, 14.1.1.0.0...

Patch 33416881 successfully applied.

Log file location: /wls14c/app/oracle/middleware/cfgtoollogs/opatch/opatch2021-12-15_11-08-40AM_1.log

OPatch succeeded.

[oracle@ociqaapp1 33416881]$

[oracle@xxxxxx 33660731]$ /wls14c/app/oracle/middleware/OPatch/opatch lspatches

33416881;WLS PATCH SET UPDATE 14.1.1.0.210930

OPatch succeeded.

APPLY WLS OVERLAY PATCH FOR 14.1.1.0.0 OCT 2021 PSU (Patch 33660731) for CVE-2021-44228

[oracle@xxxxxx 33660731]$ /wls14c/app/oracle/middleware/OPatch/opatch apply

Oracle Interim Patch Installer version 13.9.4.2.7

Oracle Home : /wls14c/app/oracle/middleware

Central Inventory : /u01/app/oraInventory

from : /wls14c/app/oracle/middleware/oraInst.loc

OPatch version : 13.9.4.2.7

OUI version : 13.9.4.0.0

Log file location : /wls14c/app/oracle/middleware/cfgtoollogs/opatch/opatch2021-12-15_11-18-00AM_1.log

OPatch detects the Middleware Home as "/wls14c/app/oracle/middleware"

Verifying environment and performing prerequisite checks...

OPatch continues with these patches: 33660731

Do you want to proceed? [y|n]

User Responded with: Y

All checks passed.

Please shutdown Oracle instances running out of this ORACLE_HOME on the local system.

(Oracle Home = '/wls14c/app/oracle/middleware')

Is the local system ready for patching? [y|n]

User Responded with: Y

Backing up files...

Applying interim patch '33660731' to OH '/wls14c/app/oracle/middleware'

Patching component oracle.org.apache.logging.log4j.log4j_1_2.api, 2.11.1.0.0...

Patching component oracle.org.apache.logging.log4j.log4j.api, 2.11.1.0.0...

Patching component oracle.org.apache.logging.log4j.log4j.core, 2.11.1.0.0...

Patch 33660731 successfully applied.

Log file location: /wls14c/app/oracle/middleware/cfgtoollogs/opatch/opatch2021-12-15_11-18-00AM_1.log

OPatch succeeded.

[oracle@xxxxxx 33660731]$

Weblogic Patch - PF9J patch number p33403637_1036_Generic.zip

PATCH_ID - PF9J

export MW_HOME=/u01/app/oracle/product/middleware

export WLS_HOME=$MW_HOME/wlserver_10.3

export WL_HOME=$WLS_HOME

# Set to the appropriate JAVA_HOME

export JAVA_HOME=/u01/app/oracle/jrockit-jdk1.6.0_45-R28.2.7-4.1.0

export PATH=$JAVA_HOME/bin:$PATH

[oracle@xxxxxapp1 Patches]$ unzip p33403637_1036_Generic.zip -d /u01/app/oracle/product/fmw11g/utils/bsu/cache_dir/.

Archive: p33403637_1036_Generic.zip

inflating: /u01/app/oracle/product/fmw11g/utils/bsu/cache_dir/./patch-catalog_27702.xml

replace /u01/app/oracle/product/fmw11g/utils/bsu/cache_dir/./README.txt? [y]es, [n]o, [A]ll, [N]one, [r]ename: y

inflating: /u01/app/oracle/product/fmw11g/utils/bsu/cache_dir/./README.txt

inflating: /u01/app/oracle/product/fmw11g/utils/bsu/cache_dir/./PF9J.jar

[oracle@fciscostbapp1 Patches]$

If you get conflicts, you may have to remove previous patches, before attempting to apply the patch again.

[./bsu.sh -install -patch_download_dir=$MW_HOME/utils/bsu/cache_dir -patchlist=PF9J -prod_dir=$WLS_HOME -log=/tmp/weblogic_patching.log

Checking for conflicts..................

No conflict(s) detected

Installing Patch ID: PF9J.

Result: Success

[oracle

APPLY WLS PATCH SET UPDATE 14.1.1.0.210930 (Patch 33416881) + WLS OVERLAY PATCH FOR 14.1.1.0.0 OCT 2021 PSU (Patch 33660731) for CVE-2021-44228

Weblogic Patch - WLS PATCH SET UPDATE 14.1.1.0.210930 (Patch 33416881)

Weblogic Patch - PF9J patch number p33403637_1036_Generic.zip

PATCH_ID - PF9J