WLS 12.1.2.0.7 - Applying Patch 22248372: WEBLOGIC SERVER CVE-2015-4852 SECURITY ALERT PATCH (NOV 2015)

WLS 12.1.2.0.7 - Applying Patch 22248372: WEBLOGIC SERVER CVE-2015-4852 SECURITY ALERT PATCH (NOV 2015)

Prerequisite Patches:

21364493 WLS PATCH SET UPDATE 12.1.2.0.7

- Download the patch p22248372_121207_Generic.zip

- Ensure all prequisites for the patch as highlighted in the README.txt are met

Patch Install Instructions:

- Stop all Weblogic Server instances (AdminServer and all Managed server(s)) 

- Unzip the patch zip file into the PATCH_TOP.

   unzip -d PATCH_TOP p22248372 _121207_Generic.zip

   NOTE : p22248372 _121207_Generic.zip cannot be in PATCH_TOP directory.

-   cd PATCH_TOP/22248372 

- Run OPatch to apply the patch.

  $ opatch apply -jdk $JAVA_HOME 

- Run OPatch to verify the patch application.

   - opatch lsinventory -jdk $JAVA_HOME

- Start all servers (AdminServer and all Managed server(s))

Patch De-installation:

If any issues post patching and roll back is needed then follow below steps:

- Stop all Weblogic Server instances (AdminServer and all Managed server(s)) 

  cd PATCH_TOP/22248372 

- Run OPatch to deinstall the patch.


   $ opatch rollback -id 22248372  -jdk $JAVA_HOME

Related Posts:

WLS 12.1.1.0.12 - Applying Patch 22248372 SU Patch [2H6C] 12.1.1.0.12 Overlay WEBLOGIC SERVER CVE-2015-4852 SECURITY ALERT PATCH (NOV 2015)

WLS 10.3.6.0.12 - Applying Patch 22248372: SU Patch [ZLNA] :10.3.6.0.12 Overlay: WEBLOGIC SERVER CVE-2015-4852 SECURITY ALERT PATCH (NOV 2015)

WLS 12.1.3.0.5 - Applying Patch 22248372: WEBLOGIC SERVER CVE-2015-4852 SECURITY ALERT PATCH (NOV 2015)

WLS 12.2.1.0.0 - Applying Patch 22248372: WEBLOGIC SERVER CVE-2015-4852 SECURITY ALERT PATCH (NOV 2015)

WLS 10.3.4.0.5 - Applying Patch 22248372: SU Patch [JQNK] :10.3.4.0.5 Overlay: WEBLOGIC SERVER CVE-2015-4852 SECURITY ALERT PATCH (NOV 2015)

WLS 10.3.5.0.7 - Applying Patch 22248372 SU Patch [JF2L] 10.3.5.0.7 Overlay MERGE REQUEST ON TOP OF WLS PSU 10.3.5.0.7 FOR BUGS 21495475 22175246 22200449

Applying Patch 21364493: WLS PATCH SET UPDATE 12.1.2.0.7

Applying Patch 21364493: WLS PATCH SET UPDATE 12.1.2.0.7

- Download and unzip Patch 21364493 (p21364493_121200_Generic.zip) onto the server where patch is to be applied.

- Ensure all patch pre-requisites documented in patch README file are met before applying the patch

- Unzip the patch

unzip -d PATCH_TOP p21364493_121200_Generic.zip

where PATCH_TOP is the staging area on the server with appropriate permissions

- Set environment variables:

export ORACLE_HOME=<oracle_home_path>
export JAVA_HOME=<java_home_path>

Apply latest Opatch

- Check for the current Opatch version and apply latest OPatch Patch if required

        $ opatch version  
$ cd $ORACLE_HOME
$ mv OPatch OPatch_<ddmmyy>
$ unzip /sid/PATCH_TOP/p6880880_131000_Generic.zip
$ export PATH=$ORACLE_HOME/OPatch:$PATH
$ opatch version

- Validate OUI inventory

$ opatch lsinventory -jdk $JAVA_HOME

Apply WLS PSU 12.1.2.0.7 Patch 21364493 for WLS 12.1.2

$ cd /sid/PATCH_TOP/21364493
$ opatch apply -jdk $JAVA_HOME

- Verify if patch was applied

$ opatch lsinventory -jdk $JAVA_HOME

- Start mid-tier services and perform post patching health checks


Patch rollback

Post 21364493: WLS PATCH SET UPDATE 12.1.2.0.7 patching, if any issues are encountered and a rollback is required, follow below steps

- Stop mid-tier services

- cd <PATCH_TOP>/21364493

- Run OPatch to deinstall the patch.

    $ opatch rollback -id 21364493 -jdk $JAVA_HOME

- Start services


Related posts:

Oracle WebLogic Server 12.2.1.0.0 - Applying Patch 22331568: WLS PATCH SET UPDATE 12.2.1.0.160119

Applying Patch 20844228: WLS PATCH SET UPDATE 12.1.2.0.6

FMW 12.1.3.0.0 - Applying Patch 20838345: WLS PATCH SET UPDATE 12.1.3.0.4

Oracle WebLogic Server WLS 10.3.6.0.13 - Applying Patch 21984589: SU Patch [S8C2]: WLS PATCH SET UPDATE 10.3.6.0.13

Applying Patch 20780171: SU Patch [EJUW]: WLS PATCH SET UPDATE 10.3.6.0.12

Applying Patch 19637463: SU Patch [12UV]: Oracle WebLogic Server (WLS) PATCH SET UPDATE 10.3.6.0.10

Applying Patch 19182814: SU Patch [FSR2]: Weblogic Server (WLS) PATCH SET UPDATE 10.3.6.0.9

Applying Patch 20474010: SU Patch [S8H6]: SPURIOUS HARVESTING OF CONNECTION BY WLS POOL