Applying Patch 19948000: OHS SECURITY PATCH UPDATE 11.1.1.7.0 (CPUJAN2015)

Applying Patch 19948000: OHS SECURITY PATCH UPDATE 11.1.1.7.0 (CPUJAN2015)

- Download and extract the patch 19948000 onto the staging area PATCH_TOP of the server. 

- Ensure environment variables are set eg: ORACLE_HOME=$MW_HOME/Oracle_WT1

- Download latest OPatch, ensure access to valid inventory.

- Stop all opmn, OHS services.


Applying patch 19948000

- Unzip the patch zip file into the PATCH_TOP.

   unzip -d PATCH_TOP p19948000_111170_Linux-x86-64.zip

- cd PATCH_TOP/19948000

- Run following command:
  
   opatch apply


Post Install Instructions:
--------------------------

- Disable SSLv2 and SSLv3 from config files.
   
   A.  SSLProtocol
   
   Check config files like ORACLE_INSTANCE/config/OHS/<OHS name>/ssl.conf, ORACLE_INSTANCE/config/OHS/<OHS name>/admin.conf and any other custom files.
   Change SSLProtocol directive to disable SSLv2, SSLv3 protocols by either:
   
   SSLProtocol -All +TLSv1  (allows the one TLS protocol currently supported in this version)
   
   or
   SSLProtocol All -SSLv2 -SSLv3 (allows for future scaling to newer TLS version if later upgraded)
   
   or
   SSLProtocol nzos_Version_1_0

   B.  SSLProxyProtocol
   
   This directive must also be configured to disable SSLv2, SSLv3 protocols similar to SSLProtocol.

- Remove ciphers from SSLCipherSuite directive that are deprecated in this release. Check patch README file for more details.
   
  Alternatively, enable only the valid ciphers for this release.
  
-  Start all opmn, OHS services.


Rollback patch

If any issues post patching and a roll back is needed, follow below steps:

- Stop the services


- cd PATCH_TOP/19948000

- Run following command:
  
  opatch rollback -id 19948000


- Restart all opmn, OHS services.


Related Posts:

FMW 12.1.2.0.0 - Oracle HTTP Server - Applying Patch 21768251: MERGE REQUEST ON TOP OF 12.1.2.0.0 FOR BUGS 19948089 19304888 20806507 20900385
FMW 11.1.1.7.0 - Applying Oracle HTTP Server Patch 20394174: MERGE REQUEST ON TOP OF 11.1.1.7.0 FOR BUGS 19948000 17905017

FMW 11.1.1.7.0 - Applying Patch 20493440: MERGE REQUEST ON TOP OF 11.1.1.7.0 FOR BUGS 18423801 18025250

FMW 11.1.1.7.0 - Applying Patch 20124292: OPTIC NEEDS BETTER DIAGNOSTICS FOR CONNECTION ERRORS

Applying Patch 19849290 - CPU CONFLICT MERGE REQUEST ON TOP OF 11.1.1.7.0 FOR BUGS 17337741 17555224

Applying Patch 17337741: OSS SECURITY PATCH UPDATE 11.1.1.7.0 (CPUOCT2013)

FMW 11.1.1.7.0 - Applying Patch 18423831: WLSPLUGINS (OHS) SECURITY PATCH UPDATE 11.1.1.7.0 (CPUJUL2014)

FMW 11.1.1.7.0 - Applying Patch 18423801: OPMN SECURITY PATCH UPDATE 11.1.1.7.0 (CPUJUL2014)

Applying Patch 19948000: OHS SECURITY PATCH UPDATE 11.1.1.7.0 (CPUJAN2015)

FMW 12.1.3.0.0 - Applying Patch 19948154: OHS SECURITY PATCH UPDATE 12.1.3.0.0 (CPUJAN2015)

FMW 12.1.3.0.0 - Applying Patch 19229422: OHS 12C UNABLE TO CONNECT TO WLS DYNAMIC CLUSTER


Applying Patch 16856341: CPU: OHS CORE DUMPS AFTER MOD_SECURITY PATCH/CONF APPLIED

FMW 12.1.3.0.0 - Applying Patch 19948154: OHS SECURITY PATCH UPDATE 12.1.3.0.0 (CPUJAN2015)

FMW 12.1.3.0.0 - Applying Patch 19948154: OHS SECURITY PATCH UPDATE 12.1.3.0.0 (CPUJAN2015)


Before applying patch:
----------------------

- Download the latest version of OPatch 13.2.x via My Oracle Support Patch 6880880. (Choose 13.2.0.0.0 or "OUI NextGen 13.2") p6880880_132000_Generic.zip

- Ensure access to valid OUI Inventory by running $ opatch lsinventory -jre $ORACLE_HOME/jdk/jre

- Validate the executables in system PATH after setting $ORACLE_HOME by running 'which opatch', 'which unzip'

- Download the patch to staging directory eg PATCH_TOP with appropriate permissions


Patch instructions:
-------------------

- Set ORACLE_HOME to directory where Oracle HTTP Server is installed.

- Stop all servers (AdminServer and all Managed server(s)).

- Unzip the patch

$ unzip -d PATCH_TOP p19948154_121300_Linux-x86-64.zip

- Run $ cd PATCH_TOP/19948154

- Apply the patch (cold backup recommended before applying patch)

$ opatch apply

- While applying the patch, if any conflicts with existing patches detected or a merge patch for conflicting and new patch is required, stop the patch and contact Support.

- If any issues after applying the patch and you would like to roll back the patch, kindly run

$ opatch rollback -id 19948154

- Restart all services

Related Posts:

FMW 12.1.2.0.0 - Oracle HTTP Server - Applying Patch 21768251: MERGE REQUEST ON TOP OF 12.1.2.0.0 FOR BUGS 19948089 19304888 20806507 20900385

FMW 11.1.1.7.0 - Applying Oracle HTTP Server Patch 20394174: MERGE REQUEST ON TOP OF 11.1.1.7.0 FOR BUGS 19948000 17905017

FMW 11.1.1.7.0 - Applying Patch 20493440: MERGE REQUEST ON TOP OF 11.1.1.7.0 FOR BUGS 18423801 18025250

FMW 11.1.1.7.0 - Applying Patch 20124292: OPTIC NEEDS BETTER DIAGNOSTICS FOR CONNECTION ERRORS

Applying Patch 19849290 - CPU CONFLICT MERGE REQUEST ON TOP OF 11.1.1.7.0 FOR BUGS 17337741 17555224

Applying Patch 17337741: OSS SECURITY PATCH UPDATE 11.1.1.7.0 (CPUOCT2013)

FMW 11.1.1.7.0 - Applying Patch 18423831: WLSPLUGINS (OHS) SECURITY PATCH UPDATE 11.1.1.7.0 (CPUJUL2014)

FMW 11.1.1.7.0 - Applying Patch 18423801: OPMN SECURITY PATCH UPDATE 11.1.1.7.0 (CPUJUL2014)

Applying Patch 19948000: OHS SECURITY PATCH UPDATE 11.1.1.7.0 (CPUJAN2015)

FMW 12.1.3.0.0 - Applying Patch 19948154: OHS SECURITY PATCH UPDATE 12.1.3.0.0 (CPUJAN2015)

FMW 12.1.3.0.0 - Applying Patch 19229422: OHS 12C UNABLE TO CONNECT TO WLS DYNAMIC CLUSTER

Applying Patch 16856341: CPU: OHS CORE DUMPS AFTER MOD_SECURITY PATCH/CONF APPLIED

FMW 11.1.1.7.0 - Applying Patch 21640624: OHS SECURITY PATCH UPDATE 11.1.1.7.0 (CPUOCT2015)