PATCH 28186730 - OPATCH 13.9.4.2.16 FOR EM 13.5 and FMW/WLS 12.2.1.4.0 AND 14.1.1.0.0
		
Platform             : Generic
Product Patched      : Oracle Fusion Middleware 12c / Oracle WebLogic Server 12c AND 14.1.1 / EM 13.5
Product Version      : FMW versions : 12.2.1.4.0 AND 14.1.1.0.0
		     : EM version : 13.5.0.0.0

	 
This is the README file for OPatch 13.9.4.2.16, the Oracle Interim One-off Patch Installer.

Notes
-----

Historically, OPatch was updated by unzipping and replacing ORACLE_HOME/OPatch directory.
For versions greater than or equal to 13.6, it now uses the OUI installation tooling. 
This ensures that the installer both executes the file updates and logs the components and 
file changes to the OUI meta-data. A pure unzip install means the OUI tooling is 
not aware of these changes, which has on occasions led to upgrade related issues.

When extracted, this contains a 6880880 directory. This is because previous OPatch downloads 
are available as Patch 6880880. To avoid confusion with downloads not applicable to FMW/WLS, 
this new OPatch 13.9.4.2.16 placeholder was created as Patch 28186730. 


Pre-Installation Instructions 
----------------------------- 

1. Backup of the ORACLE_HOME and Central Inventory must be taken as there is no mechanism to rollback to the older OPatch version.
 
2. Unzip this patch into your PATCH_HOME staging directory. 

3. This installer must be executed using a Java Development Kit (JDK). 
   - Set your PATH to include your <JDK_LOCATION>/bin

4. All the processes which are using files from ORACLE_HOME must be stopped before OPatch upgrade.


Pre-requisite steps before OPatch 13.9.4.2.16 Upgrade  
-----------------------------------------------
1. Check if patch 23335292 exists in ORACLE_HOME and rollback the patch before OPatch 13.9.4.2.16 upgrade 

You can get the list of patches by executing lspatches in ORACLE_HOME:<ORACLE_HOME>/OPatch/opatch lspatches  

2. If patch 23335292 exists, rollback the patch by executing the following command: <ORACLE_HOME>/OPatch/opatch rollback -id 23335292 

3. You should wait approximately 15-30 seconds before running opatch operations like Napply\lsinv or OPatch upgrade post rollback operation of patch 23335292  

Note: Please note that the rollback of patch 23335292 should not be executed post OPatch 13.9.4.2.16 upgrade. 


Installation
-----------------------------
NOTE: If you are upgrading the OPatch on Oracle Enterprise Manager (OEM), please follow the instructions specified in the Doc ID 2728285.1
 
1. Install the software with the following steps.
 
	UNIX Only:
	----------
 
	Use the standard command to upgrade the OPatch utility:

		* java -jar <PATCH_HOME>/6880880/opatch_generic.jar -silent oracle_home=<ORACLE_HOME_LOCATION>
 
	where ORACLE_HOME_LOCATION is the absolute path where you have installed FMW/WLS products.
 
	If using a custom Inventory location, install the software with the following command:
    
		* java -jar <PATCH_HOME>/6880880/opatch_generic.jar -silent oracle_home=<ORACLE_HOME_LOCATION> -invPtrLoc <INVENTORY_LOCATION>
 
	where INVENTORY_LOCATION is the absolute path to the oraInst.loc file.
 
	If you have /tmp set with a noexec flag for security, or prefer to set a custom location for the logs, you can override the tmp with the -D argument:
                
		* java -Djava.io.tmpdir=/opt/oracle -jar <PATCH_HOME>/6880880/opatch_generic.jar -silent oracle_home=<ORACLE_HOME_LOCATION>
	
	Log location:

		* For a successful OPatch upgrade session, logs will be copied under <CENTRAL_INVENTORY>/logs.
		* For an unsuccessful OPatch upgrade session, logs will be under /tmp/OraInstall<TIMESTAMP>
		* If you have specified a custom log location, refer to the console output for the log location.	
		* Refer to Doc ID 2759112.1 if you encounter any OPatch upgrade issues.   

   
	Windows Only:
	-------------
 
	Use the standard command to upgrade the OPatch utility:
 
		* java -jar <PATCH_HOME>\6880880\opatch_generic.jar -silent oracle_home=<ORACLE_HOME_LOCATION>
               
	where ORACLE_HOME_LOCATION is the directory where you have installed FMW/WLS products.

	This is the default option setting permissions within the Oracle Home as defined by the original product installer.
	 - This usually works for most of the cases and for newer installations is the best approach.
 
	If you have modified the original permissions, the following option enables users to proceed with the installation without any permission modification:
 
		* java -jar <PATCH_HOME>\6880880\opatch_generic.jar -skipACLSetting -silent oracle_home=<ORACLE_HOME_LOCATION>
                                
	Use the following option when the proper permissions in the Oracle Home is not allowing the installation to proceed. 
	 - This option will overwrite the ACL settings:
                                
		* java -jar <PATCH_HOME>\6880880\opatch_generic.jar -J-Doracle.installer.oh_admin_acl=true -silent oracle_home=<ORACLE_HOME_LOCATION>

	Log location: 

		* For a successful OPatch upgrade session, logs will be copied under <CENTRAL_INVENTORY>\logs. 
		* For an unsuccessful OPatch upgrade session, logs will be under %TMP%\OraInstall<TIMESTAMP> or %TEMP%\OraInstall<TIMESTAMP>.
		* If you have specified a custom log location, refer to the console output for the log location.
		* Refer to Doc ID 2759112.1 if you encounter any OPatch upgrade issues.

	
2. To validate the installation:

    cd <ORACLE_HOME>/OPatch
    opatch version
    opatch lsinventory
 
 
Post-installation Instructions
----------------------------------

Follow interim patch readmes for other installation steps to apply patches.


Note on NGINST Dependency Patches
----------------------------------

There is no need to apply the following NGINST patches as the fixes are available as part of OPatch 13.9.4.2.16:

 31101362, 29137924, 29909359
 
Refer to the "Details about NGINST Patches" section for further details.

 
Deinstallation
--------------

There is no mechanism to revert OPatch to an older version.

To revert OPatch, restore the backup for your ORACLE_HOME and Central Inventory.

 
Documentation and Help
-----------------------

To obtain command names or options from the command prompt, use:

    opatch -help
    opatch napply -help
 
To learn about patching with the OPatch utility with FMW/WLS 12c:

Doc ID 1587524.1 Using OUI NextGen OPatch 13 for Oracle Fusion Middleware 12c (12.1.2+)

 

New Features and Bugs Fixed List
---------------------------------

13.9.4.2.16
----------
Bug 36546981:OOP TO BE FIXED FOR NEXTGEN BASED HOMES WHEN JDK17/21 IS USED
Bug 36546995:OPATCH CHANGES TO AUTOROLLBACK REGRESSED PATCH DURING APPLY FOR NEXTGEN BASED HOMES 
Bug 36390311:PRISMA-2021-0055 /U01/ORACLE/OUI/MODULES/PRIVATE/COMMONS-CODEC-1.8.JAR
Bug 36296534:CVE-2023-4759 
Bug 36450786:OAS:COPYBINARY SCRIPT IS NOT WORKING IN OAS 2023
Bug 35561936:CVE-2023-35116
Bug 36618749:Auto updates in offline mode is failing with NumberFormatException
Bug 36631030:CVE-2024-29857


13.9.4.2.15
----------
35549541:APPLYING THE CAPTURE PATCH USING OPATCH 13.9.4.2.11 FAILS WITH "FILE NAME TOO LONG" EXCEPTION
36093543:DELETE UNZIP STAGING AREA POST OPATCH PREREQ IS INDEPENDENTLY
36238972:OPATCH TO IDENTIFY REGRESSED PATCH AND STOP EXECUTION AND SHOW MESSAGE TO ROLLBACK THE PATCH
36248451:OPATCH FAILED TO DELETE NON-EMPTY DIRECTORIES WHILE PERFORMING DELETEINACTIVEPATCHES COMMAND
36223867:CVE-2023-48795
35995785:During EM install software updates page is not working
34129741:SSH LOGIN WITH USERNAME FAILS WITH org.apache.sshd.common.SshException with optach version13.9.4.2.8
36326142:CVE-2024-26308 

13.9.4.2.14
----------
35602959: OPATCH SHOULD SUPPRESS WARNINGS TO SUPPORT JDK17 FOR FMW NG HOMES
35560671: EM13.5-SECURITY SCAN RESULTS-FILE PERMISSION REVIEW - UPDATE PERMISSION FOR $MIDDLEWARE/PATCH/6880880/VERSION.TXT TO 600 / 640
34685482: Do not generate maven location/pom files when jars are deleted in a patch
35648144: With JDK-17, java.security.PrivilegedActionException: java.lang.NoSuchMethodException is thrown
35022739: Deprecated class Java.util.jar.Pack200
35648144: With JDK-17, java.security.PrivilegedActionException: java.lang.NoSuchMethodException is thrown
35780473: Trivy Scan: Vulnerability CVE-2023-33201 is reported with bcprov-jdk15on-1.70.jar in WLS installation

13.9.4.2.13
----------
35332356: DELETE INACTIVE PATCHES SHOULD WORK WITH MULTIPLE SUPERSET CHAIN IN A GIVEN ORACLE HOME IN NEXTGEN BASED HOMES 
35124156: OPATCH APPLY IS FAILING WITH ERROR CODE 73 IN GA+N-1+N SCENARIO FOR WLS PSU 12.2.1.4.230225 
35307976: BDA Suites blocked - Agent Push failure Initialization > SSH connection check failed
35346354: Provide option to not include filemap contents in component inventory object memory
35283184: FOR WLS PSU 14.1.1.0.230411- OPATCH APPLY IS FAILING WITH ERROR CODE 73 IN GA+N-1+N SCENARIO 
35383056: Patch apply failure with cryptoj 6.2.6.2 
35509483: OPATCH13: OPATCH ROLLBACK FAILS WITH ERROR CODE 73 IN N TO N-1 SCENARIO IN FIRST ATTEMPT
35486283: CAPTURE OOP RELATED MESSAGES IN OPATCH CORE LOGS
35206055: PREVIOUS SGF PATCH (12.2.1.3.230312) IS GETTING ROLLED BACK BEFORE APPLYING LATEST 12.2.1.3 WLS PATCH.
35205311: INSTALLATION OF LATEST 12214 WLS PATCHES IS BEING IGNORED WHEN APPLIED ON TOP OF PREVIOUS SGF PATCH (12.2.1.4.230312) DUE TO FILE CONFLICTS

13.9.4.2.12
----------
35277035: OPATCH UTIL SHOWINACITVEPATCHES TO BE BUILT TO SHOW ALL INACTIVE AND OVERALYS FOR NEXTGEN BASED HOMES
35087070: ADD NEW OPATCH UTIL OPTIONS LISTORDEREDINACTIVEPATCHES AND DELETEINACTIVEPATCHES FOR NEXTGEN BASED HOMES
35078251: OPATCH UTIL DELETE OPTION TO DELETE INACTIVE PATCHES FROM PATCH_STORAGE AND ORACLE NEXTGEN HOMES
35060241: PERFORMANCE IMPROVEMENT FOR ROLLBACK WITH OBFUSCATED PATCH STORAGE
35127276: ODI BP AND SPB APPLIED USING OPATCH 13.9.4.2.11 ARE MISSING FUNCTIONALITY
34873831: napply/rollback merged compDef.xml file is not updated if it had been exist 

13.9.4.2.11
----------
34678476: CVE-2022-42003
32920864: Disable loading dll from current directory
34820519: CVE-2022-45047
34521456: OBFUSCATE BACKED UP FILES DURING APPLY IN .PATCH_STORAGE
34752911: OPATCH FAILED WITH ERROR CODE 3
34637305: SKIP FUSER IN REPORT MODE DURING PATCHING
33845786: VULNERABLE LOG4J FILES ARE FOUND UNDER ORACLE_HOME/.PATCH_STORAGE
34574534: GETTING JAR NOT APPLIED ERROR MESSAGE DURING LATEST WLS PATCH APPLIED USING OPATCH 13.9.4.2.11 ON WINDOWS PLATFORM
34616719: OPatch version 1394211 13.5 RU09 NZDT Patch 34471058
34678476: CVE-2022-42003

13.9.4.2.10
----------
 33574346: 13.9.4.0 upgrade issue - BRM - OUI Screen help button disabled
 33607547: 13.9.4.0 upgrade issue - OUI Screen help button not rendered properly on click
 33587953: SSH SETUP STEP HANGS AT JAVA FILE SSHCONNECTIVITY.JAVA
 33936643: SEQA - FAILURE FOR 22B 33933884- ERROR: PREPROCESS: ERROR: NEXTGEN API INVOCATION FAILURE
 33952942: Bug in the Descriptor file data generated by the NextGen Framework
 28419295: OUI 13.9.2 L3 : FEATURESET_SELECTOR_CLASS NOT GETTING CALLED FOR SILENT INSTALL
 34029130: UPG-20220401:DOWNTIME:ESJB-TEST:APPLYCASP4FAPREDOWNTIMEPLUGIN ERROR
 34120140: THE NEXTGEN LOG FILE IS CREATED WITH 644 PERMISSION WHEN RUNNING THE OPATCH LSINVENTORY
 34118902: HUGE NEXTGEN LOGS GENERATED AFTER APPLYING ORACLE WLS PATCH BUNDLE 12.2.1.4.220112
 34106472: OPATCH AUTOMATICALLY ANSWER N
 33738404: CORRECT SPELLING MISTAKE IN WORD "FAILIED" - UTILSESSION FAILED: UNZIP FAILIED
 34216417 - GETTING 'OPATCH FAILED WITH ERROR CODE 255' WHILE APPLYING ANY WLS PATCH ON WINDOWS
 33620637: CVE-2021-30129
 33743451: CVE-2020-25649/CVE-2020-36189
 34043952: CVE-2014-3643
 33486611: CVE-2021-36090
 33743451: CVE-2020-36189
 33876526: CVE-2022-23437
 

13.9.4.2.8
----------
 33427797: FAILED TO UPGRADE OPATCH ON ARM64
 33486611: APACHE COMMONS COMPRESS UPDATE TO AT LEAST 1.21
 33315745: ARM 64: "64-bit not required" terminology
 33218231: NEED OPATCH SUPPORT ON ARM
 33517763: 13.9.4.2.8 OPATCH:GDR:INCLUDE MEMORY OPTIONS IN OPATCH DISTRO INFO FILE
 32502719: AGENT INSTALL USING /TMP INSTEAD OF STAGE DIR
 33467315: OPATCH NAPPLY OPATCH REQUIREMENT SHOULD INDICATE VERSION+ AND INSTRUCTION FOR DOWNLOAD 
 33582222: ISSUE SEEN WITH ROLLBACK OF THE OLDER WLS PATCHES WITH OPATCH 13.9.4.2.8 ON WINDOWS
 33467841: FIX INCORRECT PERMISSION WHEN PATCHING JAR FILES 
 33491144: OPATCH ROLLBACK TO DELETE EMPTY DIRECTORIES

13.9.4.2.7
----------
 33236608 : MFTCS MP 12.2.2.4.0 ERROR WHILE APPLYING PATCH 33213749
 33193870 : OPATCH NAPPLY FAILED APPLY PATCHES WITH VERSION 13.9.4.2.6

13.9.4.2.6
----------
 32291208 : WHEN UPGRADE TO 13.9.4.2.5, APPLY -OOP FAILED WITH 'CAN NOT FIND OPATCH EXECUTABLE SCRIPT'
 32900729 : UPTAKE 2.12.2 JACKSON TO ADDRESS CVE:2020:25649
 32646653 : DICS: OPATCH UPGRADE TO 13.9.2.4.5 FAILS ON /U01/APP/ORACLE/MIDDLEWARE/OPATCH FOLDER
 32648357 : AFTER UPGRADE TO OPATCH 13.9.4.2.5 SSH LOGIN WITH DSA KEYS FAILS WITH INVALIDKEYEXCEPTION : "SHORT READ OF DER LENGTH"
 31254271 : SYMLINKS PROCESSING ISSUES IN OUI
 32593759 : NEXTGEN NOT PROPERLY REPLACING TOKENS DURING PATCHING
 32502607 : 13.4 fresh SW only install fails at one:off patch apply with error : Cyclic dependency detected among featureset libraries
 32408912 : NOTSTRESS:FA:FMW12C:EXTREMELY SLOW PERFORMANCE FOR PATCH APPLY AND UPDATEVIEW PHASES DURING PATCHING
 32700066 : SSH LOGIN WITH USERNAME FAILS WITH org.apache.sshd.common.SshException AFTER UPGRADE TO OPATCH 13.9.4.2.5 & MAXAUTHTRIES < 6
 31530043 : HIGH AGENT MEMORY CONSUMPTION FOR NEXTGEN APIS
 31179277 : REQUEST TO ENHANCE NEXTGEN TO SUPPORT NEW PORT LINUX.ARM64
 32882423 : SSH CONNECTION TIMING OUT IN AGENTPUSH INTERMITTENTLY
 33073691 : OPATCH 13.9.4.2.6 UPDATE IS CAUSING WINDOWS AGENTPUSH FAILURE 



13.9.4.2.5
----------
 27768508 : CVE-2012-2098
 31696359 : AGENTPUSH FAILING AFTER OPATCH UPDATE
 
13.9.4.2.4
----------
 30943081 : PERFORMANCE ISSUE IN FMW12C OPATCH
 31610167 : OPATCH TO SUPPORT CBCC (CONTENT BASED CONFLICT CHECKING) 
 30687963 : INFO - WEBLOGIC DEPLOYMENT FAILED WITH INSUFFICIENT DISK SPACE
 30922561 : COPY/PASTE BINARY FOR OID 12.2.1.4 ARE FAILING
 31085467 : Agent Patch Rollback Fails using 13.9.4.2.2 OPatch
 31512132 : WLTHINT3CLIENT.JAR HK2 META DATA IS NOT GETTING PROPERLY REGENERATED DURING PSU PATCH INSTALL
 28218773 : WLST SLOW IN SOLARIS
 29206542 : ACCOMMODATE A NEXTGEN CENTRAL INVENTORY WITH MISSING LOCKS DIRECTORY
 29253949 : Fix for Bug 29253949
 29292673 : POM GENERATION ISSUE, ANT 1.9 DROPPED FROM POM WHEN ANT 1.10 FEATURESET ADDED TO SHIPHOME
 29334003 : WEBLOGIC PSU FAILING WITH JAVA.NIO.FILE.ACCESSDENIEDEXCEPTION:/WLSERVER
 29396325 : UPGRADE XERCES FROM 2.11 TO 2.12
 29410238 : DUPLICATE MAVEN ARTIFACTS GENERATED WITH DIFFERENT GROUPID DURING PATCH APPLICATION
 29655515 : DISABLE POM-GEN AT THE DISTRIBUTION LEVEL
 29902141 : Fix for Bug 29902141
 29909359 : BUILD FAILURE OBSERVED IN A WLS WEBSERVICES SUITE WITH OPATCH 13.9.4.2.0
 30240291 : EM INSTALLER FAILS TO LOAD OUI WHILE PROVIDING ALTERNATE TMP SPACE
 30317205 : PORT ER/BUG 29724751
 30317648 : PORT BUG 30180115 -- UPDATE JACKSON IN NGINST 13.9.4 PL2
 30368770 : AFTER EXECUTING THE PASTEBINARY WE SEE ERRORS IN <OH>/INSTALL/MAKE.LOG
 30600358 : ESSBASE INSTALLER RAN INTO AN NGINST BUG IN RESOLVING "DB_CLIENT"
 30614758 : OPATCH UPGRADE FAILED TO 13.9.4.2.1 FROM 13.9.4.2.0
 30639894 : COPYBINARY.SH IS NOT COPYING ALL FILES IN THE ORACLE HOME
 30650032 : GETAVAILABLEPATCHE API IS NOT WORKING
 30670676 : Fix for Bug 30670676
 30753555 : 13.4 EM INSTALL ON ONEOFF APPLICATION IS FAILING SOLARIS SPARC ZONE 11.3 FAILS
 
13.9.4.2.2
-----------
 30163394 : OPATCH TAKES TOO MUCH TIME TO COMPLETE
 30489794 : OPATCH TAKES 20+ MINUTES ON SOLARIS SPARC 64 BIT SYSTEMS(SUPER CLUSTER) FOR FMW PATCHES
 30687067 : 13.4 STACK 12.2.1.3.0 AGENT PATCH PLAN ANALYSIS FAILS
 28788794 : NEED NO BACKUP FILES OPTION TO REDUCE DOCKER IMAGE SIZE INCREASE
 24953000 : [EM13.2PG]AGENT PUSH TO RAC ENV,ORACLE USER LOCK INVENTORY DIRECTORY
 30614758 : OPATCH UPGRADE FAILED TO 13.9.4.2.1 FROM 13.9.4.2.0
 30639894 : COPYBINARY.SH IS NOT COPYING ALL FILES IN THE ORACLE HOME

13.9.4.2.1
----------
 30081813 : PERL PATCHING FAILS IN FMW 12.2.1.3.0
 29909359 : BUILD FAILURE OBSERVED IN A WLS WEBSERVICES SUITE WITH OPATCH 13.9.4.2.0
 30251029 : ERROR IN THE OUTPUT WHEN EXECUTING THE COMPAREINVENTORY SCRIPT.
 29450902 : OPATCH 13.9.4 INSTALLER CHECKS PERMISSION OF PARENT FOLDER OF ORACLE_HOME
 29334003 : WEBLOGIC PSU FAILING WITH JAVA.NIO.FILE.ACCESSDENIEDEXCEPTION:/WLSERVER

13.9.4.2.0
----------
 Replacement in Use Feature (-oop), OPatch wil be able to patch files which are in use (being used by other application)
 29137924 : Generated POM file dependency artifacts are incorrect (BUILD FAILURE OBSERVED IN WEBSERVICES MAVEN PLUGIN SUITE WS-MAVENPLUGIN-RISK1)
 28632744 : OPATCH NOT PERFORMING STRING SUBS ON FILE ADDED TO COMPDEF IN OPATCH
 28674381 : VERIFY AND FIX REFCOUNTS BEFORE DISTRIBUTION INSTALLATION
 28710121 : FIX DEINSTALL OF MULTIPLE DISTRIBUTIONS IN THE SAME OH
 28732248 : IN CLONING OF BUILD_HOME, ANT-SOA-COMMON.XML NOT INSTANTIATED
 28758292 : LSINV FAILED AFTER PATCH APPLIED WITH OPATCH/CAS ON NG HOME
 28844525 : INFRA DISTRIBUTION-LEVEL BUNDLE PATCH HAS ONLY XML FILES IN THE PAYLOAD


Details about NGINST Patches
----------------------------
Patch 31101362: NGINST SPU FOR 13.9.4.2.2 FOR JACKSON-DATABIND UPDATE TO 2.10.2

	1. The fix for this bug is already present in the current installer, no need to apply patch 31101362 as the fix is already available. 
	1a. Further to point #1, if you have already applied this patch it will show up in the inventory, 
	    you cannot roll it back after the upgrade, its harmless and we will fix the functionality later to rollback such intern patches.
	1b. If you have not yet applied 31101362 and not upgraded OPatch 13.9.4.2.8, then you just need to upgrade the new OPatch which has the fix, 
	    do not try to apply this patch 31101362 after the OPatch upgrade as that would result in an error.
	
Patch 29137924 : Generated POM file dependency artifacts are incorrect (BUILD FAILURE OBSERVED IN WEBSERVICES MAVEN PLUGIN SUITE WS-MAVENPLUGIN-RISK1)

	1. The fix for this bug is already present in the current installer, no need to apply patch 29137924 as the fix is already available. 
	1a. Further to point #1, if you have already applied this patch it will show up in the inventory , you cannot roll it back after the upgrade, 
	    its harmless and we will fix the functionality later to rollback such intern patches.
	1b. If you have not yet applied 29137924 and not upgraded OPatch 13.9.4.2.8, then you just need to upgrade the new OPatch which has the fix, 
	    do not try to apply this patch 29137924 after the OPatch upgrade as that would result in an error.

Patch 29909359: BUILD FAILURE OBSERVED IN A WLS WEBSERVICES SUITE WITH OPATCH 13.9.4.2.0

	1. The fix for this bug is already present in the current installer, no need to apply patch 29909359 as the fix is already available. 
	1a. Further to point #1, if you have already applied this patch it will show up in the inventory , you cannot roll it back after the upgrade, 
	    its harmless and we will fix the functionality later to rollback such intern patches.
	1b. If you have not yet applied 29909359 and not upgraded OPatch 13.9.4.2.8, then you just need to upgrade the new OPatch which has the fix, 
	    do not try to apply this patch 29909359 after the OPatch upgrade as that would result in an error.
