===============================
Bundle Patch for Bug: 36402397
===============================

Date:  Thu Mar 14 20:07:46 2024
---------------------------------
Platform Patch for : Generic
Product Patched    : ORACLE WEB SERVICES MANAGER
Product Version    : 12.2.1.4.0


This document describes how to install the patch for
bug #  36402397. It includes the following sections:

	Section 1, "Zero Downtime Patching"

 	Section 2, "Prerequisites"

	Section 3, "Pre-Installation Instructions"

	Section 4, "Installation Instructions"

	Section 5, "Post-Installation Instructions"

	Section 6, "Deinstallation Instructions"

	Section 7, "Post Deinstallation Instructions"

	Section 8, "Bugs Fixed by This Patch"


 
1 Zero Downtime Patching
------------------------------
This patch has been marked as eligible for Zero Downtime Patching. 
The type of Zero Downtime Patching supported by this patch is FMW_ROLLING_ORACLE_HOME.

With Zero Downtime Patching, a Patch can be applied to a system in a manner
that does not incur any downtime. This ensures that the system can remain
available and functioning during the patching process. Certain
pre-requisites, however, must be met before the patch can be applied.

For more information, consult the My Oracle Support MOS Note: 1942159.1

 

2 Prerequisites
----------------
Ensure that you meet the following requirements before you install or
deinstall the patch:

1. For compatibility with Oracle Web Services Manager features, it is required to install WLS and FMW Infrastructure patches recommended in My Oracle Support Doc ID 2806740.2 .

2. IDM products use OWSM features and require the following additional patches specifically at time of April 2024 release:
Patch 35780760: NEED OPATCHABLE PATCH FROM OINAV_MAIN_GENERIC DATED LABEL
+ Patch 36513778: OIM Bundle Patch 12.2.1.4.240415 

A direct link to all current IDM security patch recommendations:
https://support.oracle.com/epmos/faces/DocumentDisplay?id=2806740.2#IDM12214


3. Oracle Fusion Middleware 12.2.1 products are installed with OPatch
NextGen 13.3 to apply interim patches.
The OPatch utility may be updated over time to resolve known issues.

You can check your version using the following command:

ORACLE_HOME/OPatch/opatch version

Versions 12.2.1.0-12.2.1.2 do not require an update. For version 12.2.1.3 or newer, 
OPatch 13.9.4 is required. 

OPatch 13.9.4 is available as Patch 28186730: 
https://support.oracle.com/rs?type=patch&id=28186730 

Review the following for more OPatch information: 

Doc ID 1587524.1 Using OUI NextGen OPatch 13 for Oracle Fusion Middleware 12c 
https://support.oracle.com/rs?type=doc&id=1587524.1 



4. Verify the OUI Inventory.
OPatch needs access to a valid OUI inventory to apply patches.

Note: This needs the ORACLE_HOME to be set(refer section "2. Pre-Installation Instructions")
prior to run the below commands:

Validate the OUI inventory with the following commands:

$ opatch lsinventory -jre $ORACLE_HOME/oracle_common/jdk/jre

Note:
Make sure the JDK version you use is the certified version for your product.

If the command errors out, contact Oracle Support and work to validate
and verify the inventory setup before proceeding.


5. Create a location for storing the unzipped patch: 

This location will be referred to later in the document as PATCH_TOP.

NOTE: On WINDOWS, the preferred location is the drive root directory.
For example, "C:\PATCH_TOP" and avoid choosing locations like,
"C:\Documents and Settings\username\PATCH_TOP".
This is necessary due to the 256 characters limitation on Windows
platform.

3 Pre-Installation Instructions
-------------------------------

1. Set the ORACLE_HOME environment variable to the directory where you have installed ORACLE WEB SERVICES MANAGER.




4 Installation Instructions
---------------------------

1. Unzip the patch zip file into the PATCH_TOP.

$ unzip -d PATCH_TOP p36402397_122140_Generic.zip

NOTE: On WINDOWS, the unzip command has a limitation of 256 characters in the path name.
If you encounter this, please use an alternate ZIP utility like 7-Zip to unzip the patch.

For example: To unzip using 7-zip, run the command:
"c:\Program Files\7-Zip\7z.exe" x  p36402397_122140_Generic.zip

2. Set your current directory to the directory where the patch is located.

$ cd PATCH_TOP/36402397

3. Run OPatch to apply the patch.

$ opatch apply


Note:
-----
When OPatch starts, it validates the patch and makes sure that there are no
conflicts with the software already installed in the ORACLE_HOME.

In case of opatch conflict, you will see a warning message similar to the one mentioned below:

Interim Patch XXXX has Conflict with patch(es) [ YYYY ] in OH ...
Conflict patches: YYYY
Patch(es) YYYY conflict with the patch currently being installed (XXXX).
If you continue, patch(es) YYYY will be rolled back and the new patch (XXXX) will be installed.

If a merge of the new patch (XXXX) and the conflicting patch(es) ( YYYY) is required,contact Oracle Support Services and request a Merged patch.

Do you want to proceed? [y|n]
n

You must stop the patch installation and contact oracle support on how to proceed.

5 Post-Installation Instructions
---------------------------------

NONE


6 Deinstallation Instructions
------------------------------

If you experience any problems after installing this patch, remove the patch as
follows:

1. Make sure to follow the same Prerequisites or pre-install steps (if any)
when deinstalling a patch.
This includes setting up any environment variables like ORACLE_HOME and
verifying the OUI inventory before deinstalling.

2. Change to the directory where the patch was unzipped.

$ cd PATCH_TOP/36402397

3. Run OPatch to deinstall the patch.

$ opatch rollback -id  36402397

7 Post Deinstallation Instructions
-----------------------------------
Restart all servers (AdminServer and all Managed server(s)).

This is necessary to redeploy the original applications and bring the
environment back to it's original state.

8 Bugs Fixed by This Patch
--------------------------
 
OWSM Bundle Patch 12.2.1.4.240313
 36040424: SERVER DIAGNOSTIC LOG FLOODED WITH WSM.AGENT.HANDLER.JAXRS.RESTJEE NOTIFICATIONS
 33550287: REGRESSION: "WSM-02271 : THE PORTABLE EXPRESSION \"REST-CLIENT(HTTPS://...) DOES NOT IDENTIFY A SUBJECT CALLING URL FROM REST CLIENT
 35994898: PSR PERF: FMW 12C - NPE IN OWSM
 35600066: EEHO: MULTIPLE SERVICESERVER RESTART DUE TO STUCK CAUSED BY 'ORACLE.WSM.POLICYACCESS.POLICYACCESSPOINT.REGISTER
 35208560: ILLEGALARGUMENTEXCEPTION: ILLEGAL CAPACITY ERROR IN SOAP CALLS
 35754220: STRESS:FA:CRM:MEM:BATCH REST:HIGH RETENTION OF WSMFKSKEYSTORE OBJECTS DESPITE MAX CACHE SIZE SET TO 10000 PER BUG 32631457
 35453135: CVE-2022-45378
 
OWSM Bundle Patch 12.2.1.4.231003
 35196383: SOWSM ERROR - WSM-07604 : INTERNAL ERROR DURING POLICY ENFORCEMENT
 35378863: NEW ALLOWLIST FEATURE IS NEEDED FOR RACE CONDITIONS BETWEEN UNREGISTER AND REGISTER
 34482656: NPE AT RESFRESH CONFIGURATIONMANAGER CLASS
 35708891: DIAGNOSTIC LOGS GET FLOODED WITH DIFFERENT MESSAGES NOW
 34306245: OWSM> ORG.CODEHAUS.JACKSON.JSONPARSEEXCEPTION CLASSNOTFOUND EXCEPTION
 
OWSM Bundle Patch 12.2.1.4.230308
 34769450: INDEXOUTOFBOUNDSEXCEPTION WITH OCT 2022 CPU APPLIED
 34747960: Fix for Bug 34747960
 34748040: Fix for Bug 34748040
 34748122: Fix for Bug 34748122
 35090372: CHANGE THE PAP INTERNAL CACHES FROM STATIC TO SINGLETON OBJECT TO PROTECT THE CACHES
 34910743: STRESS:FA:SRV:THE DEFAULT VALUE OF MANAGE.PAP.SUBJECT.CACHE IS FALSE IN SOME ENV
 
OWSM Bundle Patch 12.2.1.4.221128
 34273676: ERROR DURING WEBLOGIC UPGRADE:JAVA.LANG.NULLPOINTEREXCEPTION
 33679790: ALLOW MECHANISM TO ADD TOKENTYPE PARAMETER TO THE SECURITYTOKENREFERENCE TAG.
 34617915: CE MAKE DEFAULT VALUE OF MANAGE.PAP.SUBJECT.CACHE TO TRUE
 34480500: REST ENDPOINT NOT RETURNING CORRECT RESPONSE IN GROOVY AFTER OWSM EOO 34449041
 34538564: NEED TO HANDLE THE EXCEPTIONS FROM COHERENCE
 34748887: CVE-2023-21862
 34725812: COHERENCE LOCALCACHE MUST BE USED FOR TOKEN CACHES
 
OWSM Bundle Patch 12.2.1.4.220905
 34132701: STRESS BPM REST:GET NULLPOINTEREXCEPTION AT ORACLE.WSM.METADATA.MODEL.POLICYASSEMBLY.PROCESSSUBJECTDEF
 34020923: STRESS:FA:SRV:MEMORY LEAK ON ORACLE.WSM.POLICYACCESS.POLICYACCESSPOINT
 30290939: REMOVING ORACLE.OWASP COMPONENT FROM ENTSEC
 34059613: WSM-07604 : INTERNAL ERROR DURING POLICY??A???A???A? INVOKING REST
 33745192: UNABLE TO ACCESS TO EXTERNALLY EXPOSED WEB SERVICES/WSDL
 34430773: LATEST WSM BP 34341032 CAUSING NPE ON ADMIN SERVER STARTUP IF WSM-PM IS NOT TARGETTED TO ADMIN
 34281572: FMWTOOLS_12.2.1.6.0: UMS API call to MessagingClient.send errors with InvalidSecurity
 34470709: WSM-07604 : INTERNAL ERROR DURING POLICY INVOKING REST
 
OWSM Bundle Patch 12.2.1.4.220701
 32631457: STRESS:FA:FIN:MEM:FMW12C:MEMORY LEAK IN ORACLE.WSM.SECURITY.JPS.WSMKEYSTORECACHE
 33848992: ReplicatedCache:oracle.wls.internal.wsm:OWSMReplicatedCache, member=12): UnsupportedOperation: class "com.tangosol.util.SafeHashMap" does not implement CacheMap interface
 33388702: 22.01B - ZGUD UPGRADE FMW12C REG: NOT ABLE TO GET ACCESS TOKEN VIA WLST COMMAND
 33665195: ST: 2201 GA SOURCE POOL2 : THE REST SERVICE CALL WILL FAIL ON THE FIRST ATTEMPT AFTER THE BOUNCE
 33733321: JpsAuth.checkPermission() is not working as expected for wildcard match
 33523131: STRESS:FA:SRV:MEMORY LEAK ON ORACLE.WSM.METADATA.MODEL.POLICYASSEMBLY
 33442540: STRESS:FA:CRM:FMW12C:MEM LEAK ON POLICYACCESSPOINT DURING WORKSPACE FLOW
 31857530: IF DIFFERENT SIGN AND ENC USED RESULTS IN ERROR WSM-00345 : FAILED TO DECRYPT THE ENCRYPTED KEY
 32251761: BUG 32000982 - FA 12C: TASK NOT SHOWN IN BELL NOTIFICATIONS
 33546536: CVE-2022-21497
 29127770: IDENTITY PROPAGATION NOT PROPERLY WORKING WHEN CALLING A WS SECURED BY OWSM SAML POLICY
 34006815: STRESS:FA:CRM:MEMORY LEAK ON ORACLE.WSM.POLICYMANAGER.ACCESSOR.BEANACCESSOR DURING BATCH REST
 31025200: WEBLOGIC UPGRADE FROM 12.2.1.3 TO 12.2.1.4 RECONFIG FAILS WITH OWSM POLICY ERRORS
 28339823: WRONG API CALLED BY ORACLE.WSM.AGENT.HANDLER.SERVLET.SECURITYFILTER$2$1.ISUSERIN
 33466386: REST ADAPTER WITH OAUTH2 POLICIES NOT PERSISTING THE ACCESS TOKEN EXPIRES_IN
 33016484: OSDT does not support sha256-rsa-MGF1 signature algorithm
 33418419: WSM-PMREST/V2 REST APIS FAILING IN 12C HCM QA ENVIRONMENTS
 34268796: SERVER CONSOLE LOGS AND DIAG LOGS LOADED WITH "ORACLE.WSM.SECURITY.JPS.WSMKEYSTORECACHE" WARNING
 
OWSM Bundle Patch 12.2.1.4.211129
 31132583: STRESS:FA:MEM:FMW12C:OWSM MUST HAVE LIFE CYCLE MANAGEMENT TO MANAGE SIZE OF RUNTIME CACHE
 30925967: Logger issue - "VinodXXX: policy set found null: " name needs to be removed
 32805679: SOA SERVER DIAGNOSTIC LOGS FILLED WITH EXTRA STACK TRACE ENTRIES FROM ORACLE.WSM.AGENT.HANDLER.JAXRS.RESTCLIENTFILTER
 32908669: OAUTH2CLIENTTOKENMANAGER NOT HONOURING SUBJECT PRECEDENCE
 32996090: GPA TEST CASES ARE FAILING IN STAGE 86
 32848872: CONCURRENTMODIFICATIONEXCEPTION DURING REST CALL
 32290078: WSM-0414 WARNING AFTER EACH SOA CALL TO A REST SERVICE
 32761508: 12C : REST GET ON A BROWSER RESULTS IN 401 ERROS
 32769893: REST Adapter csf-key property ignored
 32698220: STRESS:FA:PRJ:FMW12C:INTERMITTENT JAVA.SECURITY.CERT.CERTPATHVALIDATOREXCEPTION: PATH DOES NOT CHAIN WITH ANY OF THE TRUST ANCHORS ERROR FROM OWSM
 33444410: SPECTRA REST SERVICE FAILS WITH OAUTH TOKEN RETURNS 404 ERROR
 33440009: STRING INDEX OUT OF RANGE THROWN FROM HTTPBASICAUTHPROCESSOR.VERIFY
 
OWSM Bundle Patch 12.2.1.4.210520
 30616367: OWSM 12214 MULTIPLE PM.URL WITH WLST SETWSMCONFIGURATION ARE NOT POSSIBLE
 30453089: CLASSCASTEXCEPTION ERROR CALLING REST AZURE CLOUD SERVICE WITH OAUTH PROTECTION
 30782792: PSR PERF : REL13-FADOMAIN-MWSERVER/SERVICE SERVER RESTART DUE TO STUCK THREADS DUE TO LOCK ON WSMKEYSTORECACHE.GETKEYSTOREWRAPPER
 31036596: POST IMPORT OF JWT TOKEN, USER GETTING 401 UNAUTHORISED ERROR
 30689649: 12.2.1.3BP: BUG 28339823  SHOULD ALSO BE FIXED FOR  JERSEY RESOURCE
 31091377: OWSM API'S ARE ALWAYS RETURNING A CACHED TOKEN
 30534922: OWSM CONFIG UPGRADE FAILED WITH [WSM] [ERROR] [] [ORACLE.WSM.RESOURCES.RESMGMT] [TID: 26] "JAVAX.XML.BIND.UNMARSHALEXCEPTION[[  - WITH LINKED EXCEPTION:
 31003323: OWSM MUST MANAGE A SINGLE DOCUMENT PER TENANT
 30497950: RS512 SUPPORT FOR JWTTOKENPROCESSOR
 31232025: UG 31207645 - REQUEST TO CROSS TENANT AUTHENTICATOR IS FAILING AFTER UPGRADE FROM 12.1.3
 31862310: FMW12C  QUIESCINGANDSTARTINGNEWFATOPOLOGYFORREUSECOMPUTEONLINE FAILED WITH WLSTCONFIGUREWSMTOKENISSUERTRUSTCMD
 31426299: ISSUE WITH LOGGER OF THE REST FILTER
 31405124: OWSM READINESS CHECK POST UPGRADE SAYS READY FOR UPGRADE
 31923074: OWSM 12C DELETION OF PM.URL VALUES ISN'T POSSIBLE WITH PATCH 30616367
 32128719: SOMEHOW "WSM-PM" APPLICATION IS NOT GETTING STARTED PROPERLY DUE TO IT OWSM REPOSITORY WON'T HAVE UPGRADED CONFIGURATION OF 12.2.1.5.0 VERSION.
 30945656: STUCK THREADS ACCUMULATED DURING OWSM POLICYMANAGER PROCESSING
 31739957: FUSION X509 CERTIFICATES NOT AVAILABLE ON FUSION WSDL
 29479928: "UNIQUE PARTICLE ATTRIBUTION" ERROR FROM OWSM IN RPM APPLICATION


-----------------------------------------------------------------------------
DISCLAIMER:


Oracle Corporation recommends to upgrade to the latest production patch
set, when available. Applying this patch could overwrite other interim
patches applied since the last patch set. Customers need to make a request
to Oracle Support for a patch that includes those fixes, as well as inform
Oracle Support about all the patches installed when a Service Request is
opened. Please download, test, and provide feedback as soon as possible
to assist in the timely resolution of this problem.

Copyright (c)  2024, Oracle and/or its affiliates. All rights reserved.
----------------------------------------------------------------------------- 
