Go to primary content

Oracle® Fusion Middleware Release Notes for OWSM Bundle Patch 12.2.1.4.240908 |

# Oracle® Fusion Middleware

Bundle Patch Release Notes for OWSM BP 12.2.1.4.240908

Platform: Generic Platform

Product Patched: ORACLE WEB SERVICES MANAGER

Product Version: 12.2.1.4.0

This document describes how to install the patch for bug # 37035947 . It includes the following sections:

- Section 1, "Zero Downtime Patching"

- Section 2, "Prerequisites"

- Section 3, "Pre-Installation Instructions"

- Section 4, "Installation Instructions"

- Section 5, "Post-Installation Instructions"

- Section 6, "Uninstall Instructions"

- Section 7, "Post Uninstall Instructions"

- Section 8, "Bugs Fixed by This Patch"

## 1 Zero Downtime Patching

This patch has been marked as eligible for Zero Downtime Patching. The type of Zero Downtime Patching supported by this patch is FMW_ROLLING_ORACLE_HOME.
With Zero Downtime Patching, a Patch can be applied to a system in a manner that does not incur any downtime. This ensures that the system can remain available and functioning during the patching process. Certain prerequisites, however, must be met before the patch can be applied.
For more information, consult the My Oracle Support MOS Note: 1942159.1

## 2 Prerequisites

Ensure that you meet the following requirements before you install or uninstall the patch:

1. For compatibility with Oracle Web Services Manager features, it is required to install WLS and FMW Infrastructure patches recommended in My Oracle Support Doc ID 2806740.2 .

2. IDM products use OWSM features and require the following additional patches specifically at time of October 2024 release:

Patch 37054395: OINAV PATCH 12.2.1.4.241015
Patch 37144347: OIM Bundle Patch 12.2.1.4.241007

A direct link to all current IDM security patch recommendations: https://support.oracle.com/epmos/faces/DocumentDisplay?id=2806740.2#IDM12214

3. Oracle Fusion Middleware 12.2.1 products are installed with OPatch NextGen 13.3 to apply interim patches. The OPatch utility may be updated over time to resolve known issues

You can check your version using the following command:
ORACLE_HOME/OPatch/opatch version

Versions 12.2.1.0-12.2.1.2 do not require an update. For version 12.2.1.3 or newer, OPatch 13.9.4 is required.
OPatch 13.9.4 is available as Patch 28186730:
https://support.oracle.com/rs?type=patch&id=28186730
Review the following for more OPatch information:
Doc ID 1587524.1 Using OUI NextGen OPatch 13 for Oracle Fusion Middleware 12c
https://support.oracle.com/rs?type=doc&id=1587524.1

4. Verify the OUI Inventory

OPatch needs access to a valid OUI inventory to apply patches.
Note: This needs the ORACLE_HOME to be set (refer section "3. Pre-Installation Instructions") prior to run the below commands:
Validate the OUI inventory with the following commands:
$ opatch lsinventory -jre $ORACLE_HOME/oracle_common/jdk/jre
Note: Make sure the JDK version you use is the certified version for your product.
If the command errors out, contact Oracle Support and work to validate and verify the inventory setup before proceeding.

5. Create a location for storing the unzipped patch

This location will be referred to later in the document as PATCH_TOP.
Note: On WINDOWS, the preferred location is the drive root directory. For example, "C:\PATCH_TOP" and avoid choosing locations like, "C:\Documents and Settings\username\PATCH_TOP".
This is necessary due to the 256 characters limitation on Windows platform.

## 3 Pre-Installation Instructions

Set the ORACLE_HOME environment variable to the directory where you have installed ORACLE WEB SERVICES MANAGER.

## 4 Installation Instructions

1. Unzip the patch zip file into the PATCH_TOP
$ unzip -d PATCH_TOP p37035947_122140_Generic.zip
NOTE: On WINDOWS, the unzip command has a limitation of 256 characters in the path name.
If you encounter this, please use an alternate ZIP utility like 7-Zip to unzip the patch.
For example: To unzip using 7-zip, run the command:
"c:\Program Files\7-Zip\7z.exe" x p37035947_122140_Generic.zip
2. Set your current directory to the directory where the patch is located.
$ cd PATCH_TOP/37035947
3. Run OPatch to apply the patch.
$ opatch apply
Note:
When OPatch starts, it validates the patch and makes sure that there are no conflicts with the software already installed in the ORACLE_HOME.
In case of OPatch conflict, you will see a warning message similar to the one mentioned below:
Interim Patch XXXX has Conflict with patch(es) [ YYYY ] in OH ...
Conflict patches: YYYY
Patch(es) YYYY conflict with the patch currently being installed (XXXX).
If you continue, patch(es) YYYY will be rolled back and the new patch (XXXX) will be installed.
If a merge of the new patch (XXXX) and the conflicting patch(es) ( YYYY) is required,contact Oracle Support Services and request a Merged patch.
Do you want to proceed? [y|n]
n
You must stop the patch installation and contact oracle support on how to proceed.

## 5 Post-Installation Instructions

None

## 6 Uninstall Instructions

If you experience any problems after installing this patch, remove the patch as follows:

1. Make sure to follow the same Prerequisites or pre-install steps (if any) when uninstalling a patch

This includes setting up any environment variables like ORACLE_HOME and verifying the OUI inventory before uninstalling.

2. Change to the directory where the patch was unzipped

$ cd PATCH_TOP/37035947

3. Run OPatch to uninstall the patch

$ opatch rollback -id 37035947

## 7 Post Uninstall Instructions

Restart all servers (AdminServer and all Managed server(s)).
This is necessary to redeploy the original applications and bring the environment back to it's original state.

## 8 Bugs Fixed by This Patch

The following section lists the issues resolved in OWSM Bundle Patch 12.2.1.4.240908

- Issues Resolved in OWSM Bundle Patch 12.2.1.4.240908
- Issues Resolved in OWSM Bundle Patch 12.2.1.4.240625
- Issues Resolved in OWSM Bundle Patch 12.2.1.4.240313
- Issues Resolved in OWSM Bundle Patch 12.2.1.4.231003
- Issues Resolved in OWSM Bundle Patch 12.2.1.4.230308
- Issues Resolved in OWSM Bundle Patch 12.2.1.4.221128
- Issues Resolved in OWSM Bundle Patch 12.2.1.4.220905
- Issues Resolved in OWSM Bundle Patch 12.2.1.4.220701
- Issues Resolved in OWSM Bundle Patch 12.2.1.4.211129
- Issues Resolved in OWSM Bundle Patch 12.2.1.4.210520

## Issues Resolved in OWSM Bundle Patch 12.2.1.4.240908

Applying this bundle patch resolves the issues listed in the following table:

Issues Resolved in OWSM Bundle Patch 12.2.1.4.240908

Base Bug Number | Description of the Problem
--- | ---
36721858 | ETMI-TEST : CHANGE MESSAGE ALLOWLISTCACHESIZE MUST BE INCREASED FROM INFO TO WARNING
36706899 | THREAD LOCKING OCCURS AT POLICYACCESSPOINT.REGISTER
36589553 | WLST REFRESHCACHE CMD EXECUTION WAS NOT UPDATING WSM CONFIG CACHE FILE
36315136 | OWSM CANN'T BE STOPPED WHEN USED AS A STANDALONE JVM - OWSM IS ALWAYS FOR WLS
35865620 | OWSM ERROR: ILLEGALARGUMENTEXCEPTION: WSM-06405 : THE SUBJECT IS NOT REGISTERED WITH THE ASSEMBLY

## Issues Resolved in OWSM Bundle Patch 12.2.1.4.240625

Applying this bundle patch resolves the issues listed in the following table:

Issues Resolved in OWSM Bundle Patch 12.2.1.4.240625

Base Bug Number | Description of the Problem
--- | ---
36299418 | Fix for Bug 36299418
36241541 | INTERMITTENTLY ENCOUNTERING JAVA.LANG.ARRAYINDEXOUTOFBOUNDSEXCEPTION AT ORACLE.WSM.POLICYACCESS.POLICYACCESSPOINT.ADDSUBJECTSANDREGISTERLISTENER
35743552 | NOT ABLE TO FETCH PASSWORD FROM KEY STORE FOR FIRST 10 MINS

## Issues Resolved in OWSM Bundle Patch 12.2.1.4.240313

Applying this bundle patch resolves the issues listed in the following table:

Issues Resolved in OWSM Bundle Patch 12.2.1.4.240313

Base Bug Number | Description of the Problem
--- | ---
36040424 | SERVER DIAGNOSTIC LOG FLOODED WITH WSM.AGENT.HANDLER.JAXRS.RESTJEE NOTIFICATIONS
35994898 | PSR PERF: FMW 12C - NPE IN OWSM
35754220 | STRESS:FA:CRM:MEM:BATCH REST:HIGH RETENTION OF WSMFKSKEYSTORE OBJECTS DESPITE MAX CACHE SIZE SET TO 10000 PER BUG 32631457
35600066 | EEHO: MULTIPLE SERVICESERVER RESTART DUE TO STUCK CAUSED BY 'ORACLE.WSM.POLICYACCESS.POLICYACCESSPOINT.REGISTER
35453135 | CVE-2022-45378
35208560 | ILLEGALARGUMENTEXCEPTION: ILLEGAL CAPACITY ERROR IN SOAP CALLS
33550287 | REGRESSION: WSM-02271 : THE PORTABLE EXPRESSION \REST-CLIENT(HTTPS://...) DOES NOT IDENTIFY A SUBJECT CALLING URL FROM REST CLIENT

## Issues Resolved in OWSM Bundle Patch 12.2.1.4.231003

Applying this bundle patch resolves the issues listed in the following table:

Issues Resolved in OWSM Bundle Patch 12.2.1.4.231003

Base Bug Number | Description of the Problem
--- | ---
35708891 | DIAGNOSTIC LOGS GET FLOODED WITH DIFFERENT MESSAGES NOW
35378863 | NEW ALLOWLIST FEATURE IS NEEDED FOR RACE CONDITIONS BETWEEN UNREGISTER AND REGISTER
35196383 | SOWSM ERROR - WSM-07604 : INTERNAL ERROR DURING POLICY ENFORCEMENT
34482656 | NPE AT RESFRESH CONFIGURATIONMANAGER CLASS
34306245 | OWSM> ORG.CODEHAUS.JACKSON.JSONPARSEEXCEPTION CLASSNOTFOUND EXCEPTION

## Issues Resolved in OWSM Bundle Patch 12.2.1.4.230308

Applying this bundle patch resolves the issues listed in the following table:

Issues Resolved in OWSM Bundle Patch 12.2.1.4.230308

Base Bug Number | Description of the Problem
--- | ---
35090372 | CHANGE THE PAP INTERNAL CACHES FROM STATIC TO SINGLETON OBJECT TO PROTECT THE CACHES
34910743 | STRESS:FA:SRV:THE DEFAULT VALUE OF MANAGE.PAP.SUBJECT.CACHE IS FALSE IN SOME ENV
34769450 | INDEXOUTOFBOUNDSEXCEPTION WITH OCT 2022 CPU APPLIED
34748122 | Fix for Bug 34748122
34748040 | Fix for Bug 34748040
34747960 | Fix for Bug 34747960

## Issues Resolved in OWSM Bundle Patch 12.2.1.4.221128

Applying this bundle patch resolves the issues listed in the following table:

Issues Resolved in OWSM Bundle Patch 12.2.1.4.221128

Base Bug Number | Description of the Problem
--- | ---
34748887 | CVE-2023-21862
34725812 | COHERENCE LOCALCACHE MUST BE USED FOR TOKEN CACHES
34617915 | CE MAKE DEFAULT VALUE OF MANAGE.PAP.SUBJECT.CACHE TO TRUE
34538564 | NEED TO HANDLE THE EXCEPTIONS FROM COHERENCE
34480500 | REST ENDPOINT NOT RETURNING CORRECT RESPONSE IN GROOVY AFTER OWSM EOO 34449041
34273676 | ERROR DURING WEBLOGIC UPGRADE:JAVA.LANG.NULLPOINTEREXCEPTION
33679790 | ALLOW MECHANISM TO ADD TOKENTYPE PARAMETER TO THE SECURITYTOKENREFERENCE TAG.

## Issues Resolved in OWSM Bundle Patch 12.2.1.4.220905

Applying this bundle patch resolves the issues listed in the following table:

Issues Resolved in OWSM Bundle Patch 12.2.1.4.220905

Base Bug Number | Description of the Problem
--- | ---
34470709 | WSM-07604 : INTERNAL ERROR DURING POLICY INVOKING REST
34430773 | LATEST WSM BP 34341032 CAUSING NPE ON ADMIN SERVER STARTUP IF WSM-PM IS NOT TARGETTED TO ADMIN
34281572 | FMWTOOLS_12.2.1.6.0: UMS API call to MessagingClient.send errors with InvalidSecurity
34132701 | STRESS BPM REST:GET NULLPOINTEREXCEPTION AT ORACLE.WSM.METADATA.MODEL.POLICYASSEMBLY.PROCESSSUBJECTDEF
34059613 | WSM-07604 : INTERNAL ERROR DURING POLICYAAAAAA INVOKING REST
34020923 | STRESS:FA:SRV:MEMORY LEAK ON ORACLE.WSM.POLICYACCESS.POLICYACCESSPOINT
33745192 | UNABLE TO ACCESS TO EXTERNALLY EXPOSED WEB SERVICES/WSDL
30290939 | REMOVING ORACLE.OWASP COMPONENT FROM ENTSEC

## Issues Resolved in OWSM Bundle Patch 12.2.1.4.220701

Applying this bundle patch resolves the issues listed in the following table:

Issues Resolved in OWSM Bundle Patch 12.2.1.4.220701

Base Bug Number | Description of the Problem
--- | ---
34268796 | SERVER CONSOLE LOGS AND DIAG LOGS LOADED WITH ORACLE.WSM.SECURITY.JPS.WSMKEYSTORECACHE WARNING
34006815 | STRESS:FA:CRM:MEMORY LEAK ON ORACLE.WSM.POLICYMANAGER.ACCESSOR.BEANACCESSOR DURING BATCH REST
33848992 | ReplicatedCache:oracle.wls.internal.wsm:OWSMReplicatedCache, member=12): UnsupportedOperation: class com.tangosol.util.SafeHashMap does not implement CacheMap interface
33733321 | JpsAuth.checkPermission() is not working as expected for wildcard match
33665195 | ST: 2201 GA SOURCE POOL2 : THE REST SERVICE CALL WILL FAIL ON THE FIRST ATTEMPT AFTER THE BOUNCE
33546536 | CVE-2022-21497
33523131 | STRESS:FA:SRV:MEMORY LEAK ON ORACLE.WSM.METADATA.MODEL.POLICYASSEMBLY
33466386 | REST ADAPTER WITH OAUTH2 POLICIES NOT PERSISTING THE ACCESS TOKEN EXPIRES_IN
33442540 | STRESS:FA:CRM:FMW12C:MEM LEAK ON POLICYACCESSPOINT DURING WORKSPACE FLOW
33418419 | WSM-PMREST/V2 REST APIS FAILING IN 12C HCM QA ENVIRONMENTS
33388702 | 22.01B - ZGUD UPGRADE FMW12C REG: NOT ABLE TO GET ACCESS TOKEN VIA WLST COMMAND
33016484 | OSDT does not support sha256-rsa-MGF1 signature algorithm
32631457 | STRESS:FA:FIN:MEM:FMW12C:MEMORY LEAK IN ORACLE.WSM.SECURITY.JPS.WSMKEYSTORECACHE
32251761 | BUG 32000982 - FA 12C: TASK NOT SHOWN IN BELL NOTIFICATIONS
31857530 | IF DIFFERENT SIGN AND ENC USED RESULTS IN ERROR WSM-00345 : FAILED TO DECRYPT THE ENCRYPTED KEY
31025200 | WEBLOGIC UPGRADE FROM 12.2.1.3 TO 12.2.1.4 RECONFIG FAILS WITH OWSM POLICY ERRORS
29127770 | IDENTITY PROPAGATION NOT PROPERLY WORKING WHEN CALLING A WS SECURED BY OWSM SAML POLICY
28339823 | WRONG API CALLED BY ORACLE.WSM.AGENT.HANDLER.SERVLET.SECURITYFILTER$2$1.ISUSERIN

## Issues Resolved in OWSM Bundle Patch 12.2.1.4.211129

Applying this bundle patch resolves the issues listed in the following table:

Issues Resolved in OWSM Bundle Patch 12.2.1.4.211129

Base Bug Number | Description of the Problem
--- | ---
33444410 | SPECTRA REST SERVICE FAILS WITH OAUTH TOKEN RETURNS 404 ERROR
33440009 | STRING INDEX OUT OF RANGE THROWN FROM HTTPBASICAUTHPROCESSOR.VERIFY
32996090 | GPA TEST CASES ARE FAILING IN STAGE 86
32908669 | OAUTH2CLIENTTOKENMANAGER NOT HONOURING SUBJECT PRECEDENCE
32848872 | CONCURRENTMODIFICATIONEXCEPTION DURING REST CALL
32805679 | SOA SERVER DIAGNOSTIC LOGS FILLED WITH EXTRA STACK TRACE ENTRIES FROM ORACLE.WSM.AGENT.HANDLER.JAXRS.RESTCLIENTFILTER
32769893 | REST Adapter csf-key property ignored
32761508 | 12C : REST GET ON A BROWSER RESULTS IN 401 ERROS
32698220 | STRESS:FA:PRJ:FMW12C:INTERMITTENT JAVA.SECURITY.CERT.CERTPATHVALIDATOREXCEPTION: PATH DOES NOT CHAIN WITH ANY OF THE TRUST ANCHORS ERROR FROM OWSM
32290078 | WSM-0414 WARNING AFTER EACH SOA CALL TO A REST SERVICE
31132583 | STRESS:FA:MEM:FMW12C:OWSM MUST HAVE LIFE CYCLE MANAGEMENT TO MANAGE SIZE OF RUNTIME CACHE
30925967 | Logger issue - VinodXXX: policy set found null: name needs to be removed

## Issues Resolved in OWSM Bundle Patch 12.2.1.4.210520

Applying this bundle patch resolves the issues listed in the following table:

Issues Resolved in OWSM Bundle Patch 12.2.1.4.210520

Base Bug Number | Description of the Problem
--- | ---
32128719 | SOMEHOW WSM-PM APPLICATION IS NOT GETTING STARTED PROPERLY DUE TO IT OWSM REPOSITORY WON'T HAVE UPGRADED CONFIGURATION OF 12.2.1.5.0 VERSION.
31923074 | OWSM 12C DELETION OF PM.URL VALUES ISN'T POSSIBLE WITH PATCH 30616367
31862310 | FMW12C QUIESCINGANDSTARTINGNEWFATOPOLOGYFORREUSECOMPUTEONLINE FAILED WITH WLSTCONFIGUREWSMTOKENISSUERTRUSTCMD
31739957 | FUSION X509 CERTIFICATES NOT AVAILABLE ON FUSION WSDL
31426299 | ISSUE WITH LOGGER OF THE REST FILTER
31405124 | OWSM READINESS CHECK POST UPGRADE SAYS READY FOR UPGRADE
31232025 | UG 31207645 - REQUEST TO CROSS TENANT AUTHENTICATOR IS FAILING AFTER UPGRADE FROM 12.1.3
31091377 | OWSM API'S ARE ALWAYS RETURNING A CACHED TOKEN
31036596 | POST IMPORT OF JWT TOKEN, USER GETTING 401 UNAUTHORISED ERROR
31003323 | OWSM MUST MANAGE A SINGLE DOCUMENT PER TENANT
30945656 | STUCK THREADS ACCUMULATED DURING OWSM POLICYMANAGER PROCESSING
30782792 | PSR PERF : REL13-FADOMAIN-MWSERVER/SERVICE SERVER RESTART DUE TO STUCK THREADS DUE TO LOCK ON WSMKEYSTORECACHE.GETKEYSTOREWRAPPER
30689649 | 12.2.1.3BP: BUG 28339823 SHOULD ALSO BE FIXED FOR JERSEY RESOURCE
30616367 | OWSM 12214 MULTIPLE PM.URL WITH WLST SETWSMCONFIGURATION ARE NOT POSSIBLE
30534922 | OWSM CONFIG UPGRADE FAILED WITH [WSM] [ERROR] [] [ORACLE.WSM.RESOURCES.RESMGMT] [TID: 26] JAVAX.XML.BIND.UNMARSHALEXCEPTION[[ - WITH LINKED EXCEPTION:
30497950 | RS512 SUPPORT FOR JWTTOKENPROCESSOR
30453089 | CLASSCASTEXCEPTION ERROR CALLING REST AZURE CLOUD SERVICE WITH OAUTH PROTECTION
29479928 | UNIQUE PARTICLE ATTRIBUTION ERROR FROM OWSM IN RPM APPLICATION

Bundle Patch Release Notes for OWSM BP (12.2.1.4.240908)

Copyright © 2024. Oracle and/or its affiliates. All rights reserved.

This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.

The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing.

If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, then the following notice is applicable:

U.S. GOVERNMENT END USERS: Oracle programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, delivered to U.S. Government end users are "commercial computer software" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, use, duplication, disclosure, modification, and adaptation of the programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, shall be subject to license terms and license restrictions applicable to the programs. No other rights are granted to the U.S. Government.

This software or hardware is developed for general use in a variety of information management applications. It is not developed or intended for use in any inherently dangerous applications, including applications that may create a risk of personal injury. If you use this software or hardware in dangerous applications, then you shall be responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure its safe use. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications.

Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.

Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of The Open Group.

This software or hardware and documentation may provide access to or information about content, products, and services from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content, products, and services unless otherwise set forth in an applicable agreement between you and Oracle. Oracle Corporation and its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of third-party content, products, or services, except as set forth in an applicable agreement between you and Oracle.