Monday, August 5, 2019

Mitigate the SSLv3 Vulnerability ("POODLE Attack") in Oracle E-Business Suite

For Release 12.2.X, you do not add the configuration to a customized AutoConfig template. Instead, 12.2.X customers must modify the ssl.conf file using the Oracle Fusion Middleware console using the steps below:

Log in to the Oracle Fusion Middleware Control Console (http://.:/em). For example, http://ebs122.example.com:7001/em.
Select the web tier target under the EBS domain.
Select Administration > Advanced Configuration.
Select the ssl.conf file for edit.
Update the SSLProtocol entry to match the following:
SSLProtocol all -SSLv2 -SSLv3
SSLCipherSuite HIGH:MEDIUM:!aNULL:!RC4:!3DES:+HIGH:+MEDIUM
Click Apply.

  1. Edit the admin.conf file (for Oracle E-Business Suite Release 12.2 only).
    Change:
    SSLCipherSuite SSL_RSA_WITH_RC4_128_SHA
    SSLProtocol nzos_Version_1_0 nzos_Version_3_0
     to
    SSLCipherSuite :
    SSLProtocol nzos_Version_1_0

    For example:
    SSLCipherSuite SSL_RSA_WITH_AES_128_CBC_SHA
    SSLProtocol nzos_Version_1_0
     
AS per oracle document  Doc ID 1937646.1

Tuesday, April 30, 2019

Resolves Very Long Time to Apply Patches (WLS)

Enhancement for WLS BSU (Smart Update): Resolves Very Long Time to Apply Patches - Especially When Checking for Patch Conflicts (Doc ID 2271366.1)

Thursday, April 25, 2019

Java.lang.OutOfMemoryError: GC

Weblogic 10.3.6 Patching Error Using BSU - "java.lang.OutOfMemoryError: GC overhead limit exceeded" (Doc ID 2007492.1)

Wednesday, April 24, 2019

Online Patching Enablement Patch 13543062 Fails With Error ORA-44305: Service Ebs_patch Is Running (Doc ID 1917886.1)

How to resolve ADOP error  ORA-44305 error.

sqlplus '/as sysdba'
exec dbms_service.STOP_SERVICE('ebs_patch');