{"id":489,"date":"2021-12-29T22:27:01","date_gmt":"2021-12-29T21:27:01","guid":{"rendered":"https:\/\/www.dbi-services.com\/blog\/2021\/12\/29\/opatch-hangs-while-patching-oem-13-4-concerning-the-log4j-vulnerability\/"},"modified":"2022-04-06T08:26:24","modified_gmt":"2022-04-06T06:26:24","slug":"opatch-hangs-while-patching-oem-13-4-concerning-the-log4j-vulnerability","status":"publish","type":"post","link":"https:\/\/www.dbi-services.com\/blog\/opatch-hangs-while-patching-oem-13-4-concerning-the-log4j-vulnerability\/","title":{"rendered":"opatch hangs while patching OEM 13.4. concerning the log4j-vulnerability"},"content":{"rendered":"

By Clemens Bleile<\/h2>\n

To address the log4j-vulnerability I recently had to fix the Oracle Enterprise Manager 13.4.-installation for a customer. <\/p>\n

REMARK: Please check the following link for details concerning the log4j-vulnerability and how Oracle is affected:<\/p>\n

alert-cve-2021-44228<\/a><\/p>\n

and the following MOS Notes:<\/p>\n

– Impact of December 2021 Apache Log4j Vulnerabilities on Oracle Products and Services (CVE-2021-44228, CVE-2021-45046) (Doc ID 2827611.1)
\n– Impact of December 2021 Apache Log4j Vulnerabilities on Oracle on-premises products (CVE-2021-44228, CVE-2021-45046) (Doc ID 2830143.1)
\n– Security Alert For CVE-2021-44228,CVE-2021-45046 & CVE-2021-45105 Patch Availability Document for Oracle Enterprise Manager Cloud Control (Doc ID 2828296.1)<\/p>\n

REMARK: The link and the MOS Notes were correct at the time of writing the Blog. But this may have changed in the meantime.<\/p>\n

According the latter MOS Note the following has to be patched on OEM 13.4.:<\/p>\n

1. Patch WLS to OCT 2021: Patch 33412599<\/p>\n

\nunzip p33412599_122130_Generic.zip\ncd 33412599\nemctl stop oms -all\nopatch apply\nemctl start oms\n<\/pre>\n
REMARK: Patch 33691226 (12.2.1.3) is not applicable to EM Cloud Control 13c (13.4). See MOS Note “Security Alert CVE-2021-44228 \/ CVE-2021-45046 Patch Availability Document for Oracle WebLogic Server and Fusion Middleware (Doc ID 2827793.1)”.<\/p>\n
2. Apply Patch 33672721 on OMS Middleware HOME (DB Plugin Home Patch)<\/p>\n
\nunzip p33672721_134100_Generic.zip\ncd 33672721\nemctl stop oms\nexport PATH=$ORACLE_HOME\/OMSPatcher:$PATH\nomspatcher apply\nemctl start oms\n<\/pre>\n
During the patching of WLS with the OCT 2021 patch, the opatch utility did hang:<\/p>\n
\n\/home\/oracle\/cbleile\/log4j_patch_for_OEM\/33412599\/ [oms13c] opatch apply\n...\nOPatch detects the Middleware Home as \"\/u01\/app\/oracle\/middleware134\"\n\nVerifying environment and performing prerequisite checks...\n<\/pre>\n
Using <\/p>\n
\nps -ef | grep opatch\n<\/pre>\n
I could see a hanging fuser-command. The reason for the hang was a stale NFS-mount, because the NFS-server was down. The same would have happened with the second patch and omspatcher. To be able to continue I could force the unmount of the stale NFS-mount with the command<\/p>\n
\numount -f -l \/mnt\/orarepo\n<\/pre>\n
The hanging opatch-command could be Ctrl-C’ed and the patching repeated. opatch went through then.<\/p>\n
REMARK: To avoid the problem in the future it’s advised to soft-mount nfs as e.g. documented in this Blog<\/a>.<\/p>\n
The whole problem with opatch and fuser has also been documented here<\/a>. In that Blog an alternative workaround has been provided by using a fake-fuser-command through the property_file option of opatch.<\/p>\n
Finally everything could be patched successfully and I verified everything is OK with the Enterprise Manager 13.4.-installation:<\/p>\n
\n\/home\/oracle\/ [oms13c] opatch lspatches | grep 33412599\n33412599;WLS PATCH SET UPDATE 12.2.1.3.210929\n\/home\/oracle\/ [oms13c] opatch lspatches | grep 33672721\n33672721;Fix for bug 33672721\n<\/pre>\n","protected":false},"excerpt":{"rendered":"
By Clemens Bleile To address the log4j-vulnerability I recently had to fix the Oracle Enterprise Manager 13.4.-installation for a customer. REMARK: Please check the following link for details concerning the log4j-vulnerability and how Oracle is affected: alert-cve-2021-44228 and the following MOS Notes: – Impact of December 2021 Apache Log4j Vulnerabilities on Oracle Products and Services […]<\/p>\n","protected":false},"author":35,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[59],"tags":[109,110,111,112,113,114],"type_dbi":[],"class_list":["post-489","post","type-post","status-publish","format-standard","hentry","category-oracle","tag-hangs","tag-log4j","tag-mount","tag-nfs","tag-omspatcher","tag-opatch"],"acf":[],"yoast_head":"\nopatch hangs while patching OEM 13.4. concerning the log4j-vulnerability - dbi Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dbi-services.com\/blog\/opatch-hangs-while-patching-oem-13-4-concerning-the-log4j-vulnerability\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"opatch hangs while patching OEM 13.4. concerning the log4j-vulnerability\" \/>\n<meta property=\"og:description\" content=\"By Clemens Bleile To address the log4j-vulnerability I recently had to fix the Oracle Enterprise Manager 13.4.-installation for a customer. REMARK: Please check the following link for details concerning the log4j-vulnerability and how Oracle is affected: alert-cve-2021-44228 and the following MOS Notes: – Impact of December 2021 Apache Log4j Vulnerabilities on Oracle Products and Services […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dbi-services.com\/blog\/opatch-hangs-while-patching-oem-13-4-concerning-the-log4j-vulnerability\/\" \/>\n<meta property=\"og:site_name\" content=\"dbi Blog\" \/>\n<meta property=\"article:published_time\" content=\"2021-12-29T21:27:01+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-04-06T06:26:24+00:00\" \/>\n<meta name=\"author\" content=\"Clemens Bleile\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@ifgtxD2SrQ8r!YuXj\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Clemens Bleile\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/opatch-hangs-while-patching-oem-13-4-concerning-the-log4j-vulnerability\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/opatch-hangs-while-patching-oem-13-4-concerning-the-log4j-vulnerability\/\"},\"author\":{\"name\":\"Clemens Bleile\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/0ac04011f60f2e93c115358d0789c2da\"},\"headline\":\"opatch hangs while patching OEM 13.4. concerning the log4j-vulnerability\",\"datePublished\":\"2021-12-29T21:27:01+00:00\",\"dateModified\":\"2022-04-06T06:26:24+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/opatch-hangs-while-patching-oem-13-4-concerning-the-log4j-vulnerability\/\"},\"wordCount\":344,\"commentCount\":0,\"keywords\":[\"hangs\",\"log4j\",\"mount\",\"NFS\",\"omspatcher\",\"OPatch\"],\"articleSection\":[\"Oracle\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/opatch-hangs-while-patching-oem-13-4-concerning-the-log4j-vulnerability\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/opatch-hangs-while-patching-oem-13-4-concerning-the-log4j-vulnerability\/\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/opatch-hangs-while-patching-oem-13-4-concerning-the-log4j-vulnerability\/\",\"name\":\"opatch hangs while patching OEM 13.4. concerning the log4j-vulnerability - dbi Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\"},\"datePublished\":\"2021-12-29T21:27:01+00:00\",\"dateModified\":\"2022-04-06T06:26:24+00:00\",\"author\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/0ac04011f60f2e93c115358d0789c2da\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/opatch-hangs-while-patching-oem-13-4-concerning-the-log4j-vulnerability\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/opatch-hangs-while-patching-oem-13-4-concerning-the-log4j-vulnerability\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/opatch-hangs-while-patching-oem-13-4-concerning-the-log4j-vulnerability\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/www.dbi-services.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"opatch hangs while patching OEM 13.4. concerning the log4j-vulnerability\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/\",\"name\":\"dbi Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/0ac04011f60f2e93c115358d0789c2da\",\"name\":\"Clemens Bleile\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/1f596609fc67cb28ed714e7bccc81ed4cd73b8582a8148a490c77daeb2fde21a?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/1f596609fc67cb28ed714e7bccc81ed4cd73b8582a8148a490c77daeb2fde21a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/1f596609fc67cb28ed714e7bccc81ed4cd73b8582a8148a490c77daeb2fde21a?s=96&d=mm&r=g\",\"caption\":\"Clemens Bleile\"},\"description\":\"Clemens Bleile has more than 30 years of IT experience, thirteen in Oracle Support and fifteen in Oracle Consulting. He is specialized in Oracle Database Performance Tuning (SQL Tuning, DB Tuning) and developing an Oracle DB IT architecture (highly available, low-maintenance, cost efficient storage of data). He is an expert in problem analysis and resolution. Prior to joining dbi services, Clemens Bleile was Manager of the EMEA Database Performance team at the Oracle Global Customer Support Services. Clemens Bleile is Oracle Certified Professional 11g, 12c and Oracle Certified Expert for Performance Management and Tuning and holds a Master Degree, Business Information Systems from the Fachhochschule Furtwangen, Germany.\",\"sameAs\":[\"https:\/\/www.dbi-services.com\",\"https:\/\/x.com\/ifgtxD2SrQ8r!YuXj\"],\"url\":\"https:\/\/www.dbi-services.com\/blog\/author\/clemens-bleile\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"opatch hangs while patching OEM 13.4. concerning the log4j-vulnerability - dbi Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dbi-services.com\/blog\/opatch-hangs-while-patching-oem-13-4-concerning-the-log4j-vulnerability\/","og_locale":"en_US","og_type":"article","og_title":"opatch hangs while patching OEM 13.4. concerning the log4j-vulnerability","og_description":"By Clemens Bleile To address the log4j-vulnerability I recently had to fix the Oracle Enterprise Manager 13.4.-installation for a customer. REMARK: Please check the following link for details concerning the log4j-vulnerability and how Oracle is affected: alert-cve-2021-44228 and the following MOS Notes: – Impact of December 2021 Apache Log4j Vulnerabilities on Oracle Products and Services […]","og_url":"https:\/\/www.dbi-services.com\/blog\/opatch-hangs-while-patching-oem-13-4-concerning-the-log4j-vulnerability\/","og_site_name":"dbi Blog","article_published_time":"2021-12-29T21:27:01+00:00","article_modified_time":"2022-04-06T06:26:24+00:00","author":"Clemens Bleile","twitter_card":"summary_large_image","twitter_creator":"@ifgtxD2SrQ8r!YuXj","twitter_misc":{"Written by":"Clemens Bleile","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dbi-services.com\/blog\/opatch-hangs-while-patching-oem-13-4-concerning-the-log4j-vulnerability\/#article","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/opatch-hangs-while-patching-oem-13-4-concerning-the-log4j-vulnerability\/"},"author":{"name":"Clemens Bleile","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/0ac04011f60f2e93c115358d0789c2da"},"headline":"opatch hangs while patching OEM 13.4. concerning the log4j-vulnerability","datePublished":"2021-12-29T21:27:01+00:00","dateModified":"2022-04-06T06:26:24+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/opatch-hangs-while-patching-oem-13-4-concerning-the-log4j-vulnerability\/"},"wordCount":344,"commentCount":0,"keywords":["hangs","log4j","mount","NFS","omspatcher","OPatch"],"articleSection":["Oracle"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.dbi-services.com\/blog\/opatch-hangs-while-patching-oem-13-4-concerning-the-log4j-vulnerability\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.dbi-services.com\/blog\/opatch-hangs-while-patching-oem-13-4-concerning-the-log4j-vulnerability\/","url":"https:\/\/www.dbi-services.com\/blog\/opatch-hangs-while-patching-oem-13-4-concerning-the-log4j-vulnerability\/","name":"opatch hangs while patching OEM 13.4. concerning the log4j-vulnerability - dbi Blog","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/#website"},"datePublished":"2021-12-29T21:27:01+00:00","dateModified":"2022-04-06T06:26:24+00:00","author":{"@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/0ac04011f60f2e93c115358d0789c2da"},"breadcrumb":{"@id":"https:\/\/www.dbi-services.com\/blog\/opatch-hangs-while-patching-oem-13-4-concerning-the-log4j-vulnerability\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dbi-services.com\/blog\/opatch-hangs-while-patching-oem-13-4-concerning-the-log4j-vulnerability\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.dbi-services.com\/blog\/opatch-hangs-while-patching-oem-13-4-concerning-the-log4j-vulnerability\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.dbi-services.com\/blog\/"},{"@type":"ListItem","position":2,"name":"opatch hangs while patching OEM 13.4. concerning the log4j-vulnerability"}]},{"@type":"WebSite","@id":"https:\/\/www.dbi-services.com\/blog\/#website","url":"https:\/\/www.dbi-services.com\/blog\/","name":"dbi Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/0ac04011f60f2e93c115358d0789c2da","name":"Clemens Bleile","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/1f596609fc67cb28ed714e7bccc81ed4cd73b8582a8148a490c77daeb2fde21a?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/1f596609fc67cb28ed714e7bccc81ed4cd73b8582a8148a490c77daeb2fde21a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1f596609fc67cb28ed714e7bccc81ed4cd73b8582a8148a490c77daeb2fde21a?s=96&d=mm&r=g","caption":"Clemens Bleile"},"description":"Clemens Bleile has more than 30 years of IT experience, thirteen in Oracle Support and fifteen in Oracle Consulting. He is specialized in Oracle Database Performance Tuning (SQL Tuning, DB Tuning) and developing an Oracle DB IT architecture (highly available, low-maintenance, cost efficient storage of data). He is an expert in problem analysis and resolution. Prior to joining dbi services, Clemens Bleile was Manager of the EMEA Database Performance team at the Oracle Global Customer Support Services. Clemens Bleile is Oracle Certified Professional 11g, 12c and Oracle Certified Expert for Performance Management and Tuning and holds a Master Degree, Business Information Systems from the Fachhochschule Furtwangen, Germany.","sameAs":["https:\/\/www.dbi-services.com","https:\/\/x.com\/ifgtxD2SrQ8r!YuXj"],"url":"https:\/\/www.dbi-services.com\/blog\/author\/clemens-bleile\/"}]}},"_links":{"self":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/489","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/users\/35"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/comments?post=489"}],"version-history":[{"count":4,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/489\/revisions"}],"predecessor-version":[{"id":705,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/489\/revisions\/705"}],"wp:attachment":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media?parent=489"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/categories?post=489"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/tags?post=489"},{"taxonomy":"type","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/type_dbi?post=489"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}