Skip to Main Content
Forums

Oracle Database Discussions

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Interested in getting your voice heard by members of the Developer Marketing team at Oracle? Check out this post for AppDev or this post for AI focus group information.

Alter/Delete Log4j in Oracle Database?

User_7687ADec 16 2021

Q: What is the recommended way to deal with the Log4j issue in Oracle Databases?
I'm currently using Oracle 18c XE and found these two files:
dbhomeXE\md\property_graph\lib\log4-core-2.9.0.jar
dbhomeXE\oui\jlib\jlib\log4j-core.jar (is version 1.2.17)
Options:

  1. Alter the Jars (Extract+Recreate) and remove the JndiLookup.class
  2. Delete the Jars
  3. Disable/Change the port of the web interface
  4. Disable graph feature (if possible)
    Thanks.

Comments

Processing

Post Details

Added on Dec 16 2021
#database, #general-database-discussions, #security, #xe
7 comments
6,056 views