Smart Update Details of WLS Patch Set Update 10.3.6.0.

201020
-----------------------------------------------------------
WLS Patch ID - NA7A
WLS Patch Number - 31641257

This README provides information about how to apply WLS Patch Set Update
10.3.6.0.201020.
It also provides information about reverting to the original version.

Oracle� WLS Patch Set Update 10.3.6.0.201020 README

---------------------------------------------------

Oracle recommends that you see following key notes

- My Oracle Support NOTE: 1306505.1 Announcing Oracle WebLogic Server PSUs (Patch
Set Updates)
�https://support.oracle.com/oip/faces/secure/km/DocumentDisplay.jspx?id=1306505.1

- My Oracle Support NOTE: 1470197.1 Master Note on WebLogic Server Patch Set
Updates (PSUs)
�https://support.oracle.com/oip/faces/secure/km/DocumentDisplay.jspx?id=1470197.1

- Beginning January 2019, WLS 10.3.6 is under Extended Support. It is recommended

that you upgrade to 12c R2
�Only customers who have contracted for Extended Support are entitled to download
and use PSUs created for a product in Extended Support
�https://support.oracle.com/oip/faces/secure/km/DocumentDisplay.jspx?id=2067900.1

- Download the Error Correction Policy document and see "4.2 Policies - Critical
Patch Update Program"
https://support.oracle.com/oip/faces/secure/km/DocumentDisplay.jspx?id=944866.1

- It is required to use Java SE 7 with WLS 10.3.6 as Java SE 6 has reached the end
of Extended Support
https://support.oracle.com/oip/faces/secure/km/DocumentDisplay.jspx?id=952075.1

Smart Update Details of WLS Patch Set Update 10.3.6.0.201020

-----------------------------------------------------------
WLS Patch ID - NA7A
WLS Patch Number - 31641257

This document includes the following sections:

Section 1: Preparing to Install WLS Patch Set Update 10.3.6.0.201020

Section 2: Installing WLS Patch Set Update 10.3.6.0.201020

Section 3: Troubleshooting Patching Failures

Section 4: Post-Installation Instructions

Section 5: Uninstalling WLS Patch Set Update 10.3.6.0.201020

Section 6: Post-Uninstallation Instructions

Section 7: Bugs Fixed by this Patch

Section 1: Preparing to Install WLS Patch Set Update 10.3.6.0.201020
---------------------------------------------------------------

- WebLogic Server Patch Set Update (PSU) can be applied on a per-domain basis (or
on a more fine-grained basis), Oracle recommends that PSU
� be applied on an installation-wide basis. PSU applied to a WebLogic Server�
installation using this recommended practice affect all domains and
� servers sharing that installation.

- Stop all WebLogic server processes

- Remove any previously applied WebLogic Server Patch Set Update and associated
overlay patches

- Update Java SE (JDK/JRE):

� For users of Oracle JDKs and JVMs, we strongly recommend applying the latest Java
7 Critical Patch Updates (CPUs) as soon as they are released.

� Certain WebLogic Server fixes for deserialization vulnerabilities that are

provided in WebLogic Server Patch Set Updates (PSUs) depend on
� JEP 290 filtering and JEP 290 global scope filtering features provided in July
2018 JDK Updates and later JDK updates.
� These WebLogic Server fixes for deserialization vulnerabilities are not effective
without these JDK updates, or later JDK updates.
� Oracle strongly recommends that you ensure WebLogic Server is running with a
supported JDK version, and the following JDK update level at a minimum:

� JDK 7 Update 191 (JDK 7u191) or later (for WebLogic Server versions that are
supported on JDK 7)

� Refer to the following for further information: Doc ID 1506916.1 Obtaining Java
SE (JDK/JRE) for Oracle Fusion Middleware Products
� https://support.oracle.com/rs?type=doc&id=1506916.1

- If you are running with a security manager and experience

java.io.SerializablePermission "serialFilter" permission exceptions, then you will
need to
� update the weblogic policy file to include the following line:

� permission java.io.SerializablePermission "serialFilter";

� in the coherence.jar section of the weblogic policy file:

� grant codeBase "file:@WL_HOME/../coherence/lib/coherence.jar" {

Section 2: Installing WLS Patch Set Update 10.3.6.0.201020

-----------------------------------------------------

- Unzip p31641257_1036_Generic.zip to {MW_HOME}/utils/bsu/cache_dir or any local

directory��

� Where, MW_HOME is path of the Oracle Middleware Home.

�
�Note: You must make sure that the target directory for unzip has required write
and executable permissions
�������for "user" with which the component being patched is installed.
�
- Navigate to the {MW_HOME}/utils/bsu directory.
 - Apply WLS BSU (Smart Update) fix for quicker patch application. This step can be
skipped if the fix is already applied.
� https://support.oracle.com/epmos/faces/DocumentDisplay?id=2271366.1�
�
- Configuring Memory options
�
�� For Microsoft Windows systems
�� Edit the bsu.cmd script and change memory options as follows:
�� set MEM_ARGS=-Xms1024m -Xmx4096m
�
�� For UNIX Systems
�� Edit the bsu.sh script and change memory options as follows:
�� MEM_ARGS="-Xms1024m -Xmx4096m"
�
- Execute bsu.sh -install -patch_download_dir={MW_HOME}/utils/bsu/cache_dir -
patchlist={PATCH_ID} -prod_dir={MW_HOME}/{WL_HOME}
�
� Where, WL_HOME is the path of the WebLogic home,
������������ PATCH_ID is NA7A (Unique identifier for WLS Patch Set Update
10.3.6.0.201020).
�
Reference:
How to Apply WebLogic Server (WLS) Patches Using Smart Update
https://support.oracle.com/epmos/faces/DocumentDisplay?id=876004.1
�
BSU Command line interface
http://docs.oracle.com/cd/E14759_01/doc.32/e14143/commands.htm

Section 3: Troubleshooting Patching Failures

--------------------------------------------------------

WebLogic Server PSU - Popular Known Issues (Doc ID 2458832.1)

https://support.oracle.com/epmos/faces/DocumentDisplay?id=2458832.1

WLS BSU (Smart Update) Takes a Very Long Time to Apply Patches - Especially When
Checking for Patch Conflicts

https://support.oracle.com/epmos/faces/DocumentDisplay?id=2271366.1

Diagnosing "Encountered unrecognized patch ID" Failures When Trying to Patch WLS
Using BSU

https://support.oracle.com/epmos/faces/DocumentDisplay?id=1186923.1

Conflict Detected - New PSU for WLS 10.3.6 is "mutually exclusive and cannot
coexist with patch(es)"

https://support.oracle.com/epmos/faces/DocumentDisplay?id=2267696.1

�
 Native Windows Zip/Unzip Tools Fail to Extract Patch Zip Files - "Path Too Long"
or "is Invalid" Errors

https://support.oracle.com/epmos/faces/DocumentDisplay?id=2259579.1

Section 4: Post-Installation Instructions

-----------------------------------------------------
1. Restart all WebLogic servers.

2. The following command is a simple way to verify the successful installation of

WebLogic Server PSU patch 10.3.6.0.201020.

��� ��� ��� $ . $WL_HOME/server/bin/setWLSEnv.sh

��� ��� ���$ java weblogic.version

��� In the following example output, 10.3.6.0.201020 is the installed WebLogic

Server PSU.
���WebLogic Server 10.3.6.0.201020 PSU Patch for BUG31641257

3. A note about the weblogic.policy file *

�� If you are using a Java security manager (for example, you use -
Djava.security.manager to start up WebLogic Server),
��you must ensure that the codeBase in your policy file points to the location
where the patches are installed.
��The policy file is specified by -Djava.security.policy during server startup.
��By default, this is weblogic.policy file and resides in WL_HOME/server/lib,
where WL_HOME is the WebLogic Server installation directory.
�
�� This is an example of what should be added to the weblogic.policy file for the
installed patches:
�
�� grant codeBase "file:<path-to-WLS-patch-jars>/patch_wls1036/patch_jars/-" {
������� permission java.security.AllPermission;
�� };
�
� The default weblogic.policy file is a sample. If you use it, you must modify it.
Refer to the following URL for additional information:
�
� http://download.oracle.com/docs/cd/E17904_01/web.1111/e13711/server_prot.htm �
�
4. A note about FMW 11g installations using PSU patch 10.3.6.0.201020 or later
versions.

�� You may see this error after starting the Admin Server :

�� "Unable to Read Logging Configuration from File 'logging.xml' exception:

oracle.core.ojdl.logging.LoggingConfigurationException:���� ODL-52050"
��� or
�� <BEA-149231> <Unable to set the activation state to true for the application
'SHAREDSERVICES [Version=11.1.2.0]'.

�� Please consult this KM Note to evaluate your situation:

�� https://support.oracle.com/rs?type=doc&id=2604499.1 ��

5. If your deployed application uses Java deserialization you may need to

customize the WebLogic JEP 290 Default Filter.

�� For further information, refer to the "Restrict incoming serialized Java

objects." line in the Securing Network Connections table at
�� https://docs.oracle.com/middleware/11119/wls/LOCKD/GUID-E5E57EA2-90AC-49E5-
AF35-E217B8980BDC.htm#GUID-9A5D9EE1-BE59-475C-BF61-19D4EFC6EDFF ��

Section 5: Uninstalling WLS Patch Set Update 10.3.6.0.201020

-------------------------------------------------------

�- Stop all WebLogic Servers

�- Navigate to the {MW_HOME}/utils/bsu directory.

�- Execute bsu.sh -remove -patchlist={PATCH_ID} -prod_dir={MW_HOME}/{WL_HOME}

Section 6: Post-Uninstallation Instructions

-------------------------------------------------------

- Restart all WebLogic Servers

Section 7: Bugs Fixed by this Patch

-----------------------------------------------

Bug fixes in this patch are shown in the following list:

Issues Resolved in WLS Patch Set Update 10.3.6.0.201020

31765567 : CVE-2020-14883
31765550 : CVE-2020-14882
31657139 : MANAGED WLS FAIL TO STARTAFTER APPLYING JULY PSU
12.2.1.4.200624,WITH CONNECTION
31567049 : CVE-2020-14859
31510290 : LIMIT DISABLE OF EXTERNAL ENTITIES TO SERVER CODE
31441174 : CVE-2020-14841
31385906 : CVE-2020-9488
31332264 : CVE-2020-14820
31232471 : CVE-2020-11022
31162736 : SAP APPLICATION BROKEN AFTER APPLYING JAN 2020 PSU
30718589 : Fix for Bug 30718589
23147609 : STRESS:FA:PRJ BPM SQ:GET ASSERTIONERROR
AT .REPLICATEDSESSIONCONTEXT.LOOKUPSESSION
20062321 : INTERMITTENT 500 ERRORS RESULTING FROM: ILLEGALSTATEEXCEPTION:
HTTP SESSION IS INVALIDATION.
19926398 : FIXED AN ISSUE WHERE WLS ACTING AS A CLIENT DOESN��T SUPPORT SNI
18398295 : SERVLET.GETPARAMETER DOES NOT WORK WITH MBCS CHARS
12932224 : NM - WEBLOGIC.SECURITY.SECURITYINITIALIZATIONEXCEPTION:
AUTHENTICATION DENIED

Issues Resolved in WLS Patch Set Update 10.3.6.0.200714

31380262 : DISPLAY WARNING IN CONSOLE IF JDK IS NOT SUPPORTED
31316252 : CVE-2017-5645
31247235 : CVE-2020-14652
31234666 : CVE-2020-14645
31113242 : CVE-2020-14622
 30964331 : CVE-2020-2967
30961904 : CONNECTION FILTER DOES NOT WORK AFTER APPLYING PSU 12.2.1.3.191217
30958807 : CVE-2020-2966
30885128 : CVE-2020-14589
30885114 : CVE-2020-14588
30692988 : CVE-2020-14572
16684205 : NLS: DUPLICATE MIGRATABLE TARGETS
16292828 : JDBC AQ API AND CANCEL OPERATION
13921551 : DATASOURCES CONNECTION ARE CRASHED WHEN TX TIMEOUT OR DEADLOCK IS
OCCURRED
13729611 : STATEMENT CACHE SETUP IMPROVEMENTS USING WEBLOGIC CONSOLE

Issues Resolved in WLS Patch Set Update 10.3.6.0.200414

30885237 : CVE-2020-2884
30885217 : CVE-2020-2883
30814590 : EMBEDDED LDAP CORRUPTED WHEN MGD SERVER IS KILLED
30801769 : CVE-2020-2869
30657848 : CVE-2020-2829
30652002 : CVE-2020-2828
30624882 : CVE-2020-2811
30563848 : CVE-2020-2801
30558254 : CVE-2020-2798
30068341 : CVE-2020-2766
28482069 : CVE-2019-17571
20475586 : DEADLOCK BETWEEN TAGINFOEX AND TAGFILESYNCHRONIZER
18509293 : CANNOT LOGIN TO CONSOLE, BUT CAN LOGIN TO EM WITH THE SAME USER

Issues Resolved in WLS Patch Set Update 10.3.6.0.200114

30773415 : CVE-2020-2546
30754965 : PSR:MULTIPLE OUTAGES DUE TO PERMGEN OUTOFMEMORY
30671463 : SDP PSR SUITE SHOWED OOM ERRORS CONSISTENTLY
30625280 : FEW TESTS ARE FAILING IN EJB SUITE SRC103600PSUW2K_EJB30_IIOP-R1
30622115 : FEW TESTS ARE FAILING IN SECURITY COMPONENT SUITE
SRC103600PSUW2K_SEC_FUNC_R1_RUN2
30366862 : CVE-2020-2552
30362086 : CVE-2020-2551
30362026 : CVE-2020-2550
30357524 : CVE-2020-2549
30357504 : CVE-2020-2548
30342923 : CVE-2020-2519
30341541 : CVE-2020-2547
30230430 : WLS WON'T START AT ALL IF THE IP V6 /64 LISTED ON THE CONNECTION
FILTER
30218042 : CVE-2020-2546
29671344 : CVE-2020-2519
27158972 : FORMS LAUNCH FAILS WITH THE ERROR FRM-92101 AFTER APPLYING JULY'17
WEBLOGIC PSU
26444945 : CVE-2020-2544
20267030 : Fix for Bug 20267030
17944857 : Fix for Bug 17944857

Issues Resolved in WLS Patch Set Update 10.3.6.0.191015

30153412 : CVE-2019-2888
29957539 : CVE-2019-11358
29752735 : MODIFY BODYCONTENTIMPL ON WRITE BUFFER
29750025 : CVE-2019-2890
29585355 : CVE-2019-2887
29356775 : CVE-2019-2891
29181056 : NEW TRANSACTIONS STARTED AFTER GRACEFUL SHUTDOWN STARTED (PART II)
 28973782 : Fix for Bug 28973782
25373406 : WLST_COMMON.PY - HP VENDOR NAME CHANGE IN JDK 7.0.17
20446229 : BEA-101104 JAVA.NET.PROTOCOLEXCEPTION TRYING TO ACCESS
JAVAWEBSTART RESOURCE
20415191 : 12C: GRACEFUL SHUTDOWN TAKING A LONG TIME
20366473 : NEED TO ENHANCE JTALIFECYCLE TRACING TO DUMP PENDING TRANSACTION
LIST ON STOP()
19632036 : JMS NO LONGER WORKS AFTER RESTART DUE TO CONFLICT ERRORS IN
CLUSTER SUBSYSTEM
19259028 : HTTPURLCONNECTION SOMETIMES FAILS HANDLING EXCEPTION DUE TO NPE
18854885 : FIXED AN ISSUE WITH MDB DURABLE SUBSCRIBER NOT RECONNECTING AFTER
MANUAL MIGRATION
18516704 : PROTOCOLEXCEPTION WITH WRONG CONTENT-LENGTH COUNTED BY NUMBER OF
CHARACTERS
18387934 : FIXED AN ISSUE WHERE LOG OUTPUT WAS NOT OCCURRING DURING SERVER
MIGRATION
17702917 : AUTOKILLIFFAILED DOES NOT WORK WHEN SERVER HEALTH STATE IS FAILED
BECAUSE THE RESTART-IN-PLACE OPTION IS UNABLE TO EXECUTE WITH MANUAL MIGRATION
CONFIGURATION.
17319481 : REL7 GA GSI: REHYDRATION FAILED DUE TO PRODUCTMANAGEMENTSERVER
FAILED TO START
17246737 : CLASSNOTFOUNDEXCEPTION IS THROWN BY REGISTERING
ADDRESSINGEXTENSIONREGISTRY
17030726 : STRESS: MAXTHREADS CONSTRAINT FOR CLUSTERMESSAGING EXCEEDED
MAXIMUM CAPACITY
13722986 : NEED STORE FLAG TO ALLOW BOOT OF A CORRUPTED STORE

Issues Resolved in WLS Patch Set Update 10.3.6.0.190716

29726561 : CVE-2019-2729
29701537 : CVE-2019-2827
29671623 : CVE-2019-2725
29667975 : CVE-2019-2824
29585099 : THE BACKPORT OF 27057023 CONTAINS AN ERROR
29448643 : JAVA.IO.INVALIDCLASSEXCEPTION: FILTER STATUS: REJECTED
26403575 : CVE-2016-7103
23071867 : AGL DS XA AFFINITY NOT HONORED IN SOME TX LOCAL RESOURCE
ASSIGNMENT SCENARIOS

Issues Resolved in WLS Patch Set Update 10.3.6.0.190416

29140555 : CVE-2019-2650
29140551 : CVE-2019-2649
29140549 : CVE-2019-2648
29140540 : CVE-2019-2647
29140516 : CVE-2019-2646
29140508 : CVE-2019-2645
28998139 : CVE-2019-2658
28891448 : CVE-2019-2618
28874066 : CVE-2019-2615
28762025 : ENSURE THE WLS STATEMENT CACHE IS TURNED OFF IF REPLAY OR ORACLE
STATEMENT CACHE ENABLED
27122975 : UDDIEXPLORER.SETUP.GETCOOKIE NPE INCIDENT GENERATION IN CUSTOMER
PODS
26791760 : CVE-2019-2568
16706262 : CHANGE PROXY RELATED VARS FROM STATIC VAR TO INSTANCE VAR

Issues Resolved in WLS Patch Set Update 10.3.6.0.190115

28626991 : CVE-2019-2452
28110087 : CVE-2019-2418
26624375 : NODEMANAGER MEMORY LEAK ON SSL HANDSHAKE FAILURES
 26353793 : CVE-2019-2398
19706551 : CVE-2019-2395
17390029 : SUB COORDINATOR URL USES SSL, THEN FUTURE RESOURCE WILL GET
INFECTED WITH SAME

Issues Resolved in WLS Patch Set Update 10.3.6.0.181016

28409586 : CVE-2018-3252
28389003 : CVE-2018-3250
28381538 : CVE-2018-3249
28381528 : CVE-2018-3248
28375173 : CVE-2018-3245
28140800 : BYPASS VERSION STRING CHECKS WHEN NON-ORACLE JDK IS USED.
27988175 : CVE-2018-3191
20020455 : CVE-2018-2902

Issues Resolved in WLS Patch Set Update 10.3.6.0.180717

27948303 : CVE-2018-2893
27934864 : CVE-2018-2998
27819370 : CVE-2018-2987
27445260 : CVE-2018-2935
25993295 : CVE-2013-1768
18233844 : AFTER WEBLOGIC.RESOURCEPOOL.MAX_TEST_WAIT_SEC, CONN'S DESTORY
HANGS AT ROLLBACK

Issues Resolved in WLS Patch Set Update 10.3.6.0.180417

27043684 : PARTIAL MULTIPOOL MESSAGE IMPROVEMENT INCLUDED WITH ANOTHER FIX
26916941 : AFTER APPLYING WL PATCH 25869650, SOAPCODEC.GETOPERATION METHOD
RETURNS NULL
26608537 : CVE-2018-2628
26439373 : CVE-2017-5645
25987400 : FIXED AN ISSUE WHERE IT WASN'T POSSIBLE TO PROVIDE INDIRECT
TRANSACTION PROPAGATION BETWEEN SERVERS THAT ARE ON DIFFERENT NETWORKS
13421981 : LIFECYCLEADMINSTATETEST.TESTSERVERSTARTUPTIMEOUT FAILED RECENTLY.

Issues Resolved in WLS Patch Set Update 10.3.6.0.171017

26144830 : CVE-2017-10352
26044754 : CVE-2017-10336
24818026 : CVE-2017-10271
19763916 : CVE-2017-10152
18492020 : STRESS REQUESTMANAGERPOLLER EXCEPTION, EXCEEDED MAX CAPACITY OF
'8192' ELEMENTS

Issues Resolved in WLS Patch Set Update 10.3.6.0.170718

25988919 : CVE-2017-5638
25823774 : CVE-2017-10178
25743025 : CVE-2017-10148
25743005 : CVE-2017-10147
25720769 : CVE-2017-10137
24817968 : CVE-2017-10063
24618043 : FIXED AN ISSUE WHERE A DEADLOCK OCCURRED ON AN AGL DATASOURCE
DURING A DB FAILOVER
24533963 : CVE-2013-2027
22935339 : PROCESSOR LOAD DISPLAYS N/A WITH JAVA 1.7
22746640 : FIXED AN ISSUE WHERE UNIT-OF-WORK MESSAGES ARRIVING AFTER THE
INCOMPLETE WORK EXPIRATION TIMER HAS EXPIRED WERE LEFT PENDING IN THE QUEUE
22614443 : JMS UOW MESSAGES COULD NOT DEQUEUE WHEN DELIVERY MODE IS "NON-
PERSISTENT"
22261241 : WHEN USING WLDEPLOY TASK TO DEPLOY APPLICATION ON A JACC ENABLED
WEBLOGIC SERVER, THE ERROR NOCLASSDEFFOUNDERROR: COULD NOT INITIALIZE CLASS
WEBLOGIC.UTILS.CLASSFILTER WAS DISPLAYED.
21748022 : FIXED AN OUTOFMEMMORY CONDITION THAT COULD OCCUR WITH A RESTART-
IN-PLACE MIGRATION
21562338 : FIXED AN ISSUE WHERE A CONNECTION.ISCLOSED() CALL RETURNED FALSE
WHEN THE REAL CONNECTION HAD BEEN CLOSED
21539098 : DEPLOYMENT SERVICE SERVLET RECEIVED FILE DOWNLOAD REQUEST FOR FILE
21241854 : FIXED AN ISSUE WHERE A MULTI DATA SOURCE FAILBACK/FAILOVER
CALLBACK HANDLER WAS NOT BEING CALLED
20463542 : FIX FOR BUG 20172788 WAS INCORRECT
20243939 : REGRESSION 17047760: STACKOVERFLOWERROR IN WS PRODUCER WITH
SOAPHANDLER
20047315 : FIXED AN ISSUE WHERE AN UNNECESSARY WRAPPER POOL SHUTDOWN WAS
BEING CALLED ON THE CONNECTION EXCEPTION LISTENER DUE TO TRANSACTION TIMEOUT
19687084 : WITH BLOCK='TRUE' ARGUMENT WLST STARTNODEMANAGER() COMMAND IS
FAILING
19194167 : FOREIGN JMS CONNECTION FACTORY LOSE ITS CONNECTION WHILE USING
WRAPPEDXARESOURCE
18084750 : TRACKING BUG TO BACKPORT 17776637 ON 10.3.6
17873235 : RESOURCEEXCEPTION OCCURS WHEN SHUTDOWN XA DATASOURCES IN MULTI-
DATASOURCE
17780911 : INACTIVE CONNECTION TIMEOUT IS DETECTED WHILE EXECUTING A VERY
LONG QUERY
17779642 : STUCK THREAD WHEN ENABLING MIMEPULL CLEANUP THREAD
17608140 : PATH SERVICE WITH UOO GIVING PEER GONE EXCEPTION AFTER PROCESSING
XML FILE
16844206 : WLST CANNOT GET ENV ON WINDOWS SERVER 12 WITH MINIMAL ENV
16805992 : WEBLOGIC WEB SERVICE WORK MANAGER PROBLEM [RDAR]
16498923 : SR MEMORY LEAK IN PORTAL APPLICATION SINCE MIGRATION FROM WLP 10.2
TO WLP 10.3.
16485257 : NAMESPACE PREFIX ISSUE FOR JAXWS WEBSERVICE HOSTED ON WEBLOGIC
10.3.6.0
16199510 : WLS JMX TIMEOUT VALUE SETTING CHANGES THE CREDENTIAL
16168052 : USING "TEST CONNECTION ON RESERVE" CAUSING DEADLOCK USING MYSQL
JDBC DRIVER.
15978104 : SUSPENDED SERVER RETURNS HTTP 404 INSTEAD OF 503
14763918 : WLS10.3.5 - MULTIPLE THREADS STUCK AT
WEBLOGIC.WSEE.JAXWS.SPI.WLSPROVIDER$SERVIC
13972486 : WLS SHOULD INCLUDE 'PROXY-JROUTE' ALONG WITH JSESSIONID WHILE
13861764 : OPTION 'DEPLOYMENTORDER' DOES NOT WORK IN WEBLOGIC.DEPLOYER
13795546 : STRESS: STUCK THREADS IN ADMIN SERVER WHEN LOOKING AT LIST OF
DYNAMIC SERVERS
13645544 : [WLS10.3.4]SEGMENT IN SOAP REQUEST IGNORED WHEN TRANSFORMED TO A
STRING
13516117 : BAD DATASOURCE CONNECTIONS GIVEN OUT AFTER EXCEPTION
13337000 : MAKE POOLCONNECTION.INIT() THROW EXCEPTION WITH A CAUSE
12873489 : FAIL TO ADD A NEW PRINCIPAL MAP ENTRY WITH DEPLOYMENT PLAN

Issues Resolved in WLS Patch Set Update 10.3.6.0.170418

24297731 : CVE-2016-1181
23099318 : CVE-2017-3506
20671165 : REGISTRYDOCUMENTBUILDERFACTORY DROPS PARSER FEATURES

Issues Resolved in WLS Patch Set Update 10.3.6.0.170117

25029531 : APPLICATION BREAKS AFTER APPLYING OCTOBER 2016 PSU DUE TO
MULTIPART FORM-DATA.
23733891 : CVE-2017-3248
16685491 : Fix for Bug 16685491

Issues Resolved in WLS Patch Set Update 10.3.6.0.161018

 23735210 : JMX CONNECTION OVER IIOP BROKEN ON SRC103600FABP WITH JDK6 AND 7.
23732201 : Fix for Bug 23732201
23642257 : WEBLOGIC 12.1.2.0.8 PATCH BREAKS CUSTOM WORK MANAGER
23103220 : CVE-2016-5535
23004029 : CVE-2016-5531
22836557 : CVE-2015-7501
19576633 : CVE-2016-5488

Issues Resolved in WLS Patch Set Update 10.3.6.0.160719

23107300 : CVE-2016-3586
23099223 : CVE-2016-3510
22666897 : CVE-2016-3505
20333386 : WLS LACKS PRIVILEGED BLOCK WHILE CONNECTING TO SERVER DURING
SESSION REPLICATION.
20229977 : WLS LACKS PRIVILEGED BLOCKED AT
WEBLOGIC.APPLICATION.IO.MERGEDDESCRIPTORFINDER.
19947189 : CVE-2016-3445
19790693 : NEEDS PRIVILEGED BLOCK WHILE ACCESSING
ACCESSCLASSINPACKAGE.COM.SUN.PROXY.
18945422 : RESTART SERVICE JOB FAILS INTERMITTENTLY BECAUSE GETTING A WLS
SERVER STATUS SOMETIMES FAILS DUE TO ASSERTIONERROR.
17252759 : PSR:PERF:WLS CLASSLOADER LEAK WITH SIMPLE SERVLET APP
15869805 : 12.2.4: EXCEPTION: REGISTERED MORE THAN ONE INSTANCE WITH THE SAME
OBJECT
14248155 : STAGE4:SECURED WS CLIENT CAN'T CALL WS METHOD WHICH WILL REDIRECT
ANOTHER WS
14174659 : EJB-JAXWS VIRTUAL WEB APP MUST HOOK WITH THE WLS SYSTEM FILTERS
13951275 : AUTH-METHOD NOR REALM-NAME ARE RECOGNIZED IN WEBLOGIC-
WEBSERVICES.XML FOR JAX-WS

Issues Resolved in WLS Patch Set Update 10.3.6.0.160419

22498352 : CVE-2016-0638
22339918 : CVE-2016-0638
22049932 : CVE-2016-3416
21912256 : CVE-2016-0696
21519519 : CVE-2016-0688
14396863 : Fix for Bug 14396863
14236278 : CVE-2016-0675

Issues Resolved in WLS Patch Set Update 10.3.6.0.13

22248079 : CVE-2016-0577
22247869 : Fix for Bug 22247869
22200594 : CVE-2016-0574
22200523 : CVE-2016-0573
22200491 : CVE-2016-0572
22200449 : Fix for Bug 22200449
22175246 : Fix for Bug 22175246
21756751 : Fix for Bug 21756751
21615827 : CVE-2016-0464
21516492 : CVE-2014-0107
21495475 : CVE-2015-4852
14324000 : WEBLOGIC INCIDENT DIRECTORIES CREATED WITH READ ONLY PERMISSIONS
ON GROUP USER

Issues Resolved in WLS Patch Set Update 10.3.6.0.12

21169554 : THERE IS A CONFIGURATION ISSUE DURING FA PREFLIGHT GENERATION.
21069524 : Fix for Bug 21069524
20985893 : Fix for Bug 20985893
20906638 : CVE-2015-2623
 20814890 : Fix for Bug 20814890
20206879 : CVE-2015-4744
18971476 : ISSUE WITH WLS TEST CLIENT AFTER INSTALLING PSU 10.3.6.0.8
18040640 PATCH

Issues Resolved in WLS Patch Set Update 10.3.6.0.11

20825149 : FAIL TO VALIDATE THE FIX OF CPU BUG 19907066 IN WINDOWS
20523619 : CALLING A SERVERRUNTIME FROM AN EXTERNAL JMX CLIENT OR THE
WEBLOGIC SERVER ADMINISTRATION CONSOLE AND STARTING A MANAGED SERVER CONCURRENTLY
MAY DISPLAY ALL APPLICATIONS OF THE MANAGED SERVER IN THE NEW STATE WITH A FAILED
HEALTH CHECK.
20302117 : FIX OF CI 20213535 FOR 10.3.6.0.16WLS-FAREL9-BP IS INCOMPLETE
19907066 : CVE-2014-3566
18912482 : A JAVA.LANG.CLASSNOTFOUNDEXCEPTION ERROR OCCURS WHEN LOOKING UP A
GENERIC EJB.
18231133 : STRESS-GE(REGRESSION) ORA-24798:CANNOT RESUME THE DISTRIBUTED
TRANSACTION BRANCH
18164066 : WLS 10.3.5.0.7:SAF MESSAGE BLOCKED INTERMITTENTLY WHEN REMOTE
DESTINATION KILLED
18106382 : NULLPOINTEREXCEPTION RAISED TRYING TO CREATE AN EJB TIMER
18073982 : <BEA-101083> CONNECTION FAILURE ERROR ON 12C SERVERS IN GERMAN
WINDOWS
17935963 : WLS1036 -MANAGED SERVER FAILS STARTING UP WHEN ADMIN ENFORCED
2WAYSSL
17911980 : WLS ADMIN SERVER DEAD LOCK ISSUE
17780729 : UNABLE TO GET THE HEALTH STATUS CAUSED BY A
MAXMESSAGESIZEEXCEEDEDEXCEPTION
17776316 : WEBLOGIC SERVER JMS STORE AND FORWARD IMPORTED DESTINATION NAME
INTERMITTENTLY M
17759384 : TEMPORARY FILES GENERATED IN /TMP NOT CLEARED WHEN DEPLOYING WITH
-UPLOAD OPTION
17721032 : A MANAGED SERVER FAILS TO START WITH A INDEXOUTOFBOUNDSEXCEPTION
ERROR.
17658152 : STRESS SOA GE/CALLBACK-ROLLEDBACK BY 'SOADATASOURCE_BASE_DOMAIN'
UNREGISTED
17461357 : NO USER NAME IN PROPERTIES WHEN USING OTHER DRIVER
17439835 : CUSTOMHOSTNAMEVERIFIER CALLED FIVE TIMES IF HOSTNAMEVERIFICATION
CHECK FAILS.
17354363 : WLS 10.3.6 - SAF AGENT STABILITY ISSUE
17322851 : SPECIFYING -DWEBLOGIC.WSEE.SKIP.ASYNC.RESPONSE=TRUE CAUSES NPE IN
CONSOLE
17317455 : CVE-2015-0449
17287466 : DURABLE SUBSCRIBERS ARE NOT DELETING AFTER UNDEPLOYING THE MDB
APPLICATION
17157465 : STRESS SOA - MORE THREADS THAN DEFINED AT MAXTHREADCONSTRAIN WHEN
SHARED BY WMS
17070169 : WLS 10.3.6.0 - WEBLOGIC WLDF CAUSE THREAD DEADLOCK
17069175 : ADMIN SERVER NOT RESPONSIVE
17005283 : SEEING NPE FROM WORKMANAGER
16942173 : [RDAR]FIRST MESSAGE IN A STORE-AND-FORWARD FOR A SPECIFIC ENDPOINT
IS LOST
16851678 : JAVA.IO.IOEXCEPTION OCCURRED ON SOCKET
16796909 : PSR:PERF:OSB: ERRATIC THREAD POOL RAMP UP
16759418 : DEATH OF EXECUTETHREAD DUE TO UNHANDLED EXCEPTION IN
REQUESTMANAGER.REGISTERIDLE
16733584 : HUGE AMOUNT OF DDSTATUSSHARER UPDATED FOR DIST DESTINATION CAUSING
SERVER HANG
16432556 : INCREMENTADVISOR WILL BE IN ODD STATE IF WLS IS RUNNING LONG
ENOUGH
 16197157 : XAER_RMFAIL: RE-REGISTER XARESOURCE WHEN IF XARESOURCE THROW
RMFAIL ERROR
14545078 : UNBALANCE OF CONSUMERS/PROXY SERVICE THREADS WHEN RESTARTING WLS
SERVER INSTANCE
14404715 : [MENTORING] "COULD NOT FIND SERVER NULL" WHEN SENDING JMS MESSAGE
14203206 : JCA-POOL LOCKING PROBLEM
14195479 : MEMORY LEAK IN
WEBLOGIC.MANAGEMENT.RUNTIME.SERVICEMIGRATIONDATARUNTIMEMBEAN
14174857 : LOGFILEMBEAN.FILEMINSIZE ATTRIBUTE VALUE CAN ONLY BE SET TO MAX OF
65535 KB.
14170469 : TRACKING BUG FOR JMSSESSION STOP/CLOSE BLOCKING ISSUE
14170241 : SYNCHRONOUS PREFETCH MODE CAUSES STUCK THREADS ON CLOSE
14158072 : IIOP-HTTP TUNNELLING - CLOSING CONTEXT BUT HTTP CONNECTION REMAINS
13921016 : NODEMANAGER HANGS PINGING MANAGED SERVER
13916854 : JDBC POOL NOT RESUMING AUTOMATICALLY
13865212 : [MENTORING] JNDI EXCEPTIONS WITH RESTART-IN-PLACE
13688690 : JMSSERVERRUNTIME MBEAN NOT REPORTING HEALTHSTATE OF THE SELECTED
JMSSERVER
13636316 : WLS JDBC POOL - DESTROYS JDBC CONNECTION WITHOUT DOING A PROPER
CLOSE()
13528666 : WLS10.3.2 - JMS WRAPPER FOR MQ FOREIGN PROVIDER DOES NOT
FAILBACKIN XA CONTEXT
13443170 : ADMINSERVER HANGS WHILE REFRESHING A PAGE UNTIL IT RETRIEVES ALL
THE INFORMATION
13425354 : CLIENTPROVIDERBASE DOES NOT RESPECT PROVIDER CLASSLOADER
12977335 : SOAP/JMS REQUEST SENT BY SAF DOES NOT DELIVER RESPONSE TO REPLY-TO
QUEUE
12756007 : [WLS 10.3.3]MANAGED SERVER FAILS TO START WITH DNS NAME ERROR
11781879 : STRESS:FA:SCM ILLEGALSTATEEXCEPTION: HTTPSESSION IS INVALID
10169939 : 10.3.3 - [MENTORING] - CONNECTION DESTROY HANGS IN THE RESERVE
TEST

Issues Resolved in WLS Patch Set Update 10.3.6.0.10

19942900 : THERE IS A REGRESSION ISSUE THAT DOES NOT ALLOW THE DEPLOYER ROLE
TO DEPLOY APPLICATIONS.
19730967 : THE SYSTEM PROPERTY WEBLOGIC.DATA.CANTRANSFERANYFILE DID NOT ALLOW
SOME FILES TO BE TRANSFERRED, BUT NOW WILL ALLOW ANY FILE TO BE TRANSFERRED.
19600486 : PASTECONFIG.SH FAILED AFTER ADDING SETMAXREQUESTPARAMTERCOUNT()
ATTRIBUTE
19596460 : SERVER COMPLAINS ABOUT JNDI ISSUES AND EVENTUALLY GOES DOWN
19287874 : CVE-2013-2186
19287842 : CVE-2013-2186
18436016 : CVE-2014-6569

Issues Resolved in WLS Patch Set Update 10.3.6.0.9

18968900 : CVE-2014-6534
18859387 : Fix for Bug 18859387
18691894 : CVE-2014-0114
17425750 : CUSTOMER POC: FAILED TO HANDLE DISPATCH MES SAGE ... EXCEPTION
ORABPEL-05002

Issues Resolved in WLS Patch Set Update 10.3.6.0.8

18230607 : CVE-2014-2470
18230581 : CVE-2014-2480
18230569 : CVE-2014-2481
18224766 : CVE-2014-2479
18224308 : CVE-2014-4255
18223937 : CVE-2014-4267
18170928 : CVE-2014-4256
 18169911 : CVE-2014-4253
17930681 : CVE-2014-4242
17884290 : CVE-2014-4210
17884269 : CVE-2014-4241
17859691 : CVE-2014-4217
17312710 : CVE-2014-4202
17311996 : CVE-2014-4201

Issues Resolved in WLS Patch Set Update 10.3.6.0.7

16857433 : WEBLOGIC ADMIN CONSOLE > ADMIN SERVER SHOWING PROCESS LOAD 100%
16794193 : JMX GETATTRIBUTES IS SLOW
16530704 : JMS FOREIGN SERVER CONNECTION ISSUE
16504525 : ADMINSERVER OOM WHEN CLIENT CREATES LOTS OF JMX CONNECTION WITH
THIN CLIENT
16448282 : WLS10.3.6: WEB SERVICE FAILS TO DEPLOY WHEN SCHEMA VALIDATION IS
ENABLED
16290362 : COULD NOT PARSE LOG RECORD: <DATASOURCE> <WEBLOGIC.JDBC.CONN.US>
15917682 : CLASSLOADER LEAK WHEN WEBAPP W/ WS ENDPOINT IS STOPPED/STARTED
15879401 : DOMAIN RUNTIME JMX LAYER SHOULD CLEANUP CONNECTIONS AND RECONNECT
ON EXCEPTIONS
15872739 : MEMORY LEAK WEBLOGIC.JSP.INTERNAL.JSP.TAG.TAGFILETAGINFO WHEN
ACCESSING JSPS
14833661 : [MENTORING] WLS 10.3.5 - WS PERFORMANCE ISSUES
14777804 : JAVA.LANG.ILLEGALSTATEEXCEPTION OCCURS IN
CLIENTIDENTITYREGISTRY.GETREQUIREDCLIE
14644893 : @ONEWAY WS METHOD DOES NOT RETURN DIRECTLY
14174803 : PROVIDE THE ABILITY TO SPECIFY XMX TO STARTNODEMANAGER WLST
FUNCTION
13888100 : "JSP_SERVLET" FOLDER REMOVED WHEN STOPPING WLS SERVER
13875685 : JMS SERVERS' SUMMARY PAGE IN THE ADMIN CONSOLE SHOWS NULL VALUES
WITH AUTO-MIGRA
13844661 : WLS 10.3.3 - JAX-WS WEB SERVICE NOT DECODING ATTACHED XML FILE
13513740 : WLS:10.3.2 JSTL XML TAGLIB DOESN'T WORK WITH AIX/IBM JDK
13067536 : HTTPCLIENT SENDS SAME REQUESTS TWICE EVEN IF THE CLIENT SENDS A
REQUEST ONLY ONC
12986335 : WHEN HTTP100 IS RECEIVED CONTINUOUSLY, HTTPCLIENT COULDN'T HANDLE
RESPONSE
12948850 : B19::SPARC:JAVA.LANG.UNSATISFIEDLINKERROR IN THE CRM SOA SERVER
LOGS
12830851 : MULTIPLE MBEAN REGISTRARTIONS FOR SAME OBJECT NAME
12717057 : ASYNCRESPONSEHANDLER ERROR HANDLING LOST IN HTTPURLCONNECTION
8673503 : ONLY DISPLAY FIRST 1000 USERS IN SECURITY REALM - USERS AND GROUPS
TAB

Issues Resolved in WLS Patch Set Update 10.3.6.0.6

17386939 : COHERENCE TESTS ARE FAILING DUE TO THE
JAVA.LANG.NOCLASSDEFFOUNDERROR
16866427 : THE CLIENT IS GETTING BACK 200 WHEN OWSM IS SETTING IT TO 401.
16441288 : CVE-2013-3827
16363439 : WLS 9.2.4 DOES NOT FOLLOW IETF RFC5746 PROTOCOLS IN NEGOTIATING
HANDSHAKE
16200476 : SESSION IDLENGTH SHOULD ALLOW MINIUM 8 BIT
16192004 : STRESS: MEMORY GROWTH OBSERVED DURING CACHE DEPLOY UNDEPLOY
OPERATIONS IN A LOOP
16180221 : FAILED:EXECUTING: OPMNCTL START COREAPPLICATION_OBIS1
16172812 : CLASSLOADER LEAK WHEN WEBAPP W/ WS ENDPOINT IS STOPPED/STARTED
16080294 : NULLPOINTEREXCEPTION DURING SESSION REPLICATION IN IDENTITY
PROVIDER DOMAIN
16063328 : BEA-149500 ERROR WITH JDBC TLOG STORE
 16044387 : ILLEGALARGUMENTEXCEPTION IS THROWN WHEN APPLICATION RESTART
15979318 : UNABLE TO VIEW UDQ INFORMATION IN MONITORING TAB FOR VERSIONED APP
15972018 : JCA CONNECTIONS BEING DESTROYED AND RECREATED UNDER HEAVY LOAD ON
A HIGHLY THREA
14839946 : CLASSLOADER LEAK WHEN WEBSERVICE IS UNDEPLOYED (OSN)
14784269 : AFTER CHANGING DATA SOURCE IN WEBLOGIC10.3.6 THE WHOLE MANAGED
SERVER NEEDS TO B
14738954 : ORACLE FORMS AND REPORTS 11GR2 (11.1.2.0.0) BUILDERS FAILS ON
DOMAIN CREATION
14623004 : WLS GETBODYLENGTH() RETURNS 0 IF MESSAGE IS COMPRESSED
14578710 : UNABLE TO VIEW UDQ INFORMATION IN MONITORING TAB WHEN DEPLOYED AS
MODULE.XML
14521870 : OOM DUE TO HEAP USAGE BY REPLICATEDMEMORYSWAP
14477461 : JNDI TREE NOT CLEANED AFTER UNDEPLOYEMENT WHILE 1 CLUSTERED SERVER
IS DOWN
14470240 : FIX 14384687 WORKS BUT IMPEACHES CLEAN SHUTDOWN
14337022 : SERVER STARTS IN ADMIN IF ALL LLR RAC DATASOURCES IN AN MDS ARE
NOT UP
14261891 : NULLPOINTEREXCEPTION WHEN WLS LOADS WEB APPLICATION
14222753 : GLOBAL LOCK IS AFFECTING PERFORMANCE WHILE MULTIPLE INSTANCE OF
TIMERMANAGER ADD
14154043 : MEMORY LEAK IN CLUSTER COMMUNICATION DUE TO OUT OF ORDER
ANNOUNCEMENT PROCESSING
14082307 : SAF IMPORTED DESTINATION JNDI NAME MISSING SOMETIMES WITH
SAFAGENTS ARE TARGETS
13986212 : JNDI MDB EXCEPTIONS WITH RESTART-IN-PLACE
13778555 : SUPPORT FOR COVARIANT RETURN TYPE IN EJB
13688111 : BEA-240005 - A CSRF HAS BEEN DETECTED - DEPLOYMENT ISSUES ON
WEBLOGIC 10.3.3
13572948 : (FILESERVLET) WHEN A STATIC FILE IS MODIFIED IT GETS TRUNCATED IF
<PAGE-CHECK-SE
13455973 : HIGH CPU USAGE AT HASHMAP.PUT() IN REGEXPPOOL.ADD()
12986096 : MARK/RESET OF HTTPURLCONNECTION'S INPUTSTREAM DOES NOT WORK
EXPECTEDLY
12953944 : NOT STRESS: INCORRECT MESSAGE IN DUMPING THREAD STACK FROM CONSOLE
WITH SUN JDK7
11820051 : JAXRPC CLIENT CANNOT INVOKE SOA SERVICE.

Issues Resolved in WLS Patch Set Update 10.3.6.0.5

16358443 : VERY SMALL TIME INTERVAL CAPTURED IN JFR DUMP
16199781 : HEALTHSTATE OF JMSRUNTIMEMBEAN IS WRONG
16176831 : STARTSERVER COMMAND THROWS ERROR INITIALIZING THE VM
16104758 : LIFECYCLESHUTDOWNSEQUENCETEST FAILS WITH ILLEGALSTATEEXCEPTION
ERROR
16023814 : SYBASE DATA SOURCE NOT SUCCESSFUL AFTER UPGRADE FROM 10.3.5 TO
10.3.6
15990943 : HOW IS CALCULATED THE VALUE OF "MESSAGE PAGEABLE CURRENT"?
15941020 : NPE IN THE SERVER LOG WHEN RUNNING RISK3 TESTS
15839280 : [WLS10.3.6] QUEUE LENGTH COUNT INCREASES OVER TIME AND NEVER
REDUCES
14830451 : NOT STRESS SOA-OSB XA ERROR: XARESOURCE.XAER_RMERR START() FAILED
ON RESOURCE 'S
14826542 : WLS12C NOT HONOURING THE PARAMETER -DHTTP.NONPROXYHOSTS ON LINUX
ENVIRONMENT
14747231 : WEBSERVICE INVOCATION OVER SSL RESULTS IN
ARRAYINDEXOUTOFBOUNDSEXCEPTION
14659661 : SINGLETON-URI GIVES VALIDATION ERROR IN WEBLOGIC-APPLICATION.XML
WHEN THOUGH IT
14629058 : STRESS: REGRESSION:CONNECTION LEAK DURNIG TRANSACTION ROLLBACK IN
LONGEVITY TEST
14597598 : STARTNODEMANAGER() - WLST COMMAND IN 64 BIT ENVIRONMENT IS NOT
LOADING 64BIT LIB
14547194 : WEBLOGIC.DEPLOYER PARTIALLY REDEPLOY COMMAND CAN NOT WORK
14482558 : STRESS:FA:FS STDB: JAVA CLASSES ARE LOADING CONTINUOUSLY IN
CORESETUP SERVER
14476992 : MANAGED SERVER FAILS TO RESTART ON CANDIDATE MACHINE FOLLOWING
WHOLE SERVER MIGR
14377549 : BEA-002936 MAXIMUM THREAD CONSTRAINT
WEBLOGIC.JMS.LSSOJMSSERVER_11A.LIMITED IS
14355039 : MANAGED SERVER FAILS TO RESTART ON CANDIDATE MACHINE FOLLOWING
WHOLE SERVER MIGR
14334824 : UNNECESSARY CONNECTION OCCURS AT FAIL OVER IN MULTI DATASOURCE.
14276072 : DEADLOCK DETECTED BETWEEN MESSAGINGBRIDGE.STOPFORWARDING() AND
BEGINFORWARDING()
14268667 : COH SERVERS RESTARTED IN THE WRONG NODE IN SHARED NFS DOMAINS WHEN
NM RESTARTED
14239574 : WLS 10.3.5 - TIMERIMPL WEAKHASMAP IMPLEMNTATION IS IMPACTING
PERFORMANACE NEGATI
14228675 : RJVMIDLETIMEOUT DOESN"T BEHAVE AS EXPECTED
14225559 : WLS DOES NOT ACCEPT THE COOKIE FROM A DIFFERENT APPLICATION USING
COOKIE PATH
14146417 : DEADLOCK ON WEBLOGIC.JMS.FRONTEND.FECONNECTION
14114017 : WLS 10.3.5 LEAKING GENERICBEANLISTENER AND REGISTERED STORE
CONNECTION MBEANS
14109594 : NULLPOINTEREXCEPTION AT
WEBLOGIC.EJB.CONTAINER.INTERNAL.MDLISTENER.EXECUTE
14099018 : USE OF MESSAGE TTL SLOWS PERFORMANCE DUE TO LOCK CONTENTION
14097743 : IMPORTERROR: CANNOT IMPORT NAME ,DOING A IMPORT DIRECTORY WITH
JYTHON
14049600 : UNICAST MESSAGING FAILING WITH CHANNEL/CLUSTER-BROADCAST-SECURE
13966362 : ANONYMOUS JNDI CALLS DURING MDB CREATE
13930786 : DEADLOCK REPORTED BY MANAGED SERVER INSTANCE WITHIN CLUSTER DURING
FAILOVER
13556860 : SERVER STATE CANNOT COME BACK TO RUNNING AFTER JTA RECOVERS THE
JDBC TLOG STORE
13541872 : WLS FAILS TO READ EURO SYMBOL FROM WINDOWS-1252 ENCODED WEBAPP
PARAMETER
13339004 : (OSB11GR1PS3/RHEL5)WLS SERVER JMS THREAD DEADLOCK
13335517 : FOR DB2 SET REG PROPERTY TO NOT CALL TMSUSPEND
13323399 : JSP CUSTOM TAG LIB RECURSIVE CALLS CAUSE STACKOVERFLOWERROR
13243584 : WHOLE SERVER STUCK BECAUSE LINKED LIST OF CHUNKS IS CIRCULAR
13101234 : STACKOVERFLOWERROR HAPPENS WHEN YOU TRY TO PRECOMPILE RECURSIVE
TAG FILE.
13029650 : FILES REMAINS IN _WL_USER DIRECTORY WHEN ACTIVATING WAS FAILED ON
BOOT
12333627 : [WLS10.3.4] WLSIFCONFIG.SH SCRIPT DOES NOT WORK ON SOLARIS X86_64
AND SPARC
9893784 : WLS CONSOLE LOGOUT DOES NOT FOLLOW SSO LOGOUT GUIDELINES

Issues Resolved in WLS Patch Set Update 10.3.6.0.4

16544926 : WLS FAILING TO START WITH JROCKIT R28.2.6 BASED ON 6U39 WITH
SECURITY MANAGER
16030408 : CVE-2013-2390
15973456 : CVE-2013-1504
15865825 : DISABLE BASIC AUTH FOR OWSM WHILE KEEP BACKWARD COMPATIBILITY
14809365 : HTTP BASIC AUTHENTICATION FOR WLS WS STACK
14742729 : REL6:DOMAINLOCATION.PROPERTIES HAS SAME HARDCODED PHYSICAL MOUNTS
ON MASTER/POD
 14684791 : 10.3.6 JDBCSTORE DOESN'T DO CONNECTION FAILOVER WITH
ORACLE_BLOB.DDL
14595754 : FMF EXECUTE RUP3 INSTALLER. IT FAILS TO START THE ADMIN SERVERS.
14527104 : WHEN CRASHRECOVERY IS DISABLED, DURING NM RESTART, LCK FILE
GETTING DELETED FROM
14506522 : STRESS: EXCEPTIONS IN SERVERHELPER EXPORTOBJECT DURING
DEPLOY/UNDEPLOY
14489760 : PRODUCTION REDEPLOYMENT - BOTH OLD AND NEW VERSIONS IN ACTIVE
STATE
14331585 : STRESS:NPE IN SERVERHELPER EXPORTOBJECT DURING DEPLOY/UNDEPLOY IN
LARGE CLUSTER
14330170 : CACHEDCOORDINATOR CAHE INITIALIZATION FREEZES THREADS FOR A LONG
TIME
14324689 : ACCESSING A CLUSTERED REMOTE DATASOURCE OBJECT OVER T3S FAILS WITH
CCE
14305906 : RUP4ST2CDRM: UNEXPECTED EXCEPTION WHILE ENLISTING XACONNECTION
14217465 : STRESS: CONCURRENTMODIFICATIONEXCEPTION DURING APPLICATION
DEPLOYMENT
14214377 : RMI DS SECURITY TEST FAILED: WLS RMI RUNTIME FAILED TO GIVE US A
REMOTE DS
14182161 : Fix for Bug 14182161
14162804 : NPE THROWN ON DATASOURCE MODULE UPDATE OF MULTIDATASOURCE NON-
DYNAMIC ATTRIBUTE
14141508 : [MENTORING] - 10.3.4 - MANAGED SERVER RECONNECT ISSUE
14030073 : WORKMANAGER MAX-CAPACITY IS NOT CONSTRAINED IN
ASYNCRESPONSEHANDLER
13961904 : PSR:PERF:OSB PERFORMANCE REGRESSION (60%) IN OSB CLUSTER BENCHMARK
ON 64 BIT
13916756 : APPLICATION IS REJECTED AS THE WORKMANAGER IS SHUTDOWN AFTER
REDEPLOY
13900234 : WEBLOGIC SERVER NOT ABLE TO ACCESS JMS FILESTORE
13877154 : RMERR ON BRIDGE RECOVERY
13846938 : WLS 10.3.4 SECOND ENLISTMENT WITH TMJOIN FAILS ON MQ RESOURCE
13836819 : WEBLOGIC NTSOCKETMUXER THREADS CONSUMING 100% CPU, WHEN NATIVE IO
IS ENABLED
13786376 : DURABLE SUBSCRIBER STATUS IS FALSE AFTER REDEPLOYMENT IN THE ADMIN
CONSOLE
13642828 : [RGRN] STUCK/LOST REQUESTS ON EXALOGIC ON PS5 POST-RC1
13339111 : WLS 10.3.5 - THREADING ISSUE FOR THE CLASS -
WORKCONTEXTACCESSCONTROLLER
13038998 : THREAD STUCK IN CHUNKEDOUTPUTSTREAM.GETSIZE DUE TO CORRUPTED LIST
OF CHUNKS
13029954 : CHECKINTEST FAILING AT CLEAN LABEL AND NO CHANGES
12943601 : WEBLOGIC GRIDLINK DATASOURCE TEST CONNECTION SHOWS SUCCESSFUL EVEN
IF DB IS DOWN
12879342 : DEPLOY APPLICATION GET DUPLICATE METHOD NAME&SIGNATURE IN CLASS
FILE

Issues Resolved in WLS Patch Set Update 10.3.6.0.3

14456212 : STRESS:FA:FIN:MEMORY LEAK IN WLSUSERIMPL
14398056 : LOCATION OF THE TEMPORARY DIRECTORY FOR A WEBAPP IS NOT RETURNED
CORRECTLY
14338138 : STOP AND START OF DEPLOYMENT DOES NOT WORK IF WORK-MANAGER
SPECIFIED WEBLOGIC.XM
14331441 : THE DAEMON THREAD GOT FROM THE WORKMANAGER ARE ALWAYS NAMED SAME
14273523 : SERVER MIGRATION WITH DATABSE LEASING NOT SHOWING MESSAGES
CORRECTLY
14255420 : NPE IN JSSEFILTERIMPL DOHANDSHAKE
14230544 : ILLEGALARGUMENTEXCEPTION: INVALID -VE COUNT -1 ON
CAPACITYCONSTRAINT
14159653 : CHANNELSERVICE.FINDSERVERADDRESS SHOULD NOT CREATE NEW
INETSOCKETADDRESS
14118450 : SERVER RESTART IN MIDDLE OF ACTIVATE CHANGES RESULTS IN DEPLOYMENT
DEFERRED
14100309 : IT IS NOT REFLECTED EVEN IF IT CHANGES STATECHECKINTERVAL
14055280 : CHANGING SUBDEPLOYMENT TARGET PREVENTS MDB TO RECONNECT
14013341 : JMS SESSION POOL CLOSE HANGS ON CLUSTER RESTART
13959283 : WLS 10.3.5 - THE SOAPBODY CONTENT CANNOT BE EXTRACED SINCE IT
CONTAINS MORE THAN
13842172 : NODEMANAGER CRASHES AFTER APPLICATION OF PATCH 12407849
13829888 : INTERMITTLENT TEST APP DEPLOYMENT HANG/FAILURE
13826672 : NONSTRESS: NULL POINTER WHILE GETTING CLUSTER NAME OF DYNAMIC
SERVER
13799448 : [REGRESSION ]JSP FILE INCLUDE DIRECTIVE NOT WORKING USING VIRTUAL
DIR MAPPING
13741230 : SERVERRUNTIMEMBEAN.GETOVERALLHEALTHSTATE DOES NOT WORK CORRECTLY
13656558 : CVE-2011-5035
13652678 : CLUSTER MESSAGERECEIVER THREAD CAUSES VERY HIGH CPU WHEN ANOTHER
MEMBER JOINS
13643068 : MULTIPLE .APPMERGEGEN DIRECTORIES CREATED WHEN ACCESSING OWSM
POLICY PAGE IN EM
13593954 : [PERF] THREADS TRANSITIONED TO STANDBY UNDER LOAD
13536666 : [WLS 10.0.2] ARRAYINDEXOUTOFBOUNDSEXCEPTION ON SERVER START WHEN
USING 2 OR MORE
13525568 : JMS BRIDGE FAILED TO REFRESH THE CONNECTIONS AFTER CLOSED DUE TO
FIRE-WALL RULE
13497565 : CLIENT.JMSSESSION CLOSE CALL WAIT CAUSE STUCK THREADS AND MAY LEAD
TO EXHAUSTION
13428678 : <WSP:POLICY> TAG MISSING IN THE POLICY OF JAX-WS IN THE GENERATED
WSDL.
13424251 : UNDEPLOYING A SUBMODULE JMS FAILS
13384191 : SOA BPM STRESS:SOME PRIMARY SESSIONS REMAIN IN THE SYSTEM AFTER
STRESS TEST.
13351178 : PS5-RC3: NODEMANAGER SERVICE GETS AFFECTED DURING SHUTDOWN OF ALL
SERVERS
13345336 : WEBLOGIC 10.3.4 - WLCLIENT NOT WORKING FOR CORBA AND TUNNELING
13335847 : SOA STRESS BPM:GET NPES AT
SESSION.REPLICATEDSESSIONDATA.SETINTERNALATTRIBUTE
13113943 : PSR:PERF WLS IS NOT CLEARING SERVLETREQUESTIMPL ON REDIRECT TO
EXTERNAL URL
13057330 : NPE ON WEBLOGIC 10.3.5.0 AND ORACLE JDBC 11.2.0.2
12880112 : STRESS: NPE AND NOCLASSDEFFOUNDERROR DURING SERVER STARTUP WITH
JROCKIT
12661992 : E2E: WHOLE SERVER MIGRATION ON EL SOL-ZONES WORKS BUT NOT ON THE
PREFERRED NODE
11787233 : NODEMANAGER IS RESTARTED AND DO THE SERVER MIGRATION,THER IS
DUPLICATE IP MAPPED
11781863 : SEND CLOSE MESSAGE IMMEDIATELY ON SOCKET IN CONNECTIONMANAGER
9365773 : WLS 10.3 - SERVICE MIGRATION OCCURRED WHEN LEASE DB FAIL USING
MULTI DATA SOURCE

Issues Resolved in WLS Patch Set Update 10.3.6.0.2

14645022 : AQ JMS: NOTSERIALIZABLEEXCEPTION:
WEBLOGIC.JDBC.COMMON.INTERNAL.LOCALDATASOURCE
14060490 : CLASSNOTFOUNDEXCEPTION IN JWSC WHEN USING TYPEFAMILY
XMLBEANS_APACHE
14027826 : STRESS:FA: MEMORY LEAK ON TWO CLASSES IN PACKAGE
WEBLOGIC.RMI.INTERNAL
 13987213 : WEB SERVICE CLIENT FAILS AGAINST JBOSS PROVIDER WITH "SSLENGINE IS
CLOSED"
13976683 : COMETD SERVLET ON WL 10.3.5.0 YIELDS INDEXOUTOFBOUNDSEXCEPTION
13973955 : [WLS1036]JSP WILL NOT BE UPDATE IF SET WORKING-DIR IN WEBLOGIC.XML
13919215 : WLS 10.3.6 - CARRIAGE RETURN INSTEAD OF LINE FEED RETURNED AFTER
WEBLOGIC UPGRAD
13872027 : WLDF WATCH FAILS WHEN MBEAN OR MBEAN ATTRIBUTES ARE MISSING AT
STARTUP
13870996 : TEST CONFIGURATION DATASOURCE FAILS WITH
JAVA.LANG.CLASSNOTFOUNDEXCEPTION
13847125 : WLS10.3.3 - STUCK THREADS AT
SOAPMESSAGECONTEXT$INVOCATIONPROPERTYMAP.PUT
13806036 : PSR:PERF:UCM RIDC WEBSERVICES CONTENTITEMDOWNLOAD
ARRAYINDEXOUTOFBOUNDSEXCEPTION
13786287 : INCORRECT STAX DEPENDENCY CAUSING FAILURE IN JAVA TO XML FAULT
CONVERSION
13773516 : MODULES REMAINING IN STATE PREPARED AFTER REDEPLOYMENT
13742431 : DETAILED ERROR MESSAGE/ EXCEPTION TRACE FOR 'CONNECTION
ADMINISTRATIVELY' ISSUE
13720595 : ILLEGAL CALL TO EJBCONTEXT METHOD WHEN INVOKING
SESSIONCONTEXT.GETTIMERSERVICE()
13585978 : WLS 10.3.5 [MENTORING] - WEBSERVICE COMPILATION PROBLEM
13582740 : JSP COMPILER NEEDS ELEVATED PRIVILEGES WHEN COMPILING PAGES IN
CLOUD ENVIRONMEN
13536596 : CANNOT CREATE "OTHER" DATASOURCE IN CONSOLE.
13525669 : CVE-2011-1411
13509674 : 10.3.4- POTENTIAL MEMORYLEAK AT ADMINSERVER ON STARTING-STOPING
MANAGEDSERVERS
13455536 : [MENTORING]STUCK THREADS AT REQUEST.SLEEPTILLNOTIFIED() WHEN
SENDING JMS MESSAGE
13415672 : SUSPEND OPERATION ON MDB IS TAKING VERY LONG TIME
13372449 : JDBC STORE DOES NOT DO CONNECTION FAILOVER WHEN USING
ORACLE_BLOB.DDL
13372349 : CONSOLE DATASOURCE CONFIGURATION DOESN'T HAVE HOST/PORT FOR IBM
DB2 DRIVER
13367913 : (WLS1035) ADMIN SERVER HANG
13349651 : [WLS 10.3.4] OOME WHEN STARTING 64 MANAGED SERVERS
SIMULTANEOUSLY / LARGE CONFIG
13255059 : X509 BASED POLICY FILE ON JAX-WS,
13248759 : PSR:PERF:NUVIAQ: AGENT APP DEPLOYMENT IS FAILING IN PARALLEL
REQUESTS
13109327 : DIAGNOSTIC DUMP FLOOD CONTROL HAVE ISSUE. DUMP CONSTANTLY GENERATE
13070249 : WLS NOT DISPLAYING FULL ERROR MESSAGE ON FAILED DEPLOYMENT IN ALL
CASES
12973216 : <ERROR> <CLUSTER> <BEA-000123> <CONFLICT START: YOU TRIED TO BIND
AN OBJECT UNDE
12822180 : [WLS 10.3.3][MENTORING]UNICAST CLUSTER ISSUE WITH LARGE
SERVERS(>24)
12698743 : ISSUE WITH BUG 10207456 REOCCURS IF WE UPDATE APPLICATION INSTEAD
OF REDEPLOY
11818904 : ENHANCEMENT REQUEST TO CONTROL INITIAL STATE(START/STOP) OF A MDB.

Issues Resolved in WLS Patch Set Update 10.3.6.0.1

13787444 : STRESS:FA:FIN:MEM - MEMORY LEAK SEEN IN DIAGNOSTICONTEXTMANAGER
13717183 : WEBLOGIC STUCK THREADS WHEN SENDING TOO MANY RMI CALLS
13646661 : STRESS: DEPLOY/UNDEPLOY FAILURES DUE TO LACK OF DISK SPACE ON TMP
DIR
13632319 : NOTSTRESS: DEPLOYMENT STATUS SHOWN AS FAILED FOR APPS > 5MB
13608597 : [WF] ENABLE STATIC JVM EVENTS AT OFF AND LOW VOLUME FOR OPS
 13554655 : NEED ABILITY TO CONTROL THE CODEBASE LOCATION FOR USER
APPLICATIONS
13498960 : MEMORY LEAK WHEN CAPACITY CONSTRAINT IS VIOLATED
13416659 : WLS'S HTTPURLCONNECTION SHOULD NOT RETRY POST REQUEST
13371518 : SETTING THE DEFAULT COMPRESSION THRESHOLD FOR A JMS CONNECTION
FACTORY IS CAUSIN
13342292 : CVE-2011-5035
13342210 : [RGRN] ILLEGALARGUMENTEXCEPTION: INVALID -VE COUNT -1 ON MAX-
THREADS-CONSTRAINT
13114768 : POSTSTOP NOT CALLED WHEN APPLICATION DEPLOYMENT STOPPED IN WLS
CONSOLE
13092357 : TAG LIBRARY WITH DEFAULT XMLNS IN JSP CAUSES UNINTERPRETED TAG
CODE
13000612 : POLICY VALIDATION LOGIC BREAKS WLP 10.3.4
11926347 : WHITESPACE AFTER SOAPBODY CAUSES JAXWS SERVICE WITH SAML POLICY
SIGNATURE ERROR
9535337 : WLS10.3 - NPE IS THROWN BY EXTENDED LOG FORMAT WHEN BAD REQUEST IS
RECEIVED

-----------------------------------------------------------------------------------
------------------

31641257� - Oracle� WLS Patch Set Update 10.3.6.0.201020

DISCLAIMER:

Oracle recommends this Patch Set Update (PSU) for development and production
systems in accordance with Doc ID 1306505.1.
�
This PSU may conflict with an interim patch(es) that has been applied to customer
systems. If a patch conflict is identified, customers should determine, through
review of the bugs fixed list, whether the interim patch was included in the PSU.
If the interim patch is included in the PSU, the interim patch does not need to be
applied to systems where the PSU is applied.��� If the interim patch is not
included in the PSU, the conflict probably arises because the PSU modifies the same
module as the interim patch. In such cases, customers should contact Oracle
Support, provide information about all patches applied to the system, and request
an overlay patch(es) that will resolve the conflict.
�
This software and related documentation are provided under a license agreement
containing restrictions on use and disclosure and are protected by intellectual
property laws. Except as expressly permitted in your license agreement or allowed
by law, you may not use, copy, reproduce, translate, broadcast, modify, license,
transmit, distribute, exhibit, perform, publish, or display any part, in any form,
or by any means. Reverse engineering, disassembly, or decompilation of this
software, unless required by law for interoperability, is prohibited.
�
The information contained herein is subject to change without notice and is not
warranted to be error-free. If you find any errors, please report them to us in
writing.
�
If this software or related documentation is delivered to the U.S. Government or
anyone licensing it on behalf of the U.S. Government, the following notice is
applicable:
�
U.S. GOVERNMENT RIGHTS Programs, software, databases, and related documentation
and technical data delivered to U.S. Government customers are "commercial computer
software" or "commercial technical data" pursuant to the applicable Federal
Acquisition Regulation and agency-specific supplemental regulations. As such, the
use, duplication, disclosure, modification, and adaptation shall be subject to the
restrictions and license terms set forth in the applicable Government contract,
and, to the extent applicable by the terms of the Government contract, the
additional rights set forth in FAR 52.227-19, Commercial Computer Software License
(December 2007). Oracle USA, Inc., 500 Oracle Parkway, Redwood City, CA 94065.
�
This software is developed for general use in a variety of information management
applications. It is not developed or intended for use in any inherently dangerous
applications, including applications which may create a risk of personal injury. If
you use this software in dangerous applications, then you shall be responsible to
take all appropriate fail-safe, backup, redundancy, and other measures to ensure
the safe use of this software. Oracle Corporation and its affiliates disclaim any
liability for any damages caused by use of this software in dangerous applications.
�
Oracle is a registered trademark of Oracle Corporation and/or its affiliates.
Other names may be trademarks of their respective owners.
�
This software and documentation may provide access to or information on content,
products, and services from third parties. Oracle Corporation and its affiliates
are not responsible for and expressly disclaim all warranties of any kind with
respect to third-party content, products, and services. Oracle Corporation and its
affiliates will not be responsible for any loss, costs, or damages incurred due to
your access to or use of third-party content, products, or services.

Copyright���2020,�Oracle�and/or�its�affiliates.�All�rights�reserved.