Oracle has released a patch for the latest CVE against WebLogic, so I wanted to walk though the steps to apply the patch to WebLogic and show how to use Smart Update. Smart Update is the utility used by WebLogic to apply patches to your installation. UPDATE 12/8/2015, WebLogic 12.1.2+ is now using OPatch for WebLogic patching.
![Uninstall patch using sccm Uninstall patch using sccm](http://weblogicexpert.weebly.com/uploads/1/8/8/8/1888172/__9098079.png)
![Windows Windows](http://2.bp.blogspot.com/-m5sHWra8sO4/VatC5k_dr9I/AAAAAAAADGk/ow_-YXDrN0Y/s1600/Image%2B005.png)
Bsu patching +++++: Preparing to Install Oracle Weblogic Server Patch set: - Patches can be applied on a per-domain basis or installation wide basis, its better to apply the patch to installation wide. - use the same user which was used to install the weblogic to login to the servers. Uaw legal services plans cooperating attorney program downloads. How to Patch Weblogic with bsu utility In Oracle Weblogic, we often gets security patches and other patches related to product. As Oracle Weblogic Admins it required to apply patches regularly, in this post will see how to apply patches from bsu utility in command prompt.
Look for an second WebLogic patching post soon about using OPatch with WebLogic. Smart Update 3.3.0 Version 3.3.0 is the latest version and is included with WebLogic 10.3.5 and later. If you launch Smart Update and find that its an older version, go grab version 3.3.0 (Patch 12426828). Launching Smart Update On Windows, if you chose to create a Program Group, you can launch Smart Update from the Start Menu under the “Oracle WebLogic” folder.
Or, you can launch it from the command line:%BEA_HOME%utilsbsubsu.cmd The first time you run Smart Update, it may ask you to provide a%BEA_HOME% path. Give the path to your BEA Home (e.g, e:oracle). If you receive an error: “Unable to locate any supported product installations” or “The BEA Home directory selected does not contain any supported patch targets”, check out MOS Documents 946541.1 or 1063605.1 for the fix. Applying Patches In the Smart Update window, you will see the installed applications in the left pane.
Make sure “WebLogic” is selected. On the right, the top pane shows you patches that have been applied.
The lower pane displays patches in your download directory that are waiting to be applied. By default, Smart Update will look for patches under%BEA_HOME%utilsbsucache_dir for patches. To start Smart update and have it look at a different path, use the -patch_download_dir=[path] flag or select File > Preferences to change the directory. To apply a patch, click the green arrow in the “Downloaded Patches” pane for the patch. Smart Update will check for patch conflicts and the apply the patch. Command Line You can also run Smart Update from the command line. This is great when you have multiple servers to patch.
Running bsu.cmd -help will give you all the options you need when scripting. Let’s Fix CVE-2015-4852 Since we have new patches to fix CVE-2015-4852 (T3/Java Deserialization), let’s use those as our example. Extract Patches Download the patches you need and unzip them. Copy the.jar and.xml files from the patch folders to your web server. I put the patch files under e:patchescve-2015-4852 on the web server.