Lucene search

K
atlassianOraissiATLASSIAN:CONF-44226
HistoryOct 05, 2016 - 2:12 p.m.

Oracle Security Patched DB Driver Not Working

2016-10-0514:12:31
oraissi
jira.atlassian.com
77

0.01 Low

EPSS

Percentile

83.9%

+Issue Summary+

Following a recent security patch by Oracle for the {{ojdbc6.jar}} driver as fix for {{CVE-2016-3506. (p23727132_112040_Generic.zip, available in Oracle Support download area)}}, applying the patch to Confluence breaks Confluence with Confluence throwing:

{code}
Caused by: java.sql.SQLException: Invalid argument(s) in call
at oracle.jdbc.OracleDatabaseMetaData.getTables(OracleDatabaseMetaData.java:2991)
at org.apache.commons.dbcp.DelegatingDatabaseMetaData.getTables(DelegatingDatabaseMetaData.java:604)
at net.java.ao.db.OracleDatabaseProvider.getSequences(OracleDatabaseProvider.java:93)
at net.java.ao.schema.helper.DatabaseMetaDataReaderImpl.getSequenceNames(DatabaseMetaDataReaderImpl.java:222)
… 60 more
{code}

+Step to Reproduce+

Install the new driver by replacing the bundled driver which is located in: {{Confluence installation/lib}} folder.

Restart Confluence.

Attempt to login into Confluence once it is up and running.

+Expected Behavior+

The user would be able to login with no problems.

+Actual Behavior+

The user gets a 500 page error with the logs mentioned above.

+Note+

When user reverts back to using the bundled driver, things work fine again.

0.01 Low

EPSS

Percentile

83.9%