Oracle XDK Java removing security vulnerabilities

Hi All,
I am looking for removing security vulnerabilities that may be associated with XML parsers.
I am looking which version of Oracle XDK Java has removed security vulnerabilities associated with XML Parsing.
Also what is the latest version Oracle XDK Java is present in market.
Also is new version are backward compatible. Do we need to see is any change in API level occurs.
Currently we are using Oracle XDK Java 10.2.0.2.
Just a description of security vulnerabilities that may be associated with XML parsers are
"The vulnerabilities are related to the parsing of XML elements with unexpected byte values and recursive parentheses, which cause the program to access memory out of bounds, or to loop indefinitely. The effects of the vulnerabilities include denial of service and potentially code execution. The vulnerabilities can be exploited by enticing a user to open a specially modified file, or by submitting it to a server that handles XML content.:
Regards
Atul Parti

Which JVM is the security tool complaining about (what is the directory path, for example)?
My guess is that the tool is complaining about the older JVM that Oracle installs in order to run the Oracle Universal Installer and the other Java-based installation tools. If that's the case, those JVMs do not generally represent a security issue because they are not running anything on a day-to-day basis. They're only used by things like the OUI which only get invoked when someone wants to do something like install new software. Ideally, you'd be able to have the conversation with the security folks and explain that those older JVMs exist only for the limited purpose of running the OUI and the other configuration tools.
If the security folks want you to upgrade the Java version (as opposed to just installing patches to the older JVMs), that has a decent probability of breaking the various installation and configuration tools. That may not have much impact on a day-to-day basis but may make administration tasks in the future more challenging.
Justin

Similar Messages

Oracle XDK Java 9.2.0.2.0 installation problem

Hi,
I downloaded xdk_java_9_2_0_2_0 and I did change the default connection with my username and password in XSQLConfig.xml file. When I tried to execute XSQL.bat file under bin folder I am getting the error in dos window as follows
Bad command or file name
Oracle XDK Java 9.2.0.2.0 Production
XSQL-005: XSQL page is not well-formed.
XML parse error at line 1, char 1
Start of root element expected.
Please suggest me what I need to do...

This means your XSQL page is not well-formed XML document. Please check the syntax in your .xsql file.

Security vulnerabilities in apache that comes with oracle database.

Hi,
We are having a QA database in Oracle enterprise version 9.2.0.4 on OS : OSF1.
Recently our security team ran a test and found that the apache1.3 that comes as component of Oracle database is prone to security vulnerabilities. Also they suggested to remove the apache or upgrade to latest as remedy.
When contacted to Oracle support, Oracle team replied apache upgrade should not be done instead latest apache seprately can be installed as reverse proxy. But when asked for steps/document there is no reply. Anyone faced this problem can provide any help/suggestion in this regard.
I am attaching some of the threads identified by our Security Team for reference.
1. Apache 1.3 HTTP Server Expect Header Cross-Site Scripting XXXX and YYYYYY ports 7782, 4889, 3339.
2. Apache HTTP Server 413 Error HTTP Request Method Cross-Site Scripting Weakness
3. Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<HTML><HEAD>
<TITLE>417 Expectation Failed</TITLE>
</HEAD><BODY>
<H1>Expectation Failed</H1>
The expectation given in the Expect request-header
field could not be met by this server.<P>
The client sent<PRE>
Expect: <script>alert(document.domain)</script>
</PRE>
but we only allow the 100-continue expectation.
-CR

I dont know how to find which components are using the apache. Help me if there is any way to find it. Only information i can say you is there is no other software installed that in that server other than oracle Database.

Java 1.4.2 Security Vulnerabilities

Hello,
I'm looking for a link that lists the security vulnerabilities of Java 1.4.2 and I am having trouble finding a comprehensive list. Our security officer doesn't want us using 1.4.2 because of security vulnerabilities and I want to confirm what they are. But, I have not seen any report of what these issues are. This relates specifically to our Java version in relation to our Discoverer Plus use. Does anyone have a link of known Java 1.4 security issues?
Thanks!

Check this
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57591-1

Oracle Security Vulnerabilities?

Hi all,
We're running many PHP 5.x applications in a distributed environment that use the OCI client to access Oracle 10g databases.
Our server administration group is migrating to a new server and is refusing to install or support the OCI Instant client under Linux saying it's a security problem. Specifically, they say that the OCI Instant Client is exposed to buffer overflows and stack smashing. Their recommendation? Rewrite all our apps to use another database. Yeah, right.
They provided me with two sources to explain the issues:
http://www.dummies.com/WileyCDA/DummiesArticle/id-2900.html
and
Re: Problems with libclntsh.so.10.1 and PHP/Apache HTTPD
Is this really a security problem? If so, what can be done to mitigate the risk?
Thanks,
John

Hi all,
I thought I’d jump in this thread with a few thoughts.
Security flaws unfortunately affect software, both commercial and open source. I believe that what sets Oracle apart from many other vendors is the company’s commitment to security. Oracle Software Security Assurance (http://www.oracle.com/security/software-security-assurance.html) includes the most transparent vulnerability remediation policy in the industry. Furthermore, the Critical Patch Update (CPU) process (http://www.oracle.com/technology/deploy/security/alerts.htm) provides a predictable mechanism for the remediation of security vulnerabilities in Oracle software. By comparison, open source involves unpredictable releases of security fixes.
Now, getting back to the discussion in this thread: as much as we try to prevent vulnerabilities during development, as is the case with all large software products, some make their way into released code. As vulnerabilities are discovered, Oracle fixes them in order of severity and release fixes for them through the Critical Patch Update.
An attacker could attempt to exploit the unpatched vulnerabilities through OCI or other protocols providing access to the database (This is not specific to OCI). Oracle’s recommendation is therefore to remain current on the Critical Patch Update (the last one was issued on July 17, 2007). Keep in mind that the CPU is cumulative for the database, and applying the most recent CPU will bring you at current security patch level, and this will significantly contribute to improving your organization’s security posture.
Do not hesitate to contact me if you have questions at [email protected]
Sincerely
Eric Maurice
Manager – Oracle Software Security Assurance

Are Security Vulnerabilities fixed by applying Oracle Server Patchsets

Hi,
I would like to know whether by applying Oracle Server Patchsets or by upgrading the Oracle Server from one version to another do we overcome the Security Vulnerabilities highlighted in the previous patchset or Oracle Server Version.
For example if I have an Oracle Server 9.2.0.1 and I apply server patchest 9.2.0.8 do I overcome all the security vulnerabilities highlighted for version 9.2.0.1 and all other intervening versions. Similarly, if I upgrade my Oracle Server 9.2.0.6 to say Oracle Server 10g 10.2.0.3 do I overcome all security vulnerabilites highlighted fro 9.2.0.6 and all other intervening releases.
Best Regards
Syed Zaib ul Qamar

Is there a link; or where can I go to find the types of and/or categories for the security vulnerabilities associated with (past and present) versions of Oracle? I work with a very large team of developers and some are DBAs that perform mainly custom coding in C++ and a little in Ada. I would like to ensure that our team is continually aware of the both past and current Oracle vulnerabilities when developing applications/scripts (designing, coding, reviewing, building, etc.), testing (including security) , quality assurance, packaging, and etc.
Perhaps, this is a lot to ask; but, this at least a good palce to start.

HT202447 Do I re-enable Java plug-in in Safari after Flashback Removal Security update.

I received this update:
Flashback Removal Security update. After installing the following info came up.
This update removes the most common variants of the Flashback malware. If the Flashback malware is found, a dialog will notify you that malware was removed. In some cases, the update may need to restart your computer in order to completely remove the Flashback malware.
To improve the security of your Mac, this update also disables the Java plug-in in Safari. For instructions on how to re-enable it, please visit:http://support.apple.com/kb/HT5241.
My question is: Do I leave disabled or do I re-enable it? Not sure what is the right thing to do.

Leave it as disabled unless and until you need Java for a particular web site. Very few use it. Leave Java Script enabled as this is something completely different.

HT5678 Carnegie-Mellon/DHS Vulnerability Note VU#858729 "Java contains multiple vulnerabilitie"

does this update address/resolve the Carnegie-Mellon/DHS Vulnerability Note VU#858729 "Java contains multiple vulnerabilities" http://www.kb.cert.org/vuls/id/858729 ?

Do you believe this update has the necessary changes to make it safe to re-enable our Java?
Java on the Web (not to be confused with JavaScript, to which it's not related, despite the similarity of the names) is a weak point in the security of any system. Java is, among other things, a platform for running complex applications in a web page, on the client. That was never a good idea, and Java's developers have had a lot of trouble implementing it without also creating a portal for malware to enter. Past Java exploits are the closest thing there has ever been to a Windows-style "virus" affecting OS X. Merely loading a page with malicious Java content could be harmful. Fortunately, Java on the Web is mostly extinct. Only a few outmoded sites still use it. Try to hasten the process of extinction by avoiding those sites, if you have a choice.
Java is not included in OS X 10.7 and later. A discrete Java installer is distributed by Apple, and another one by Oracle (the developer of Java.) Don't use either one unless you need it. Most people don't. If Java is installed, disable it — not JavaScript — in your browsers. In Safari, this is done by unchecking the box marked Enable Java in the Security tab of the preferences dialog.
Regardless of version, experience has shown that Java on the Web can't be trusted. If you must use a Java applet for a specific task, enable Java only when needed for the task and disable it immediately when done. Close all other browser windows and tabs, and don't visit any other sites while Java is active. Never enable Java on a public web page that carries third-party advertising. Use it, if at all, only on well-known, password-protected, secure websites without ads. In Safari 6 or later, you'll see a lock icon in the address bar with the abbreviation "https" when visiting a secure site.

Error starting Oracle BI Java Host service

Hi,
We are facing some issue while starting the Oracle BI Java Host service. It throws the following error.
This application was working properly till some 2 days back and suddenly it has started giving this error. We have not updated any software. The host machine is Win XP.
Sep 27, 2011 12:08:15 PM Main main
INFO: Javahost config file(s): C:\OracleBI\web\javahost\config\config.xml. Xpath:.
Sep 27, 2011 12:08:16 PM ApplicationImpl createEnvironment
INFO: Config environment properties:
presentation.coreconfigdir=C:\OracleBI\web\config
javahostdir=C:\OracleBI\web\javahost
rootdir=C:\OracleBI
presentation.dataconfigdir=C:\OracleBIData\web\config
presentation.rootdir=C:\OracleBI\web
tempdir=C:\OracleBIData\tmp
presentation.cordaroot=C:\OracleBI\Corda50
Sep 27, 2011 12:08:16 PM ApplicationImpl init
SEVERE: java.io.IOException: Unable to establish loopback connection
     at sun.nio.ch.PipeImpl$Initializer.run(PipeImpl.java:106)
     at java.security.AccessController.doPrivileged(Native Method)
     at sun.nio.ch.PipeImpl.<init>(PipeImpl.java:122)
     at sun.nio.ch.SelectorProviderImpl.openPipe(SelectorProviderImpl.java:27)
     at java.nio.channels.Pipe.open(Pipe.java:133)
     at sun.nio.ch.WindowsSelectorImpl.<init>(WindowsSelectorImpl.java:104)
     at sun.nio.ch.WindowsSelectorProvider.openSelector(WindowsSelectorProvider.java:26)
     at com.siebel.analytics.javahost.Listener.<init>(Listener.java:53)
     at com.siebel.analytics.javahost.ApplicationImpl.init(ApplicationImpl.java:121)
     at com.siebel.analytics.javahost.standalone.Main.init(Main.java:127)
Caused by: java.net.SocketException: No buffer space available (maximum connections reached?): bind
     at sun.nio.ch.Net.bind(Native Method)
     at sun.nio.ch.ServerSocketChannelImpl.bind(ServerSocketChannelImpl.java:119)
     at sun.nio.ch.ServerSocketAdaptor.bind(ServerSocketAdaptor.java:59)
     at sun.nio.ch.ServerSocketAdaptor.bind(ServerSocketAdaptor.java:52)
     at sun.nio.ch.PipeImpl$Initializer.run(PipeImpl.java:72)
     ... 9 more
Request some input to resolve this error.
Thanks in advance.

@Deepak,
Following are the log contents
Sep 27, 2011 12:08:15 PM Main main
INFO: Javahost config file(s): C:\OracleBI\web\javahost\config\config.xml. Xpath:.
Sep 27, 2011 12:08:16 PM ApplicationImpl createEnvironment
INFO: Config environment properties:
presentation.coreconfigdir=C:\OracleBI\web\config
javahostdir=C:\OracleBI\web\javahost
rootdir=C:\OracleBI
presentation.dataconfigdir=C:\OracleBIData\web\config
presentation.rootdir=C:\OracleBI\web
tempdir=C:\OracleBIData\tmp
presentation.cordaroot=C:\OracleBI\Corda50
Sep 27, 2011 12:08:16 PM ApplicationImpl init
SEVERE: java.io.IOException: Unable to establish loopback connection
at sun.nio.ch.PipeImpl$Initializer.run(PipeImpl.java:106)
at java.security.AccessController.doPrivileged(Native Method)
at sun.nio.ch.PipeImpl.<init>(PipeImpl.java:122)
at sun.nio.ch.SelectorProviderImpl.openPipe(SelectorProviderImpl.java:27)
at java.nio.channels.Pipe.open(Pipe.java:133)
at sun.nio.ch.WindowsSelectorImpl.<init>(WindowsSelectorImpl.java:104)
at sun.nio.ch.WindowsSelectorProvider.openSelector(WindowsSelectorProvider.java:26)
at com.siebel.analytics.javahost.Listener.<init>(Listener.java:53)
at com.siebel.analytics.javahost.ApplicationImpl.init(ApplicationImpl.java:121)
at com.siebel.analytics.javahost.standalone.Main.init(Main.java:127)
Caused by: java.net.SocketException: No buffer space available (maximum connections reached?): bind
at sun.nio.ch.Net.bind(Native Method)
at sun.nio.ch.ServerSocketChannelImpl.bind(ServerSocketChannelImpl.java:119)
at sun.nio.ch.ServerSocketAdaptor.bind(ServerSocketAdaptor.java:59)
at sun.nio.ch.ServerSocketAdaptor.bind(ServerSocketAdaptor.java:52)
at sun.nio.ch.PipeImpl$Initializer.run(PipeImpl.java:72)
It also mentions about the buffer space....could that be a reason for this.
By the way, I forgot to mention, this deployment is in a VMWare (with XP as OS) which is hosted on Windows Server.

Migrate to the Java 2 security model

Hi, I've tried to use signed applets but I always get the following message:
Java (TM) Plug-in: Version 1.3.1_02
Netscape security model is no longer supported.
Please migrate to the Java 2 security model instead.
Netscape security model is no longer supported.
Please migrate to the Java 2 security model instead.
Netscape security model is no longer supported.
Please migrate to the Java 2 security model instead.
Netscape security model is no longer supported.
Please migrate to the Java 2 security model instead.
Netscape security model is no longer supported.
Please migrate to the Java 2 security model instead.
I'm using IExplorer 5.5 with the Java Plug-In 1.3.1_02.
What does it mean 'migrate to the Java 2 security model'?
How can I migrate?
thanks in advance.

So you mean your applet is working in Netscape 6.2 after editing prefs.js. In that case, one possible solution is take away the support of netscape.security.* in your applet . Because netscape.* packages 'might' use the Netscape Security model, which is no longer supported(check out). Hence the system asks you to migrate to the current java security model. Even if you remove the netscape.* support, your applet will work, if you have signed it properly. In that case, you don't have to touch prefs.js or java.policy or anything from your client machine.(provided you use standard certificates like verisign).
Since you have only class file of the applet and not the source, decompile the class file and make the alteration and compile it back. A decompiler Jad is available here http://midlet.org/jsp/category.jsp?parentLevel=137.
Let me know if this has helped you.
Rajesh

Oracle XDK and FOP 0.20.4 not working...

Hi all,
We have created a sample application with Apache FOP to obtain a PDF document.
But, although it works fine with XERCES and XALAN, it doesn4t work with Oracle XDK, why?
May it be a bug in Oracle XDK? Or do Apache projects implements something non-standard that is used? Or is Oracle who does not implement all the specification?
This is the sample: (in perfect spanish ;-) )
You only should change the file locations and the System.setParameters and libraries to use Apache or Oracle XDK.
Can anybody help us?
Thanks in advance
Jose R.
TESTFO.java:
package es.aranzadi.fo;
import javax.xml.transform.*;
import javax.xml.transform.stream.*;
import javax.xml.transform.sax.*;
import javax.xml.parsers.SAXParserFactory;
import javax.xml.parsers.SAXParser;
import javax.xml.transform.sax.SAXSource;
import java.io.*;
import org.xml.sax.InputSource;
import org.xml.sax.EntityResolver;
import org.xml.sax.XMLReader;
import org.xml.sax.helpers.XMLReaderFactory;
import org.apache.fop.apps.Driver;
import org.apache.fop.layout.Page;
import org.apache.fop.apps.Version;
import org.apache.fop.apps.XSLTInputHandler;
import org.apache.fop.messaging.MessageHandler;
import org.apache.fop.render.awt.AWTRenderer ;
import java.net.URL;
public class TestFo
public TestFo()
public static void main (String [] args) throws Exception
TestFo tf= new TestFo();
tf.go();
public void go() throws Exception
// THIS IS FOR ORACLE XDK
System.setProperty("javax.xml.transform.TransformerFactory","oracle.xml.jaxp.JXSAXTransformerFactory");
System.setProperty("javax.xml.parsers.SAXParserFactory","oracle.xml.jaxp.JXSAXParserFactory");
System.setProperty("org.xml.sax.parser","oracle.xml.parser.v2.SAXParser");
// THIS IS FOR APACHE XALAN AND XERCES
//System.setProperty("javax.xml.transform.TransformerFactory","org.apache.xalan.processor.TransformerFactoryImpl");
//System.setProperty("javax.xml.parsers.SAXParserFactory","org.apache.xerces.jaxp.SAXParserFactoryImpl");
Driver driver = new Driver();
driver.setOutputStream(getResultOutputStream());
driver.setRenderer(Driver.RENDER_PDF);
Transformer transformer= (TransformerFactory.newInstance()).newTransformer(getXSLSource());
transformer.transform(getXMLSource(), new SAXResult(driver.getContentHandler()));
public StreamSource getXSLSource() throws Exception
return new StreamSource(new File("YOUR_PATH\\myPrueba.xsl"));
public SAXSource getXMLSource() throws Exception
File fichero=new File("YOUR_PATH\\myPrueba.xml");
InputSource is=new InputSource(new FileReader(fichero));
is.setSystemId("file://YOUR_PATH\\\\myPrueba.xml");
is.setEncoding("iso-8859-1");
return new SAXSource(is);
public OutputStream getResultOutputStream() throws Exception
File fichero=new File("YOUR_PATH\\pruebafo.pdf");
return new FileOutputStream(fichero);
myPrueba.xsl
<?xml version="1.0" encoding="iso-8859-1"?>
<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:fo="http://www.w3.org/1999/XSL/Format" xmlns:fox="http://xml.apache.org/fop/extensions">
<xsl:template match="/">
<fo:root xmlns:fo="http://www.w3.org/1999/XSL/Format">
<fo:layout-master-set>
<fo:simple-page-master master-name="my-page">
<fo:region-body margin="1in"/>
</fo:simple-page-master>
</fo:layout-master-set>
<fo:page-sequence master-reference="my-page">
<fo:flow flow-name="xsl-region-body">
<fo:block>
<xsl:apply-templates select="prueba"/>
</fo:block>
</fo:flow>
</fo:page-sequence>
</fo:root>
</xsl:template>
</xsl:stylesheet>
miPrueba.xml
<?xml version="1.0" encoding="iso-8859-1"?>
<prueba>
Hola mundo
</prueba>

Sorry, this is the exception:
java.lang.NullPointerException
java.lang.NullPointerException
     at oracle.xml.jaxp.JXTransformer.reportXSLException(JXTransformer.java:720)
     at oracle.xml.jaxp.JXTransformer.transform(JXTransformer.java:304)
     at oracle.xml.jaxp.JXTransformerHandler.endDocument(JXTransformerHandler.java:137)
     at oracle.xml.parser.v2.NonValidatingParser.parseDocument(NonValidatingParser.java:263)
     at oracle.xml.parser.v2.XMLParser.parse(XMLParser.java:146)
     at oracle.xml.jaxp.JXXMLFilter.parse(JXXMLFilter.java:91)
     at org.apache.fop.apps.Driver.render(Driver.java:481)
     at es.aranzadi.documentos.pruebaFOP.metodoB(pruebaFOP.java:120)
     at es.aranzadi.documentos.pruebaFOP.main(pruebaFOP.java:41)

Oracle error: java.sql.sqlrecoverableException: Closed Connection

need help on this closed connection
getting oracle error: java.sql.sqlrecoverableException: Closed Connection when running a java application using tomcat api to oracle 11g database EE 11.2.0.3.0 on windows 2008 R2
The process is reading data from an Oracle database using user_sdo_geom_metadata , memory allocated to DB is 5GB, java pool size 1G allocated , below is the code which gets data from Oracle
<NamedDataSourceDefinition:NamedDataSourceDefinition xmlns:NamedDataSourceDefinition="http://www.mapinfo.com/mxp" xmlns="http://www.mapinfo.com/mxp" xmlns:gml="http://www.opengis.net/gml"xmlns:ns2="http://www.mapinfo.com/midev/service/common/v1" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:v1="http://www.mapinfo.com/midev/service/namedresource/v1"version="MXP_WorkSpace_1_5">
<ConnectionSet/>
<DataSourceDefinitionSet>
<DBDataSourceDefinition id="TXLANDMARKS">
<DataSourceName>txlandmarks</DataSourceName>
<ConnectionMember>
<InlineDBConnection dbType="oracle">
<JDBCDriverParameters>
<JDBCUrl>jdbc:oracle:thin:@NOIORAENT2K8-64:1521:FMETEST</JDBCUrl>
<DriverPropertySet>
<Property name="user" value="NOIDADATADEV"/>
<Property name="password" value="mndata"/>
</DriverPropertySet>
</JDBCDriverParameters>
</InlineDBConnection>
</ConnectionMember>
<DBTable owner="NOIDADATADEV" useQuotes="true">TXLANDMARKS</DBTable>
</DBDataSourceDefinition>
</DataSourceDefinitionSet>
<DataSourceRef ref="TXLANDMARKS"/>
</NamedDataSourceDefinition:NamedDataSourceDefinition>
Both the machines can ping to each other successfully, no firewall exists between them, these are connection setting been used in pooling-datasource-factory.properties
poolingDataSourceFactoryClass=com.mapinfo.midev.dbms.jdbc.TomcatDataSourceFactory
# what follows are properties specific to com.mapinfo.midev.dbms.jdbc.TomcatDataSourceFactory
# defaultAutoCommit - the default auto commit state of the connection. if
# not set the assumes the driver default
# defaultAutoCommit =
# (int) The maximum number of active connections that can be allocated from # this pool at the same time. The default value is 20
maxActive = 10
# (int) The maximum number of connections that should be kept in the pool at # all times. Default value is maxActive. Idle connections are checked # periodically (if enabled) and connections that been idle for longer than
# minEvictableIdleTimeMillis will be released.
maxIdle = 10
# (int) The minimum number of established connections that should be kept in the pool at all times. The connection pool can shrink below this number if # validation queries fail. Default value is 10
minIdle = 5
# (int)The initial number of connections that are created when the pool is # started. Default value is 10
initialSize = 5
# (int) The maximum number of milliseconds that the pool will wait (when # there are no available connections) for a connection to be returned before # throwing an exception. Default value is 30000 (30 seconds)
# maxWaitMillis = 30000
# (int) The number of milliseconds to sleep between runs of the idle # connection validation/cleaner thread. This value should not be set under 1
# second. It dictates how often we check for idle, abandoned connections,
# and how often we validate idle connections. The default value is 5000
# (5 seconds).
# timeBetweenEvictionRunsMillis = 5000
# (int) The minimum amount of time an object may sit idle in the pool before
# it is eligible for eviction. The default value is 60000 (60 seconds).
# minEvictableIdleTimeMillis = 60000
# (boolean) Flag to remove abandoned connections if they exceed the
# removeAbandonedTimout. If set to true a connection is considered abandoned
# and eligible for removal if it has been in use longer than the
# removeAbandonedTimeout Setting this to true can recover db connections
# from applications that fail to close a connection. See also
# logAbandoned The default value is false.
# removeAbandoned = false
# (int) Timeout in seconds before an abandoned(in use) connection can be
# removed. The default value is 60 (60 seconds). The value should be set to
# the longest running query your applications might have.
# removeAbandonedTimeout = 60
# (boolean) Flag to log stack traces for application code which abandoned a
# Connection. Logging of abandoned Connections adds overhead for every
# Connection borrow because a stack trace has to be generated. The default
# value is false.
# logAbandoned = false
# (long) Time in milliseconds to keep this connection. When a connection is
# returned to the pool, the pool will check to see if the now
# - time-when-connected > maxAge has been reached, and if so, it closes the
# connection rather than returning it to the pool. The default value is 0,
# which implies that connections will be left open and no age check will be
# done upon returning the connection to the pool.
# maxAgeMillis = 0

Hi,
I understand that you have raised a SR for this issue which is being worked upon by our team.
Additionally, please note that the "Closed connection" error typically happens because a timeout parameter of some sort timed out the connection. This could be a parameter specified in your datasource, in your application code, or network (such as a firewall).
You may also want to -
1. check your database to be sure it is not timing out connections.
2. Make sure your network is running efficiently and that it can provide fast connections,
3. Check your Java Virtual Machine (JVM) Code Cache For Oracle Enterprise Data Quality for any memory related issues
Thanks,
Shwet

ANN : New Oracle XDK 10g Sample Application

Hello,
Check out this new Oracle XDK 10g Sample Application at http://otn.oracle.com/sample_code/tech/xml/index.html that demonstrates the Unicode Support of XDK using the scenario of a Real Estate Portal. This sample application also discusses the XSLT Extensions and illustrates the following features:
- Encoding XML documents in different character sets ( UTF-8, UTF-16, ISO-8859-1 )
- Sending and receiving XML documents over HTTP along with character encoding information
- Using single style-sheet for multilingual HTML page generation with the help of XSLT extension function facility provided by Oracle XDK 10g
- Storing XML documents in XMLType column of Oracle database along with appropriate encoding
- Generating XML documents on using Oracle XDK 10g DOM API's along with encoding attribute
The sample application supports two languages; English and French.
Regards,
OTN Team

I have got the following error when i run the WebServicesAssembler.jar
D:\Oracle\Oc4j\j2ee\home>java -jar d:/oracle/oc4j/webservices/lib/WebServicesAss
embler.jar -config etc/config.xml
Exception in thread "main" java.util.zip.ZipException: The system cannot find th
e path specified
at java.util.zip.ZipFile.open(Native Method)
at java.util.zip.ZipFile.<init>(ZipFile.java:105)
at java.util.jar.JarFile.<init>(JarFile.java:110)
at java.util.jar.JarFile.<init>(JarFile.java:52)
D:\Oracle\Oc4j\j2ee\home>java -jar WebServicesAssembler.jar -config etc/config.x
ml
Exception in thread "main" java.lang.InstantiationException: Unknown deployment
tag in JMS Web Service Example: <option>
at com.evermind.xml.XMLConfig.parseDeploymentMainNode(XMLConfig.java:293
at oracle.j2ee.ws.tools.WsAssemblerConfig.parseDeploymentMainNode(WsAsse
mblerConfig.java:68)
at com.evermind.xml.XMLConfig.parseRootNode(XMLConfig.java:268)
at com.evermind.xml.XMLConfig.init(XMLConfig.java:147)
at com.evermind.xml.XMLConfig.init(XMLConfig.java:88)
at oracle.j2ee.ws.tools.WsAssemblerConfig.init(WsAssemblerConfig.java:30
at oracle.j2ee.ws.tools.WsAssembler.main(WsAssembler.java:17)

Oracle BPEL Java Client API: Reading Configurations dynamically

We have a requirement to use Oracle BPEL Java client API to control the BPEL instances at the runtime, from an ADF BC Application. is there any possibility to read the configurations/properties that are required to look up (using 'oracle.soa.management.facade.Locator' ) the BPEL Process Manager/Server from connections.xml/adf-config.xml ?
In other terms, as we need the details like the bpel server URL, security credentials..etc to lookup the BPEL server and instances using the BPEL java client API, how can we read these details from the ADF standard config files like Connections.xml/adf-config.xml instead of hard coding them in the Java program.
Edited by: 899479 on Feb 4, 2013 6:02 AM

The api's for BPEL / Workslow canbe found here:
http://orasoa.blogspot.com/2007/05/newbie-getting-started-with-oracle-soa.html
Marc

Oracle XDK License

Hi,
If I have the runtime / production licese for Oracle Database 10g, then do I automatically get a license for Oracle XDK, 10g. Or do I have to pay more to get XDK license.
Cheers,
Gurpreet.

You pay extra for what's shown below. XML database comes in addition to the basic license.
Oracle Enterprise Edition Options
These options for Oracle Database Enterprise Edition extend the power of the Oracle database in secure data management, transaction processing and data warehousing.
Real Application Clusters
Partitioning
OLAP
Data Mining
Spatial
Advanced Security
Label Security
Enterprise Managers
Diagnostics Pack
Configuration Management Pack
Tuning Pack
Change Management Pack

Oracle XDK Java removing security vulnerabilities

Similar Messages

Maybe you are looking for