Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-44226

Oracle Security Patched DB Driver Not Working

XMLWordPrintable

      Issue Summary

      Following a recent security patch by Oracle for the ojdbc6.jar driver as fix for CVE-2016-3506. (p23727132_112040_Generic.zip, available in Oracle Support download area), applying the patch to Confluence breaks Confluence with Confluence throwing:

      Caused by: java.sql.SQLException: Invalid argument(s) in call
    at oracle.jdbc.OracleDatabaseMetaData.getTables(OracleDatabaseMetaData.java:2991)
    at org.apache.commons.dbcp.DelegatingDatabaseMetaData.getTables(DelegatingDatabaseMetaData.java:604)
    at net.java.ao.db.OracleDatabaseProvider.getSequences(OracleDatabaseProvider.java:93)
    at net.java.ao.schema.helper.DatabaseMetaDataReaderImpl.getSequenceNames(DatabaseMetaDataReaderImpl.java:222)
    ... 60 more

      Step to Reproduce

      1. Install the new driver by replacing the bundled driver which is located in: Confluence installation/lib folder.
      2. Restart Confluence.
      3. Attempt to login into Confluence once it is up and running.

      Expected Behavior

      The user would be able to login with no problems.

      Actual Behavior

      The user gets a 500 page error with the logs mentioned above.

      Note

      When user reverts back to using the bundled driver, things work fine again.

        1. ojdbc6-cve-2016-3506.jar
          2.63 MB

            [CONFSERVER-44226] Oracle Security Patched DB Driver Not Working

            Minh Tran added a comment -

            Hi wmitzel,

            The fix is only for 6.0.x. You can upgrade to 6.0.2 in order to have the fix

            Thanks,
            Minh Tran
            Confluence BugMaster
            Atlassian

            Minh Tran added a comment - Hi wmitzel , The fix is only for 6.0.x. You can upgrade to 6.0.2 in order to have the fix Thanks, Minh Tran Confluence BugMaster Atlassian

            wmitzel added a comment -

            Thank you very much for the fix. Is the fix only for 6.x or has it been backported to 5.9.x and 5.10.x?

            wmitzel added a comment - Thank you very much for the fix. Is the fix only for 6.x or has it been backported to 5.9.x and 5.10.x?

            Feng Xu (Inactive) added a comment -

            A fix for this issue is now available for Confluence Server customers.

            Upgrade now or check out the Release Notes to see what other issues are resolved.

            Feng Xu (Inactive) added a comment - A fix for this issue is now available for Confluence Server customers. Upgrade now or check out the Release Notes to see what other issues are resolved.

              fxu Feng Xu (Inactive)
              oraissi Omar Raissi (Inactive)
              Affected customers:
              1 This affects my team
              Watchers:
              9 Start watching this issue

                Created:
                Updated:
                Resolved: