Oracle Database Puns

A quick FYI for Oracle SQL Developer, SQL Developer Data Modeler, SQLcl, SQL Developer Web, and Oracle REST Data Services (ORDS):

Only SQL Developer and SQL Developer Data Modeler include the Apache log4j library. Both were updated to 2.15.0 TODAY. You can find versions 21.4 at the usual places.

SQLcl does not use or ship this jar.

ORDS does not use or ship this jar. This means neither does Database Actions/SQL Developer Web.

Feel free to message me here or send an email to jefjf.d.smith@oracle.com if you have any questions or concerns.

In the last post I asked help for shipping Linux rsyslog to QRadar and now that problem is solved.

Now can anyone guide me on how to ship Oracle Linux Database Audit logs to QRadar. There is an official documentation regarding this but I can't understand anything in it.

https://www.ibm.com/docs/en/dsm?topic=orar-configuring-oracle-database-server-send-audit-logs-qradar

Further if I want to monitor one of our servers running Oracle Linux Database then what are the logs I should ship to QRadar ? Are rsyslog and database audit logs enough ? Or I need to ship any other logs too ?

After updated definitions we are receiving notifications about the Log4j vulnerabilities with our Oracle 12c deployments.

This vulnerable log4j jar file is installed in all the Oracle Home dirs, e.g.:

$ORACLE_HOME/md/jlib/log4j-core-2.9.1.jar

Can this jar file be upgraded/updated as a standalone and if so does anyone have the process they can share please?

If not, how would one mitigate the vulnerability CVE-2021-44228 in Oracle 12c RDBMS?

Thank you.

Hi Everyone. I was wondering if anyone had a query that would search all views to find specific text. The database version we are on is Oracle Database 12c. I found some that search all tables, but I don't have access to any of the tables. How we have been given access is going through: other users > users > views > then query on that view. Any help is appreciated.

Thank you!

I have an Oracle database and going through to apply the federal STIGs to lock the database down is time consuming, both for applying each setting and then validating them. I was looking for any tools, scripts, or automation that would help to streamline this process? Any guidance would be much appreciated!

Hit me up on my discord: BK_Polymath#4801