Link to home
Create AccountLog in
Avatar of marrowyung
marrowyung

asked on

unnecessary file in Oracle home folder, can we delete it without any problem?

hi,

we see in the oracle 19.3 home directory we have these files:

"Path : D:\WINDOWS.X64_193000_db_home\md\property_graph\lib\log4j-core-2.11.0.jar
Installed version : 2.11.0
Fixed version : 2.12.4"
"Path : D:\WINDOWS.X64_193000_db_home\md\property_graph\pgx\server\pgx-webapp-3.2.0.war
Installed version : 2.11.0
Fixed version : 2.12.4"
"Path : D:\WINDOWS.X64_193000_db_home\suptools\tfa\release\tfa_home\jlib\log4j-core-2.9.1.jar
Installed version : 2.9.1
Fixed version : 2.12.4"
"Path : D:\WINDOWS.X64_193000_db_home\suptools\tfa\release\tfa_home\jlib\tfa.war
Installed version : 2.9.1
Fixed version : 2.12.4"
"Path : D:\app\oracle\WINDOWS.X64_193000_db_home\md\property_graph\lib\log4j-core-2.11.0.jar
Installed version : 2.11.0
Fixed version : 2.12.4"
"Path : D:\app\oracle\WINDOWS.X64_193000_db_home\md\property_graph\pgx\server\pgx-webapp-3.2.0.war
Installed version : 2.11.0
Fixed version : 2.12.4"
"Path : D:\app\oracle\WINDOWS.X64_193000_db_home\suptools\tfa\release\tfa_home\jlib\log4j-core-2.9.1.jar
Installed version : 2.9.1
Fixed version : 2.12.4"
"Path : D:\app\oracle\WINDOWS.X64_193000_db_home\suptools\tfa\release\tfa_home\jlib\tfa.war
Installed version : 2.9.1
Fixed version : 2.12.4"
"Path : D:\app\oracle\WINDOWS.X64_193000_db_home\md\property_graph\lib\log4j-core-2.11.0.jar
Installed version : 2.11.0
Fixed version : 2.12.4"
"Path : D:\app\oracle\WINDOWS.X64_193000_db_home\md\property_graph\pgx\server\pgx-webapp-3.2.0.war
Installed version : 2.11.0
Fixed version : 2.12.4"
"Path : D:\app\oracle\WINDOWS.X64_193000_db_home\suptools\tfa\release\tfa_home\jlib\log4j-core-2.9.1.jar
Installed version : 2.9.1
Fixed version : 2.12.4"
"Path : D:\app\oracle\WINDOWS.X64_193000_db_home\suptools\tfa\release\tfa_home\jlib\tfa.war  

Installed version : 2.9.1  

Fixed version : 2.12.4 



can we delete all that ? 



SOLUTION
Avatar of slightwv (䄆 Netminder)
slightwv (䄆 Netminder)

Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
SOLUTION
Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
SOLUTION
Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
SOLUTION
Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
Avatar of marrowyung
marrowyung

ASKER

slightwv  ,


"What was the latest patches you've applied? 


we are going to patch Oracle from 19.3 to 19.16, but that is not what we want to do,.


we have scan test form customer and those files in the list should be delete if we don't want it 


"I would suggest you apply the latest patchset and see if those alerts are removed from your scans:
Patch 34468114 - Windows Database Oct2022 Bundle Patch 19.17.0.0.221018 "


you are saying those files are related to the DB patces? 


"Still a HORRIBLE suggestion.  Just because things appear right after doing so, doesn't mean that some process a week or a month from now doesn't need them and then it crashes. "


yes !



Kent Olsen,


"An awful lot of things will break if you change/delete those files."


tks , this is what we are worrying about.


by this :


Upgrade to Apache Log4j version 2.17.1, 2.12.4, or 2.3.2 or later, or apply the vendor mitigation. Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. 


we already deleted, as according to https://logging.apache.org/log4j/2.x/security.html  


Path : S:\App\apache-jmeter-5.4.3\lib\log4j-core-2.17.0.jar 

 Installed version : 2.17.0  Fixed version : 2.17.1 


and seems no problems at all





SOLUTION
Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account

Manually delete them at your own risk.


sure, 


we will patch PROD this wednesday, tks for your advice.



oracle also suggest do not delete any files.

SOLUTION
Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account

man,


it is the audio results shows those file is old file and out of date.

ASKER CERTIFIED SOLUTION
Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account

When Oracle is updated, it will update these files as necessary to maintain compatibility between Oracle and Java.


we will do the patch next wednesday and let's see how it is after the patch.


should come back to this 2 weeks later.

we upgraded to 19.18 and files updated too.,