Q: What is the recommended way to deal with the Log4j issue in Oracle Databases?
I'm currently using Oracle 18c XE and found these two files:
dbhomeXE\md\property_graph\lib\log4-core-2.9.0.jar
dbhomeXE\oui\jlib\jlib\log4j-core.jar (is version 1.2.17)
Options:
- Alter the Jars (Extract+Recreate) and remove the JndiLookup.class
- Delete the Jars
- Disable/Change the port of the web interface
- Disable graph feature (if possible)
Thanks.