Fixed Issues

Oracle Health Sciences Information Manager 4.0.4 includes one enhancement and two bug fixes that improve functionality.

Table 1-1 Issues fixed in Oracle Health Sciences Information Manager 4.0.4

Enhancement or Bug Number	Description
Enhancement 39795204	ITI-62 DeleteDocumentSet processing generated SQL statements with a variable number of bind parameters based on the number of UUIDs in each request. This could result in multiple SQL text variations, requiring additional parsing and potentially different execution plans in the Oracle Database. ITI-62 DeleteDocumentSet processing has been enhanced to support HRL database collection-based binding for the affected lookup, validation, and delete queries. When collection binding is enabled, the SQL text remains consistent regardless of the number of UUIDs in the request, improving SQL cursor reuse and reducing unnecessary parsing overhead. This behavior is controlled by the following property in the localregistry section of xconfig.xml: <Property name="ITI62CollectionBindEnabled">false</Property> When set to true, ITI-62 DeleteDocumentSet processing uses the HRL database collection type for the affected SQL queries. When set to false, or when the property is not configured, the default existing variable-length scalar bind behavior is used. The default value is false. There is no change to the functional behavior of the ITI-62 DeleteDocumentSet transaction. Note: Before enabling ITI-62CollectionBindEnabled, create the following collection type in the HRLCORE schema: CREATE OR REPLACE TYPE HRL_UUID_TABLE_TYPE AS TABLE OF VARCHAR2(100);/ The HRL_UUID_TABLE_TYPE type is used to pass a variable number of UUIDs as collection binds while maintaining consistent SQL text.
Bug 39970525	When an ITI-62 DeleteDocumentSet request contained the same ObjectRef UUID more than once, the RLS-ITI-62 service could incorrectly return an UnresolvedReferenceException. Although the referenced object existed in the registry, only one occurrence of the UUID was removed during validation. The remaining duplicate occurrences were incorrectly reported as objects not found in the registry. The RLS-ITI-62 DeleteDocumentSet Service now removes duplicate ObjectRef UUIDs before validating the registry references. When an ITI-62 DeleteDocumentSet request contains a repeated UUID, RLS processes the UUID as a single logical reference. If the object exists in the registry, it is no longer incorrectly included in the unresolved-reference error response.
Bug 39710973	The OHIM-XPID module previously used Apache MINA Core version 2.1.10, which was affected by the publicly reported security vulnerability CVE-2026-42779. The OHIM-XPID module now uses Apache MINA Core version 2.1.15, which includes the applicable security fix for CVE-2026-42779.

Enhancement or Bug Number

Description

Enhancement 39795204

ITI-62 DeleteDocumentSet processing generated SQL statements with a variable number of bind parameters based on the number of UUIDs in each request. This could result in multiple SQL text variations, requiring additional parsing and potentially different execution plans in the Oracle Database.

ITI-62 DeleteDocumentSet processing has been enhanced to support HRL database collection-based binding for the affected lookup, validation, and delete queries. When collection binding is enabled, the SQL text remains consistent regardless of the number of UUIDs in the request, improving SQL cursor reuse and reducing unnecessary parsing overhead.

This behavior is controlled by the following property in the localregistry section of xconfig.xml:

<Property name="ITI62CollectionBindEnabled">false</Property>

When set to true, ITI-62 DeleteDocumentSet processing uses the HRL database collection type for the affected SQL queries.
When set to false, or when the property is not configured, the default existing variable-length scalar bind behavior is used.

The default value is false.

There is no change to the functional behavior of the ITI-62 DeleteDocumentSet transaction.

Note: Before enabling ITI-62CollectionBindEnabled, create the following collection type in the HRLCORE schema:

CREATE OR REPLACE TYPE HRL_UUID_TABLE_TYPE AS TABLE OF VARCHAR2(100);/

The HRL_UUID_TABLE_TYPE type is used to pass a variable number of UUIDs as collection binds while maintaining consistent SQL text.

Bug 39970525

When an ITI-62 DeleteDocumentSet request contained the same ObjectRef UUID more than once, the RLS-ITI-62 service could incorrectly return an UnresolvedReferenceException. Although the referenced object existed in the registry, only one occurrence of the UUID was removed during validation. The remaining duplicate occurrences were incorrectly reported as objects not found in the registry.

The RLS-ITI-62 DeleteDocumentSet Service now removes duplicate ObjectRef UUIDs before validating the registry references.

When an ITI-62 DeleteDocumentSet request contains a repeated UUID, RLS processes the UUID as a single logical reference. If the object exists in the registry, it is no longer incorrectly included in the unresolved-reference error response.

Bug 39710973

The OHIM-XPID module previously used Apache MINA Core version 2.1.10, which was affected by the publicly reported security vulnerability CVE-2026-42779.

The OHIM-XPID module now uses Apache MINA Core version 2.1.15, which includes the applicable security fix for CVE-2026-42779.

Parent topic: Oracle Health Sciences Information Manager