About CPU patches

Hi All,
Does anyone knows if the patches in note Oracle E-Business Suite Releases 11i and 12 Critical Patch Update Knowledge Document (April 2012) (Doc ID 1406263.1), are included in patch 8919491 (R12.ATG_PF.B.delta.3)??
Thanks in advance!

No they are not - CPU patches are separate from EBS patches and need to be applied separately.
For R12, CPU patches are cumulative, so applying the latest CPU should suffice.
HTH
Srini

Similar Messages

CPU patch July 2010 on Oracle 11.1.0.7 database

Hi,
I want to install the July2010 CPU patch (9655014) on a 11.1.0.7 database which was initially created with version 11.1.0.6.
The README file of the patch states the following about recompiling views:
3.2.2.2 Recompiling Views in the Database
You may skip this section if you have recompiled views for this database during the installation of a previous CPU or if the database was created with Release 11.1.0.6 or later.
So I assumed that I do not need to recompile the views but a little further in the README file I read:
If you want to check whether view recompilation has already been performed for the database, execute the following statement.
SELECT * FROM registry$history where ID = '6452863';
If the view recompilation has been performed, this statement returns one or more rows. If the view recompilation has not been performed, this statement returns no rows.
When I execute the select it returns no rows. So this is confusing. Should I perform a view recompilation or not?
And when I execute recompile_precheck_jan2008cpu.sql (strange name for a July 2010 CPU) it says:
SQL> @recompile_precheck_jan2008cpu.sql
Running precheck.sql...
Number of views to be recompiled :1969
Number of objects to be recompiled :4019
Please follow the README.txt instructions for running viewrecomp.sql
PL/SQL procedure successfully completed.
thanks in advance.
regards,
Ivan

Short answer: you dont need to run view_recompile_jan2008cpu.sql
Long answer:
>
SELECT * FROM registry$history where ID = '6452863';
If the view recompilation has been performed, this statement returns one or more rows. If the view recompilation has not been performed, this statement returns no rows.
When I execute the select it returns no rows. So this is confusing. Should I perform a view recompilation or not?
>
You will only get an entry in registry$history if you had a database that you had actually run the view_recompile_jan2008cpu.sql script which inserts a row into the table at the end of the script:
view_recompile_jan2008cpu.sql
Rem =======================================================================
Rem Insert values for patch into registry.
Rem =======================================================================
INSERT INTO registry$history (action_time, action, id, comments)
        values ( SYSTIMESTAMP, 'CPU', &&PATCH_NUMBER, '&&PATCH_DESC' );
COMMIT; In your case, you will get no entries in the table BUT you do not have to run the view recompilation so long as the database was created using a patched Oracle home of a release where Oracle says the view recompilation is not required.
>
SQL> @recompile_precheck_jan2008cpu.sql
Running precheck.sql...
Number of views to be recompiled :1969
>
This script has a very simple logic that just generates count of views and dependant objects that would need recompilation. The selection criteria does not include actually checking whether you actually need to apply the view recompilation script.
You can test this yourself:
Case#1: Run the recompile_precheck_jan2008cpu.sql on a database where you have applied the view recompilation script. You will find the count shows a non-zero value.
SQL> col action_time format a32
SQL> col version format a15
SQL> col version format a15
SQL> select action_time, version, id from registry$history where ID=6452863;
ACTION_TIME                      VERSION                 ID
24-JUL-10 12.52.15.390000 PM                        6452863
SQL> @recompile_precheck_jan2008cpu.sql
Running precheck.sql...
Number of views to be recompiled :1637
Number of objects to be recompiled :3487
Please follow the README.txt instructions for running viewrecomp.sql
PL/SQL procedure successfully completed.Case#2: Create a new database using a version that does not require the view recompilation patch. Run the recompile_precheck_jan2008cpu.sql. You will find the view count shows a non-zero value even though you do not need to recompile the views as mentioned in the Oracle patch notes.

CPU Patch for SOA BPEL -10.1.3.5 and B2B -10.1.2.0.4

We are in DOD -GOVT US marine corps.. WE are on 10.1.3.3.1 .. There is no CPU Patches for 10.1.3.3.1 nor
for 10.1.2.03-B2B
open issues/questions:
Open Issues:
1. What is Oracle's recommendation about upgrading 10.1.3.5 vs 10.1.3.4 (CPU Patch support length). Also CPU Patch support policy for BAM 10.1.3.3.1 and B2B 10.1.2.3.
2. Any MLRs to apply after upgrading SOA/BPEL/WSM/BAM/B2B 10.1.3.5 ?
3. Interoperability of OWSM 10.1.3.4, BAM 10.1.3.3.1, B2B 10.1.2.3 and SOA/BPEL 10.1.3.5. Can they co-exist or must they(one or more) be in same release level?
Thanks & Regards
Sri

Hi , I am facing the same issue.
were you able to resolve it.
please let me know if you were.
Many Thanks.

Determinating CPU patch version in 8.1.7.4. database

How can I determinate currently installed CPU patch version in oracle 8.1.7.4 database (HP True64UNIX). (some alternativ for "opatch inventory" from higher versions of databases)
Thanks.

Hi,
It's a great question about 8i...
With Remote Diagnostic Agent (RDA Tools) you can see all dll & all files which were updated (date and version, make a checkcross with CPU doc).
Nicolas.

Oracle 10g CPU patch

Oracle 10g on Windows server 2003. I need to do CPU patch. I follow the patch instructions, but I have some questions:
1. back up %oracle_home% directory. Is this just to copy whole directory to different disk?
2. clean shutdown all Oracle services: I know this includes db, listener, db control, anything else?
3. The Db has ASP application on the top. How to shutdown application? what components should I look at?
Webserver that uses Oracle client in the mid-tier?
4. What does ODBC application mean?
5.What does this mean? "make sure no applications are using the driver sqora32.dll"
6.What does "Oracle Instant Client" mean? Is this regular Oracle client tool installed on application server? I guess not.
Appreciate any help.
S

ski123 wrote:
Thank you. I guess I need to make my questions clear:
1. back up %oracle_home% directory. Is this just to copy whole directory to different disk?
My question: Is this just to copy to different disk OR you have other way to do it?It is a suggestion that will allow you to recover. In some cases (non-production) I will skip this step.
In production, I will ask the Backup team to make an extra backup of the entire ORACLE_HOME so they can do a quick restore if I mess up. (Then I'll be extra careful not to mess up.)
And yes, if you are comfortable that a disk copy will be sufficient to do a complete restore, then that should be OK as well.
>
2.clean shutdown all Oracle services: I know this includes db, listener, db control, anything else?
I don't have ASM or ClusterwareThe you probably don't need to worry about it.
If you have any other Oracle stuff (BI Suite, SOA Suite, etc) that tries to log on to the database, these must be made aware of the outage - usually by shutting them down. Even if they are not on the same server.
>
3.What does this mean? "make sure no applications are using the driver sqora32.dll"
My question is where and how can I find this DDL?
Are you seriously saying you do not have access to an OS file-search tool?
At least one copy is in ORACLE_HOME/bin
>
4. What does "Oracle Instant Client" mean? Is this regular Oracle client tool installed on application server? I guess not.
My question is that is this tool to get installed on Oracle server or application server? My vendor installed the Oracle server for us, how do I know if this tool got installed or not?It is a completely separate download. It is usually installed at the client, not on the server. However, since you have a vendor install, you may want to discuss this with the vendor.
The big challenge with Instant Client is that it is not an 'install' . It is just an unzip into an arbitrary directory, and does not get recorded in the registry. So almost impossible to find without the SysAdmin's install notes.
>
Appreciate any help.
Thanks
S.

SOA BPEL 10.1.3.5.0 CPU Patches

We are on 10.1.3.3.1 at US Marine Corps -Department of Defense
We dont have a security patches for 10.1.3.3.1
open issues/questions:
Open Issues:
1. What is Oracle's recommendation from Oracle about upgrading 10.1.3.5 vs 10.1.3.4 (CPU Patch support length). Also CPU Patch support policy for BAM 10.1.3.3.1 and B2B 10.1.2.3.
2. Any MLRs to apply after upgrading SOA/BPEL/WSM/BAM/B2B 10.1.3.5 ?
3. Interoperability of OWSM 10.1.3.4, BAM 10.1.3.3.1, B2B 10.1.2.3 and SOA/BPEL 10.1.3.5. Can they co-exist or must they(one or more) be in same release level?
What is the supported method
Please advise
thanks
sri

Did you find a solution to this issue? We are having a similar issue trying to deploy a Paypal IPN on OAS 10.1.2.3. The IPN messages coming from Paypal appear to be attempting an SSLv2 handshake. In our case SSLv2 is disabled due to our security requirements so the connection is killed by our App Server. We have found that manually sending the IPN messages works correctly.

Differences between PSUs and traditional CPU patches

Hi, this is Eric Maurice, Director Oracle Software Security Assurance. In the past, I have been getting a number of questions about the differences between the Patch Set Updates (PSUs) and traditional Critical Patch Update (CPU) patches.
On August 11th at 11:00AM Pacific / 2:00PM Eastern, the Independent Oracle User Group (IOUG) will host a webcast on Database Server security patching featuring two speakers from Oracle: Bruce Lowenthal, Director for Security Alerts, and Lois Price, Director for Product Lifecycle Services.
The purpose of this technical webcast is to discuss the various aspects of the Critical Patch Update (CPU) program, which are specific to Oracle Database Server. The speakers will spend a significant portion of the webcast discussing the differences between the Patch Set Update (PSU) and traditional CPU patches. An overview of the CPU program will also be provided, and ample time will be set aside for a Q&A session at the end of the presentation.
The URL to register to this webcast is https://www1.gotomeeting.com/register/141106952
For more information:
Patch Set Updates for Oracle Products [ My Oracle Support Note 854428.1] is located at https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=854428.1 (My Oracle Support subscription is required)
The Critical Patch Updates and Security Alerts page is located at http://www.oracle.com/technology/deploy/security/alerts.htm
Edited by: Eric P. Maurice on Jul 27, 2010 3:21 PM
Edited by: Eric P. Maurice on Jul 27, 2010 3:22 PM

Update:
Due to technical difficulties, the Database Security Patching webcast, initially scheduled for August 11, 2010 at 1pm CDT has been rescheduled. The new webcast will take place on Wednesday, August 18 at 1pm Central.
You can register again for this event at https://www1.gotomeeting.com/register/729035104

Database rolling upgrade cpu patch with minimal service outage

Oracle 11gR2 Primary Instance
Oracle 11gR2 Active Physical Standby
Requirement of applying CPU and CVE patches with minimal downtime. I believe that I've been able to apply CPU patch to Active Standby after deferring redo transport and applying patch to active physical standby first and then performing a manual switchover to have the standby become the primary and former-primary become the standby and they apply CPU Patch there and then perform another role transition to its original role.
Appreciate your experience with primary and active physical standby rolling upgrades/patches. Thanks

Hello;
I believe you are over thinking this. All you have to do on the Standby is install the patch. No switchover, no SQL. No nothing.
The SQL will move from the Primary to the Standby.
Check the readme for the patch closely or post the patch number if you want to confirm.
OR
How do you apply a Patchset,PSU or CPU in a Data Guard Physical Standby configuration [ID 278641.1]
( If it helps I had the same thoughts after my first Data Guard setup !! )
If you are trying to avoid downtime entirely the switchover will take about as long as the patch.
If you have RAC this is interesting :
http://javeedkaleem.blogspot.com/2010/05/how-to-apply-oracle-database-patch.html
As is this :
http://docs.oracle.com/cd/B28359_01/server.111/b28282/schedule_outage.htm
Best Regards
mseberg

Require official Oracle Best Practices about PSU patches

A customer complained about the following
Your company statements are not clear...
On your web page - http://www.oracle.com/security/critical-patch-update.html
The following is stated!
Critical Patch Update
Fixes for security vulnerabilities are released in quarterly Critical Patch Updates (CPU), on dates announced a year in advance and published on the Oracle Technology Network. The patches address significant security vulnerabilities and include other fixes that are prerequisites for the security fixes included in the CPU.
The major products patched are Oracle Database Server, Oracle Application Server, Oracle Enterprise Manager, Oracle Collaboration Suite, Oracle E-Business Suite, PeopleSoft Enterprise Tools, PeopleSoft CRM, JD Edwards EnterpriseOne, JD Edwards OneWorld XE, Oracle WebLogic Suite, Oracle Communications and Primavera Product Suite.
Oracle recommends that CPUs be the primary means of applying security fixes to all affected products as they are released more frequently than patch sets and new product releases.
BENEFITS
* Maximum Security—Vulnerabilities are addressed through the CPU in order of severity. This process ensures that the most critical security holes are patched first, resulting in a better security posture for the organization.
* Lower Administration Costs—Patch updates are cumulative for many Oracle products. This ensures that the application of the latest CPU resolves all previously addressed vulnerabilities.
* Simplified Patch Management—A fixed CPU schedule takes the guesswork out of patch management. The schedule is also designed to avoid typical "blackout dates" during which customers cannot typically alter their production environments.
PROGRAM FEATURES
* Cumulative versus one-off patches—The Oracle Database Server, Oracle Application Server, Oracle Enterprise Manager, Oracle Collaboration Suite, Oracle Communications Suite and Oracle WebLogic Suite patches are cumulative; each Critical Patch Update contains the security fixes from all previous Critical Patch Updates. In practical terms, the latest Critical Patch Update is the only one that needs to be applied if you are solely using these products, as it contains all required fixes. Fixes for other products, including Oracle E-Business Suite, PeopleSoft Enterprise Tools, PeopleSoft CRM, JD Edwards EnterpriseOne, and JD Edwards OneWorld XE are released as one-off patches, so it is necessary to refer to previous Critical Patch Update advisories to find all patches that may need to be applied.
* Prioritizing security fixes—Oracle fixes significant security vulnerabilities in severity order, regardless of who found the issue—whether the issue was found by a customer, a third party security researcher or by Oracle.
* Sequence of security fixes—Security vulnerabilities are first fixed in the current code line. This is the code being developed for a future major release of the product. The fixes are scheduled for inclusion in a future Critical Patch Update. However, fixes may be backported for inclusion in future patch sets or product releases that are released before their inclusion in a future Critical Patch Update.
* Communication policy for security fixes—Each Critical Patch Update includes an advisory. This advisory lists the products affected by the Critical Patch Update and contains a risk matrix for each affected product.
* Security alerts—Security alerts provide a notification designed to address a single bug or a small number of bugs. Security Alerts have been replaced by scheduled CPUs since January 2005. Unique or dangerous threats can still generate Security Alert email notifications through MetaLink and the Oracle Technology Network.
Nowhere in that statement is the Patch Set Update even mentioned. If Oracle intends to recommend to all customers that Patch Set Updates are the recommended means of Patching for Security and Functionality then it should be stated so here!
Please clarify!
Where can I find the current information so that I can use to Official Oracle statement as a reference for my Enterprise Practices and Standards document? The individual patch package references you are giving me do not state Oracle recommended Best Practice, they only speak to the specific patch package they describe. These do not help me in making an Enterprise statement of Practices and Standards.
I need to close the process out to capture a window of availability for Practices and Standards approval.
Do we have any Best Practice document about PSU patches available for customers?

cnawrati wrote:
A customer complained about the following
Your company statements are not clear...
On your web page - http://www.oracle.com/security/critical-patch-update.html
Who is the "your" to which you are referring?
<snip>
Nowhere in that statement is the Patch Set Update even mentioned. If Oracle intends to recommend to all customers that Patch Set Updates are the recommended means of Patching for Security and Functionality then it should be stated so here!Um. OK
Please clarify!
Of whom are you asking for a clarification?
Where can I find the current information so that I can use to Official Oracle statement as a reference for my Enterprise Practices and Standards document? The individual patch package references you Who is the "you" to which you refer?
are giving me do not state Oracle recommended Best Practice, they only speak to the specific patch package they describe. These do not help me in making an Enterprise statement of Practices and Standards.
I need to close the process out to capture a window of availability for Practices and Standards approval.
Be our guest.
Do we What do you mean "we", Kemosabi?
have any Best Practice document about PSU patches available for customers?This is a very confusing posting, but overall it looks like you are under the impression that this forum is some kind of channel for communicating back to Oracle Crop anything that happens to be on your mind about their corporate web site and/or policies and practices. Please be advised that this forum is simply a platform provided BY Oracle Corp as a peer operated user support group. No one here is responsible for anything on any Oracle web site. No one here is responsible for any content anywhere in the oracle.com domain, outside of their own personal posting on this forum. In other words, you can complain all you want about Oracle's policy, practice, and support, but "there's no one here but us chickens."

How to get latest CPU patch information

Hi Gurus,
Good Morning.
How to get latest CPU patch information for our EBS 11i system, how to get alerts when ever they released CPU patches.

Check the SAWWAN'S Excellent previous post regarding developer patches , this post will give you entire information about Developer patches.
Re: how to find the developer version
Re: Developer 6i patches
Check this metalink notes , hope this helps.
Note: 466890.1 - Script to find Apache, Java, Jinitiator, Forms version and JVM details for Oracle E-Business Suite 11i
Note: 392793.1 - How to Obtain Oracle Forms Version in Oracle Applications 11i from Command Line
Edited by: Amigo on Dec 22, 2010 9:20 AM
Edited by: Amigo on Dec 22, 2010 9:21 AM
Edited by: Amigo on Dec 22, 2010 9:26 AM

CPU Patch Project

This is the project i have been assigned need suggestion, queris to check CPU,(qualified DBs), Road map...etc, any other suggestion
PHASE I
1) Identify all the existing oracle versions across the board for the preparation of cpu patch ===> you can logon to many servers and find out or contact the individual DBA to do it for you or ask India team to help you.
2) Identify the oracle versions qualified for cpu patch on non-prod env for the preparation of cpu patch
3) Identify the oracle versions need to be upgraded for applying the cpu patch on non-prod env for the preparation of cpu patch
4) Identify the oracle versions qualified for cpu patch on prod env for the preparation of cpu patch
5) Identify the oracle versions need to be upgraded for applying the cpu patch on prod env for the preparation of cpu patch
PHASE II
6)Check with the customer if we can test/install the cpu patch on the lab server & upgrade/cpu patch if we get the approval
7) Work with the customer to get an outage on non-prod qualified databases and schedule the change window for cpu patch
8) Work with the customer to get an outage on prod qualified databases and schedule the change window for cpu patch
9) Work with the customer to upgrade the oracle versions if the application is compatible with the upgraded version of oracle
10) If the customer provides acceptance for the upgrade, the databases will be upgraded and the cpu patch will be installed by the DBAs with in a maintenance window.

See also the Oracle On Demand Best Practices Critical Patch Update white paper which is a good reference document on CPU patching project.
However it seems that since July 2007, CPU patch will now also include many bug fixing for non security issues which might change application behaviour and raise the question about application testing needed. For example,
4711525 - PARSING BITMAPPED PLANS IS 3X TIMES MORE COSTLY
4712638 - ORA-00600 [15160] ORA-7445[KKOGBRO]
4722645 - ORA-7445 ON COMPLEX QUERY
There are 319 fixes in 6079588 (10.2.0.2 for Linux) but only 19 security fixes according to http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujul2007.html#AppendixA.
Message was edited by:
Pierre Forstmann
Message was edited by:
Pierre Forstmann

Why OPatch 1.0.0.0.57 needed to apply july2007 CPU patch on oracle 9.2?

what could be the reason to upgrade OPatch utility from older to 1.0.0.0.57 for applying July2007 CPU patch on 9.2

One of the things about CPUs from now on - they will use a new OPatch 'Napply' capability. See Note:438314.1

Oct 2011 cpu patch for database on solaris

Hi All,
I have query regarding oct 2011 cpu patch
OS:SOLARIS 5.10,sun4u sparc SUNW, Netra-T12 release update 10
RDBMS:10G 64bit
am looking for latest cpu patch can any one provide the patch number
thanks in advance

Moderator Action:
Already asked in the Database forum:
oct 2011 cpu patch for database on solaris
... and already answered in that same database forum thread.
Locking.
Edit:
In the context of this thread, "cpu" refers to Critical Patch Update (CPU)
such as this , which was found in about 20 seconds using the search function on the Oracle home page.
Edited by: rukbat on Jan 3, 2012 2:01 PM

Oracle10g CPU patch

Hello, I need some more explanation about oracle cpu patch.
here is the DB i am using...
Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bi
PL/SQL Release 10.2.0.4.0 - Production
CORE 10.2.0.4.0 Production
TNS for Solaris: Version 10.2.0.4.0 - Production
NLSRTL Version 10.2.0.4.0 - Production
It seems like, they are applying oracle cpu patch for this DB. What is CPU patch? What is the purpose the CPU patch? I googled and not very clear. Any help is highly appreciated.

Hi,
Just FYI.. Oracle releases CPU patches every quarter and recommends to apply these patches ASAP. And CPU patches are always cumulative. So Qtr 4 patch will contain all cpu patches related before for the version.
Regards

Listener not stoping while apply CPU(patch)

Any body know the effect if i dont stop listener while apply CPU(Patch), i dont want to stop listener which is serving 30more dbs also....

You are heading for a train wreck.
If the CPU is going to patch the listener code (did you read the docs to see if it is?) then it is going to affect all 30 instances.
But then 30 instances on a single server is, by definition, a train wreck waiting to happen.
If you are the junior DBA I'd suggest you talk to the senior DBA immediately. If you are the only DBA it is time you either called in a consultant or had a long talk with management about the concept of consolidation as you are presiding over lunacy.

About CPU patches

Similar Messages

Maybe you are looking for