Critical: Oracle Critical Patch Update Advisory - April 2015

Hi,
I have 11.2.0.3 RDBMS for one of my client. not using OJVM. In this case should i be worried to apply this CPU?
Any view point will be great help to me in understanding. Thanks in advance.
Some of the fixes are listed here under this patch set:
http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixDB
Regards
Bhullar

Hi,
you cannot apply the CPU and the PSU, the PSU has additional important fixes in addition to the same security related fixes inside the CPU patch,
this means you will have to choose between i and ii (recommended: ii) and the others can be applied together.
greetings,
Harm ten Napel
Edited by: hnapel on Jan 29, 2013 6:40 AM

Similar Messages

  • Critical Patch Update Advisory - June 2011

    In the Oracle Java SE Risk Matrix table below, the Supported Versions column for CVE-2011-0869 says "6 Update 26 and before",
    Shouldn't this say ""6 Update 25 and before"?
    Oracle Java SE Critical Patch Update Advisory - June 2011
    http://www.oracle.com/technetwork/topics/security/javacpujune2011-313339.html
    Thanks .

    The links on the page lead to
    https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=1263374.1
    which is a Oracle support site and you need your metalink login credentials to be able to access this.
    I have successfully navigated to the Oracle support site with my CSI and am able to initiate the download.

  • Oracle Critical Patch Update Advisory - January 2013

    Hi all,
    11.2.0.3
    Oracle Critical Patch Update - January 2013
    I am confused about CPU, PSU, SPU, USP. I am reading the docs and it seems they are same thing being rambled?
    Which of them is the most important to apply?
    Thanks,
    PetraK

    Thanks gotti and fahd
    I already ask the support and he gave me docs to follow. But the more I am confused with lots of added process.
    Can you validate if the process is correct? My Goal is just to comply with our IT Sec Auditor to apply the latest patch. The auditor does not even know what is the name of the patch as long as it the current updates. So I think he is referring to PSU or SPU or CPU.
    This is the process I got from support:
    1 Appy Oracle Database Patch Set Update (11.2.0.3.8)
        1.1 Download and install latest RDA and run and send the output.
        1.2 Download and install latest OPatch and list the current inventory.
        1.3 Check java version
        1.4 Check and Resolve PSU conflict
        1.5 Backup the current OracleHome as "root"
        1.6 Stop Listener, EM, and all DB Instances
        1.7 Apply PSU
        1.8 Resolve errors if any.
    End.
    So It seems I only need to apply PSU? which is 11.2.0.3.8?

  • Oracle Critical Patch Update Advisory - January 2011

    Hello
    I would like to install the critical update patch January 2011 located at
    http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html#PIN
    However, I found that the links that I required and mostly (Oracle Database 10g Release 2, versions 10.2.0.3, 10.2.0.4, 10.2.0.5)
    are dead (503 Service Unavailable)
    Where can I download the patch??
    Thanks
    Neon

    The links on the page lead to
    https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=1263374.1
    which is a Oracle support site and you need your metalink login credentials to be able to access this.
    I have successfully navigated to the Oracle support site with my CSI and am able to initiate the download.

  • Oracle Critical Patch Update for Oracle Database 10g Release 10.2.0.3.0

    Hi,
    The [ Oracle Critical Patch Update for April 2012 was released on April 17th, 2012|http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html] , wherein it was stated that below list versions will get affected.
    Oracle Database 10g Release 2, versions 10.2.0.3, 10.2.0.4, 10.2.0.5
    Currently I am using
    BANNER
    Oracle Database 10g Release 10.2.0.3.0 - 64bit Production
    Can anyone tell me, difference between
    Oracle Database 10g Release 2, versions 10.2.0.3 with Oracle Database 10g Release 10.2.0.3.0
    I am much concerned whether to apply patch for 10.2.0.3.0, wherein the affected version is Oracle Database 10g Release 2, versions 10.2.0.3
    Thanks,
    Sam

    user12983673 wrote:
    Can anyone tell me, difference between
    Oracle Database 10g Release 2, versions 10.2.0.3 with Oracle Database 10g Release 10.2.0.3.0There is no difference -- you use version 10.2.0.3 which is affected by last CPU.

  • Oracle's October Critical Patch Update – OBIEE vuln CVE-2009-1990

    [October’s Oracle Critical Patch Update Advisory|http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2009.html] has been released. There are two vulnerabilities (CVE-2009-1999, CVE-2009-1990) listed for OBIEE, one of which needs patching.
    Details: http://rnm1978.wordpress.com/2009/10/21/obiee-vuln-cv-2009-1990/

    Hi,
    1. if update the latest one "Jan2013" patch is OK? if not, what sequence should I appy to, and which patches are they.No,
    10.2.0.3 on Windows (exclude Itanium), January 2009 is final version.
    2. Which patch ID should I download with for this upgrade.7631958(Jan2009, Intl Based 64-bit CPU)
    3. Do I have to upgrade the 10.2.0.3 to 10.2.0.5 for those patch to working?If you want to apply Jan2013, You have to upgrade to 10.2.0.5.
    Regards,

  • Oracle Critical Patch Update  - July 2008

    Hi All,
    How I can get the information about bug fixed in Oracle Critical Patch Update - July 2008?
    or send me any link...
    Thanks..

    Well, it all depends on which specific release you are talking about. CPU's are provided for Oracle 9iR2 (9.2.0.8.0) up to the latest available oracle version. They are also available for other non RDBMS oracle products.
    If you want to get information about CPU's you may take a look at this reference: --> Oracle Critical Patch Update Advisory - July 2008, from this point on you can drill down to find out information about your specific oracle version.
    This information is publicly available and up to this point you don't need a support contract to review this information. Support contracts are required when you plan to download the specific patch pointed by the CPU document, and it depends not only on the Oracle release, but also on the particular OS platform.
    ~ Madrid
    http://hrivera99.blogspot.com

  • Cannot Download July 2012 Critical Patch Update for JRockit

    All,
    I am trying to download:
    "Oracle Critical Patch Update Advisory - July 2012", particularly for JRockit. I keep running into what seems to be a database issue on Oracle's side.
    The July 2012 Patch informational notes are at:
    http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
    And I am trying to download the Fusion Middleware patch (as JRockit is included in Fusion Middleware, it seems like).
    I go to download from the following URL, as stated in the July Patch Release:
    https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=1455387.1
    and receive:
    Failure of server APACHE bridge:
    No backend server available for connection: timed out after 10 seconds or idempotent set to OFF.
    Appreciate any help.
    -Shanti

    963860 wrote:
    All,
    I am trying to download:
    "Oracle Critical Patch Update Advisory - July 2012", particularly for JRockit. I keep running into what seems to be a database issue on Oracle's side.
    The July 2012 Patch informational notes are at:
    http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
    And I am trying to download the Fusion Middleware patch (as JRockit is included in Fusion Middleware, it seems like).
    I go to download from the following URL, as stated in the July Patch Release:
    https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=1455387.1
    and receive:
    Failure of server APACHE bridge:
    No backend server available for connection: timed out after 10 seconds or idempotent set to OFF.
    ---------I can access https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=1455387.1 with no issues.
    You can access the same link through MOS website https://support.oracle.com -- If you have a valid username/password and CSI number, search for "Doc ID: 1455387.1" and you should be able to see the list of patches in this doc and download it.
    Thanks,
    Hussein

  • Oracle Critical Patch Update April 2008

    Yesterday I have got email from oracle regarding CPU patch availablity of 2008. Just curious where we can get the exact details for that patch...? which bugs is fixed ? What's the correct number for any OS ? Is there any metrics available for that ? I have not get enough information on Metalink.

    Please, please, please, please, follow the links provided in the mail for your product!! (http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuapr2008.html)
    You would have hit note 552248.1 on Metalink.
    Did you read it?
    Within 2 seconds I can see various matrices of patch numbers.
    As the CPU is provided by Metalink, why don't you submit a SR with your concerns?
    Sybrand Bakker
    Senior Oracle DBA

  • Critical patch update for Oracle 10g As 10.1.0.3

    Hi,
    I am facing some security vulnerabilities regarding apache in Oracle 10g applcation server.
    could you please suggest critical patch update for this version.
    Thanks in advance.
    Regards,
    Sathya

    Hi,
    Check below security update from oracle. Check your product in list.
    http://www.oracle.com/technetwork/topics/security/alerts-086861.html
    Thanks,
    JD

  • Oracle database 9.2.0.4 Critical Patch Update

    Hi,
    is oracle database 9.2.0.4 running on Windows still supported for critical patch updates? I went through the supported list in Critical Patch Update October 2006 but there was no reference to Oracle database 9.2.0.4. Oracle Premier Support for Oracle Database 9.2 expires in July 2007 - shouldn't this be included?
    Thanks

    So why aren't versions 9.2.0.1/2/3/4 included in the
    Critical Patch Update?9.2.0.5 is not listed either, neither were they listed in the July 2006 CPU.
    My guess is that the versions no longer fall under one of the items I listed earlier. You can file an SR with Oracle to get the exact reason.

  • Oracle Critical Patch Update July 2009 for Oracle BEA Releases

    Hi All,
    Researching in metalink about CPU's for WLS 9.1 I found Oracle Support Note #835668.1. Table 9 of this document
    lists minimum product requirements for WebLogic server.
    According to this table WLS 9.1 should have a minimum version of 9.2MP3.
    I am confident that WLS 9.1 and WLS 9.2 are completely different WLS versions and there is no upgrade path from WLS 9.1 to WLS 9.2.
    Is this table misprinted or is it required to replace all WLS 9.1 installations with WLS 9.2 installations?
    What is this table trying to indicate?
    Please assist.
    It would be very helpful.
    Thanks.

    Oracle Critical Patch Update fix a list of bugs , oracle will release CPU in every three months interval.
    you need to click the link which oracle has sent.
    then choose your database version===then select the patch number===then on metalink download the patch
    with patch there is read me file which tell you how to apply the patch on the database.
    Thanks
    Regards,
    Taj

  • Oracle Critical Patch Update - CPUJul2010

    Based on Oracle documentation 'Oracle® Database Server Version 10.2.0.4 Patch 38' CPU for Windows 2008 x64, the following requirements need to be met;
    1.1 System Requirements
    The following are the system requirements for this bundle patch:
    * Hardware requirement: AMD64, or Intel Extended memory (EM64T)
    * Operating system requirement:
    o Windows Server 2003, Standard x64 Edition
    o Windows Server 2003, Enterprise x64 Edition
    o Windows Server 2003, Datacenter x64 Edition
    o Windows Server 2003 R2, Standard x64 Edition
    o Windows Server 2003 R2, Enterprise x64 Edition
    o Windows Server 2003 R2, Datacenter x64 Edition
    o Windows XP Professional x64 Edition
    o Windows Server 2008 Standard x64 Editions
    o Windows Server 2008 Enterprise x64 Editions
    o Windows Server 2008 Data Center x64 Editions
    o Windows Vista with Service Pack 1 or later x64 Edition
    Does the Windows Server 2008 x64 Editions imply that R2 is included? Windows Server 2008 R2 was not included in the previous patch.

    Hi,
    Critical Patch Update July 2010 Patch Availability Document for Oracle Products [ID 1089044.1]
    I think it does not imply.
    Regards,

  • Oracle Critical Patch Update

    Hi All,
    Someone please tell me how importance of Oracle Critical Patch Update ?
    Which is released by oracle at 3 month interval .
    It will be really helpful for me.
    Thanks in advance :)

    Hi;
    Someone please tell me how importance of Oracle Critical Patch Update ?
    Which is released by oracle at 3 month interval .All cover at below link
    http://www.oracle.com/technetwork/topics/security/alerts-086861.html
    Mainly;Critical Patch Updates are the primary means of releasing security fixes for Oracle products to customers with valid support contracts. Its mean it fixes security issue on your Oracle related products for attacks,hacks etc..
    Its important to apply those patches,please check link all infos exist there
    Regard
    Helios

  • Oracle Critical Patch Update July 2009

    Dear Team,
    Oracle has sent us the following patch update
    Oracle Critical Patch Update July 2009
    Please help us to understand the need of applying the patch.
    Many thanks in advance
    Aj

    Oracle Critical Patch Update fix a list of bugs , oracle will release CPU in every three months interval.
    you need to click the link which oracle has sent.
    then choose your database version===then select the patch number===then on metalink download the patch
    with patch there is read me file which tell you how to apply the patch on the database.
    Thanks
    Regards,
    Taj

Maybe you are looking for

  • Print Too Small from Photoshop CS4 with HP 8500 All In One Printer

    I'm running Windows XP with CS4 and latest patches and drivers.  When I print an image to my HP 8500 All in one printer, the printout is too small.  Instead of a centered 4 x 6 image on the page I get a 1 x 1-1/4 inch small print of the image in the

  • How do I remove dozens of "protected system" fonts from my computer?

    There are dozens of foreign language fonts installed on my system, (how they got there, I don't know, but I suspect the Cloud programs installed them at some time or another) and all they do is clutter up the selection list when I try to select a fon

  • How do I export full conversations in apple mail

    Sometimes conversations in Mail provide a quick diary of business and personal events.  Is there anyway to export a bunch of emails, all at once, into a pdf or text file?

  • Fonts problem with reports 10 : arialMT

    Hi, we have a lot of reports made in 6i and know translated in 10g (9.0.4). We used the Arial and Arial bold fonts and in client /server 6i mode they are Ok but now, with 10g and using the desformat=PDF the result is not good and tere are any differe

  • Select Statement Blocking Delete Operation

    Hi Experts, In a Single table am trying to do delete operation but it has been blocked by simple select query. Database setting : Read Committed Snapshot already set to ON for that database. Any Idea why SELECT blocking DELETE. FYI : Before Select st