Critical Patch Updates ("CPU") - practical experience?

I'm trying to gauge whether users in this forum have any practical war stories from applying Oracle Critical Patch Updates. Particularly as it relates to Identity Management and/or Fusion Middleware products.
In my experience, simply navigating to find the correct patch binaries is a half-day event. Not to mention ensuring you meet all necessary pre-requisites and that those pre-requisites are in-sync with the Certification Matrices.
Anyone had an issue after applying patches? Had to rollback?
I realize this is somewhat open-ended, but looking to get some advice before proceeding.

Hi Jim;
I belive you should use Critical Patch Updates and Security Alerts and check those patch avaliable by using Opatch utulity and from ad_bugs table
http://www.oracle.com/technetwork/topics/security/alerts-086861.html
Also see:
Oracle Critical Patch Update October 2010 Documentation Map [ID 1210564.1]
Oracle E-Business Suite Releases 11i and 12 Critical Patch Update Knowledge Document (October 2010) [ID 987438.1]
How to check which Techstack patchsets have been applied [ID 390864.1]
Regard
Helios

Similar Messages

Hi Critical Patch Update CPU January,

Our oracle database 10.2.0.4 on windows 32 bit ...I need to apply the patch from Critical Patch Update (CPU) January 2012,
I searched in metalink I am unable to find the exact patch no.Please anybody tell me patch no...I am sorry about my english

Hi Srini,
I have on more question ,We have rman full backup in tape,Application people (Infractrure manager) have doubt backup is valid or not,,,So He is telling create one database restore the full backup.
Backup contais.
datafiles ,controlfiles,spfile
Please let me know What are the steps I need to take,
May continue this link or create one new thread
Edited by: Pavan L on Mar 14, 2012 11:36 PM

Does each quarterly Critical Patch Update (CPU) release has to go hand in hand (in sync) with specific desktop JRE updates in order to benefit (partially or fully) from the security fixes , or does each JRE update is independent of the CPU release?

Since the inceptions to the release dates to Java 7 posted at their website, we're curious if there is a dependency between the CPU update and the JRE client releases? Please explain and/or suggest the best practice approach to keeping both environments in sync. Thank you.

Since the inceptions to the release dates to Java 7 posted at their website, we're curious if there is a dependency between the CPU update and the JRE client releases? Please explain and/or suggest the best practice approach to keeping both environments in sync. Thank you.

Need help with Critical Patch Update (CPU)

Dear experts, can someone please help me with below 2 questions :
1. Is there a way that I can find out what is included in the CPU's for application and database? I tried going through readme files but they do not list details of what part of the application will be impacted by these patches. The reason I need this information so that we can narrow our scope for testing. Otherwise we have to test all the modules and that is a pain :-(
2. Can we only apply either database or application CPU's or do we always need to apply them together?
Any help will be greatly appreciated .

1. Is there a way that I can find out what is included in the CPU's for application and database? I tried going through readme files but they do not list details of what part of the application will be impacted by these patches. The reason I need this information so that we can narrow our scope for testing. Otherwise we have to test all the modules and that is a pain :-(The patch README file should tell you what fixes/bugs are included in the patch. If there is no enough information in the README files, then search MOS website and go through the docs. If you still need more details then you may need to log a SR.
2. Can we only apply either database or application CPU's or do we always need to apply them together?You do not have to apply the patches on all tier nodes, and you can apply them either on the database tier node then on the application tier node (or vice versa).
Thanks,
Hussein

Critical Patch Update (CPU) for ASM Instance

I'm getting ready to apply the Jul2007 CPU to my Oracle 10.2.0.2.0 RAC database. The correct patch number is 6079588.
However, I don't see any info that tells me if I can / should apply the CPU to the underlying ASM instance too. I would think I could, but I would expect to see some documentation that directs me to patch the ASM before / after the database, etc., etc.
I must be missing this info in the docs somewhere, can you offer any info or documentation reference please?

You didn't specify the OS platform you are working with, so for this example I will assume the solaris spacr64. At the readme file there are two sections:
3.3.3 Patch Installation Instructions for a RAC Environment
3.3.4 Post Installation Instructions for a RAC Environment
On the same document it states:
"Ensure that you review all patches to apply, and the releases that those patches apply to before you start installing any patches. Ensure that all tiers are at the correct release level before starting to apply CPU patches.
If assistance is required from Oracle Global Product Support, then provide complete information for the products being patched. Because you are administering one Oracle product, one Oracle home at a time for its one CPUJul2007 patch, there is generally one Support Service Request per Oracle home."
CPU's should be applied against all Oracle Homes, ASM instance has its own RDBMS Oracle Home. But if in doubt about your particular platform, raise an SR.
~ Madrid

ALERT - Support for Java Critical Patch Update

ALERT - Support for Java Critical Patch Update
On October 15th, Java released a critical patch update (CPU) which will require download and upgrade to the Java Runtime Environment (JRE) release – 1.7.0_45. If upgrading the JRE to this release, the P6 module (also known as Web Access) of the P6 EPPM product line and the Contract Management product, which utilize LiveConnect applets in the browser, will start generating one or more prompts. To remediate these prompts for the P6 EPPM Web Access module and the Contract Management product, Oracle Primavera will be releasing fixpacks. Until fixpacks become available, you can use the following workaround to suppress these prompts: Select the 'Allow' Prompt or 'Yes' prompt for successful loading of applets. Note: This prompt will occur for each applet.
For more information, please refer to the following KM Documents in My Oracle Support.
For P6 (Web Access), refer to KM Document ID 1591925.1
For Contract Management, refer to KM Document ID 1592535.1

I found the answer to my own question. For any newbies out there, if you create an account with Oracle, that is not enough to download patches. You have to have an Oracle Customer Support Identifier associated with your account. Once you have a CSI that you obtain through your employer who has paid for support or through some other means, you then can go into My Oracle Support and enter a request to be added to the given CSI. That request goes into a pending state until the administrator of the CSI grants you privileges to download patches. (NOTE: You might have to bug someone within your organization to get this to happen.) For me, once I was given the privilege, the link worked as it should.

OCS Critical Patch Update July

We're having a heck of a time figuring out which patches are needed for our recent installation of OCS version 10.1.2.0.0. We've not patched since install, and are required to apply the July Critical Patch Update (CPU). Anyone out there has done this latest patch? If so, could you share what patches were used for a 2 server (infra/mid) install. Thank you.

This is what I've found so far about the patch situation
We are running OCS 10.1.2.0.0 which comes with Database version 10.1.0.4.2 and Application Server 10.1.2.0.2
To fully apply the July OCS CPU, it's requiered to upgrade OCS to 10.1.2.3 (this is a list of about 13 individual patches). Then resume patching for July CPU 93 - 5 patches). A total of about 18 - 20 patches. Does this seem ridiculous to anyone else?

Critical Patch update vs Patch Bundle

Our servers runs on sun solaris sparc 64 bit and oracle 11.1.0.7 with CPUAPR2009 patches. We found the latest patch bundle 8658581.8 would resolve many of our issues.
I need to know whether the patch bundle would be bundled with the CPU patches since the patch bundle was released after the CPU patches and I have also read a document which says
Are Recommended Patches Cumulative ?
Yes, Recommended Patches are cumulative for a given target configuration. The latest Recommended Patches for a given target configuration will contain all fixes included in the previous ones.
This patch bundle is a recommended patches.
Please help me in resolving the patches to apply. And please provide me more clarity on Thanks
Regards,
Ilan

Hi Ilan,
I'm not sure if you received the answer you were seeking elsewhere.
As you may know, the n-Apply Critical Patch Updates (CPU's) are released on a quarterly basis and are cumulative in nature. The CPUs are released to address security vulnerabilities, primarily. At the time of their release, they each contain groupings of security fixes (called molecules). Each of these molecules contain multiple related patches and the molecules can be applied independently of one another.
Now, that being said - there is a chance that Oracle could release interim (i.e. one-off) patches, merge patches, and patch bundles in between CPU releases and in between patchset releases. The fixes provided in these interim patches, merge patches, and patch bundles should also be included in subsequent CPU releases (if they address security vulnerabilities) and in subsequent patchset releases (if you're not already on the terminal patchset release for your version).
As for the CPU releases: prior to the patch installation, the following checks are performed for each molecule patch being installed:
- Conflicts (patch to be installed contains modules which conflict with existing patch in the Oracle Home)
- Subsets (patch to be installed is a subset of an existing patch in the Oracle Home)
- Duplicates (patch to be installed is the same as an existing patch in the Oracle Home)
If you encounter a situation where the particular patch to be installed is in conflict with one or more other patches which have previously been applied to the same Oracle Home, then you will need to file a Service Request with Oracle Global Customer Support to request a merge patch to merge the conflicting patches together into one individual patch.
If the particular patch to be installed is a subset or duplicate of an existing patch in the Oracle Home, then there is no need for the patch to be applied to the Oracle Home as the fix it contains already exists there. For this reason, the CPU installation instructions from the README.html direct you to run OPatch with the -skip_subset and -skip_duplicate options to skip attempting to apply any patches that are subset or duplicate of existing patches in the Oracle Home. See the README.html file from the most recent CPU (July - 8534387) for complete details about the CPU, including what molecules of fixes it contains.
I hope this information helps clarify things for you rather than confuse you further. Keep in mind I am responding with a general answer which should address your question. I have not reviewed 8658581 specifically to see what this patch addresses.
-RT

Error when try to install CPU - Critical Patch Update with OPatch

Hello gurus,
I´m faccing with a problem... After I update the patch set to 10.2.0.4 and install the interim patches for Linux X86_64 now I´m trying to import/install the Oracle Critical Patch Update - Oracle CPU patch!!
I´m trying to import it with OPatch, and I already update this OPatch tool for the last version even before proceeding with installation of Oracle CPU!
I've tried to import it by two methods. The first I tried to apply as described in the relevant README file inside of CPU patch directory, and I used in this case the following command:
redhatsap:orajmd> unzip p9119226_10204_<platform>.zip
redhatsap:orajmd> cd 9119226
redhatsap:orajmd> opatch napply -skip_subset -skip_duplicate
opatch: Command not found
After that previous error, I tried again but now with other method that is described in note 839182 (Installing patches using OPatch) with the following command:
redhatsap:orajmd> cd 9119226
redhatsap:orajmd> $ORACLE_HOME/OPatch/opatch apply
========================================================
GENERIC OPATCH VERSION - FOR USE IN SAP ENVIRONMENT ONLY
========================================================
Invoking OPatch 10.2.0.4.5
Oracle Interim Patch Installer version 10.2.0.4.5
Copyright (c) 2008, Oracle Corporation. All rights reserved.
Oracle Home       : /oracle/JMD/102_64
Central Inventory : /oracle/oraInventory
   from           : /etc/oraInst.loc
OPatch version    : 10.2.0.4.5
OUI version       : 10.2.0.4.0
OUI location      : /oracle/JMD/102_64/oui
Log file location : /oracle/JMD/102_64/cfgtoollogs/opatch/opatch2010-04-19_01-49-17AM.log
Patch history file: /oracle/JMD/102_64/cfgtoollogs/opatch/opatch_history.txt
Failed to load the patch object. Possible causes are:
The specified path is not an interim Patch shiphome
Meta-data files are missing from the patch area
Patch location = /oracle/JMD/102_64/9119226
Details = PatchObject constructor: Input file "/oracle/JMD/102_64/9119226/etc/config/actions" or "/oracle/JMD/102_64/9119226/etc/config/inventory" does not exist.
ApplySession failed: PatchObject constructor: Input file "/oracle/JMD/102_64/9119226/etc/config/actions" or "/oracle/JMD/102_64/9119226/etc/config/inventory" does not exist.
System intact, OPatch will not attempt to restore the system
OPatch failed with error code 73
Can you help me please?
Best regards
João Dimas - Portugal

Hello again Joe Bo... and all of others,
I´m with a doubt after installing the CPU patch, which is related to post-installation tasks. I´m in this momment install the SAP System and it was during this installation that sapinst asked me to install the database and all other activities after this installation that are related to the database, for example, the updating of database patches.
At README file in chapter 3.3.2 Post Installation Instructions is described the following:
After installing the patch, perform the following actions:
1.Load modified .sql files into the database, as explained in Section 3.3.2.1.
2.Recompile views in the database, if necessary, as explained in Section 3.3.2.2.
In this momment, as you certainly know, I still don´t have a database because the sap system isn´t yet totally installed (I´m in phase 8 of sapinst wizard).
I only have to do this "Post Installation Tasks" when I have a database, this database will be created after that phase 8 - so now I don´t need to perform the post steps... am I right?
Thanks in advance,
João Dimas - Portugal

Cpu critical patch update

Please
Can anyone tell me, what is the function of a cpu patch?
I have installed 2 patches one for 9 an other for 9i, but I do not understand why this patch must/should be installed.

Perhaps the description of CPU can help you understand what is CPU about.
Oracle Critical Patch Update - April 2007
Description
A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required (because of interdependencies) by those security patches. Due to the threat posed by a successful attack, Oracle strongly recommends that fixes are applied as soon as possible. This Critical Patch Update contains 36 new security fixes across all products.
also here
http://www.oracle.com/technology/deploy/security/alerts.htm

CPU (CRITICAL PATCH UPDATE) AND PATCHSET

when a new bug is fixed in 9.2.0.4, will the bug be addressed in next patch set (9.2.0.5) as well as in the new cpu (CRITICAL PATCH UPDATE) which is going to be released shortly.
kumaresh...

first, there is no cpu for 9204, and also no cpu for 9205 (except for some antique platforms).
second, a cpu does not fix bugs like patchset does. only critical and security related bugs are fixed, so if you have a non-security related bug, you will need a patchset not a cpu.
finally, yes, the patchsets are cumulative. 9205 includes all 9204 fixes
The CPUs are cumulatives too, the fixes for Jan2006 are included in Apr2007. But CPUAPR2007/9205 does not contain the 9206,9207,9208 bug fixes
and the cpu april is already released for most platforms
Message was edited by:
Laurent Schneider

Not receiving Critical Patch Update E-mail Notification Alerts - used to

I am no longer receiving the Security Alert Email Notifications for the Oracle Critical Patch Updates. Also, the instructions on the OTN web page are no longer valid (no longer a Opt-In category). I have the box checked to receive the emails, but for some reason they are no longer being sent. I have checked my "Junk and SPAM" mail folders - not there and they are not being filtered by our company email program. I have a non-technical SR opened with support, but they are not understanding the issue.
On the
http://www.oracle.com/technetwork/topics/security/alerts-086861.html#SecurityAlerts page, there is a link (Click here for instructions on how to configure email notifications.) which takes you to
http://www.oracle.com/technetwork/topics/security/securityemail-090378.html
This is the URL that we go to to setup or subscribe to Critical Patch Update Alert emails
Subscribe to Critical Patch Update Alert E-mails
When going to my account, there is no longer the the Opt-in to Oracle Communications section
I have
Subscription Center (Under Subscription Center is)
Oracle Technology News (under Oracle Technology News is a checkbox for)
Oracle Security Alerts - Get the latest Security Alerts issued by Oracle as they become available.
This box is checked and has been for a very long time, but stopped getting the emails. I am not the only DBA who is having this issue where I work - several others have the same problem and it looks like there are more DBA's in the Oracle Community who have same problem
Thanks for any assistance.

Also see this related thread - Please help me to get my quarterly CPU alert notification send to me
Srini

Critical Patch Updates

Hi,
I have some doubts reg CPU patches.In CPU patches we need to apply three patches
1)Oracle E-Business Suite Database Homes
ebiz-database
2)Oracle E-Business Suite Oracle Fusion Middleware and Developer Suite Homes
Forms and reports homes i mean...10.1.2 and 10.1.3(web server) homes
3)Patches to Apply to Oracle E-Business Suite
In this i dont understand for which component in ebiz?
Regards

Hi,
1)Oracle E-Business Suite Database Homes
ebiz-databaseThese patches are usually applied using opatch to the $RDBMS_ORACLE_HOME.
2)Oracle E-Business Suite Oracle Fusion Middleware and Developer Suite Homes
Forms and reports homes i mean...10.1.2 and 10.1.3(web server) homesThese patches are applied to $8.0.6_ORACLE_HOME and $IAS_ORACLE_HOME
3)Patches to Apply to Oracle E-Business SuiteThese patches are applied using adpatch.
Please make sure you follow the steps in the patches README files before applying any of the patches.
In this i dont understand for which component in ebiz?All the components above are included in Oracle E-Business Suite installation.
Note: 880170.1 - Oracle E-Business Suite Releases 11i and 12 Critical Patch Update Knowledge Document (October 2009)
Regards,
Hussein

Oracle Critical Patch Update Advisory - January 2013

Hi all,
11.2.0.3
Oracle Critical Patch Update - January 2013
I am confused about CPU, PSU, SPU, USP. I am reading the docs and it seems they are same thing being rambled?
Which of them is the most important to apply?
Thanks,
PetraK

Thanks gotti and fahd
I already ask the support and he gave me docs to follow. But the more I am confused with lots of added process.
Can you validate if the process is correct? My Goal is just to comply with our IT Sec Auditor to apply the latest patch. The auditor does not even know what is the name of the patch as long as it the current updates. So I think he is referring to PSU or SPU or CPU.
This is the process I got from support:
1 Appy Oracle Database Patch Set Update (11.2.0.3.8)
    1.1 Download and install latest RDA and run and send the output.
    1.2 Download and install latest OPatch and list the current inventory.
    1.3 Check java version
    1.4 Check and Resolve PSU conflict
    1.5 Backup the current OracleHome as "root"
    1.6 Stop Listener, EM, and all DB Instances
    1.7 Apply PSU
    1.8 Resolve errors if any.
End.
So It seems I only need to apply PSU? which is 11.2.0.3.8?

Best way to initiate Critical Patch Update

Dear All
We are planning to apply Critical Patch Update July 2011, on our (PROD)Live Environment
DB version : 11.1.0.7
Appl Release : R12.1.1
SHARED APPL_TOP : Yes
PCP : Yes
Load Balancer Software/Hardware : Software
DMZ Server : Yes
I have referred Oracle E-Business Suite Releases 11i and 12 Critical Patch Update Knowledge Document (July 2011) (Doc ID 1315202.1)
this is taking good amount of time and many questions have popped up
1) Is it necessary to apply CPU for Oracle E- Business Suite when your business is running fine
2) In the above metalink doc i came across oracle fusion middle ware , please correct me is it appl tech stack component or is appl tech also call what is the difference between Oracle Fusion Middleware and Oracle Apps Tech Stack
3) Will CPU Patch boost the performance (as purging of log files )
Order of Applying :
1st Db --
a) how to apply ???
b) i have never applied any db patch till now :( ..
c) what is the estimated time to apply the patch
2nd Apps - how to apply ??
1) is it same as traditional one using adpatch utility
2) Will this create any INVALID Object
Please shed some light on this i have many questions on CPU kindly suggest me how to initiate
- Chetan

Hi;
For us we are applying database CPU patch on our system.It depends which mean you can also can apply someother CPU patch for your system.
We are planning to apply Critical Patch Update July 2011, on our (PROD)Live Environment Why July 2011? Any specific reason?
Already October 2011 has been published which is also cover july 2011
I have referred Oracle E-Business Suite Releases 11i and 12 Critical Patch Update Knowledge Document (July 2011) (Doc ID 1315202.1)
Also see:
http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html
Part:
Oracle E-Business Suite Release 12, versions 12.0.6, 12.1.2, 12.1.3 and Oracle Database 11g Release 1, version 11.1.0.7
1) Is it necessary to apply CPU for Oracle E- Business Suite when your business is running fineYes its strongly recommended
2) In the above metalink doc i came across oracle fusion middle ware , please correct me is it appl tech stack component or is appl tech also call what is the difference between Oracle Fusion Middleware and Oracle Apps Tech StackUse below links for appstier
Also see:
http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html
Part:
Oracle E-Business Suite Release 12, versions 12.0.6, 12.1.2, 12.1.3 and Oracle Database 11g Release 1, version 11.1.0.7
3) Will CPU Patch boost the performance (as purging of log files )Check know issue part
Order of Applying :
1st Db --
a) how to apply ???
b) i have never applied any db patch till now :( ..
c) what is the estimated time to apply the patch Check readme part of patch be sure you have valid oracle_home and datafile backup
>
2nd Apps - how to apply ??
1) is it same as traditional one using adpatch utility
2) Will this create any INVALID ObjectCheck readme part of patch be sure you have valid oracle_home and datafile backup
regard
Helios

Critical Patch Updates ("CPU") - practical experience?

Similar Messages

Maybe you are looking for