甲骨文发布2012 4月数据库安全补丁Critical Patch Update April 2012

根据最新的Update to Oracle Security Alert January 2012,Oracle Database的最新Critical Patch Updates将会在17 April 2012发布,即下个月的中旬, 包括针对版本11.2.0.3的 CPU、PSU补丁将 Release,因为版本10gR2已经实际进入Sustaining Support(Oracle Database 10.2 has now transitioned from Premier Support to Sustaining Support. Our records indicate the CSI used for this SR does not have Extended Support so you are only eligible to Sustaining Support. Sustaining Support includes assistance with service requests, on a commercially reasonable basis, 24 hours per day, 7 days a week. It does not include new program updates, fixes, security alerts and critical update. The support policy details can be accessed at “http://www.oracle.com/us/support/library/057419.pdf “. If you need Extended Support please contact your account team.),

 

所以我们有理由相信这次的CPU更新将不会再针对10gR2的Last Patchset 10.2.0.5 ,让11gR2来得更激烈一些吧!

 

Critical Patch Updates

Critical Patch Updates are the primary means of releasing security fixes for Oracle products to customers with valid support contracts. They are released on the Tuesday closest to the 17th day of January, April, July and October. The next four dates are:

  • 17 April 2012
  • 17 July 2012
  • 16 October 2012
  • 15 January 2013

For Oracle Java SE Critical Patch Updates, the next three dates are:

  • 12 June 2012
  • 16 October 2012
  • 19 February 2013

 

 

Patch Set Update and Critical Patch Update April 2012 Availability Document 介绍了 2012 April CPU 相关的Database 补丁:

 

Patch Availability for Oracle Database 11.2.0.3

Product Home Patch Advisory Number Comments
Oracle Database home Database 11.2.0.3 CPU Patch 13632717, orDatabase 11.2.0.3.2 PSU Patch 13696216, orGI 11.2.0.3.2 PSU Patch 13696251, orDatabase patch for Exadata (April 2012 – 11.2.0.3.5) Patch 13734832, or

Quarterly Full Stack download for Exadata (April 2012) Patch 13839416, or

Microsoft Windows (32-Bit) Bundle Patch 13885388, or

Microsoft Windows x64 (64-Bit) Bundle Patch 13885389

CVE-2012-0552, CVE-2012-0534, CVE-2012-0527, CVE-2012-0526, CVE-2012-0525
Oracle Database home Patch 13705478 CVE-2011-5035 OC4J 10.1.3.4 one-off patch (Special OPatch needed, see README)

 

Patch Availability for Oracle Database 11.2.0.2

Product Home Patch Advisory Number Comments
Oracle Database home Database 11.2.0.2 CPU Patch 13632725, orDatabase 11.2.0.2.6 PSU Patch 13696224, orGI 11.2.0.2.6 PSU Patch 13696242, orExadata Database Recommended Patch 16 Patch 13837673, or

Microsoft Windows (32-Bit) Bundle Patch 13697073, or

Microsoft Windows x64 (64-Bit) Bundle Patch 13697074

CVE-2012-0552, CVE-2012-0534, CVE-2012-0527, CVE-2012-0526, CVE-2012-0525, CVE-2012-0520, CVE-2012-0512, CVE-2012-0519 (Windows only)
Oracle Database home Patch 13705478 CVE-2011-5035 OC4J 10.1.3.4 one-off patch (Special OPatch needed, see README)

 

Patch Availability for Oracle Database 11.1.0.7

Product Home Patch Advisory Number Comments
Oracle Database home Database 11.1.0.7 CPU Patch 13632731, orDatabase 11.1.0.7.11 PSU Patch 13621679, orMicrosoft Windows (32-Bit) Bundle Patch 13715809, orMicrosoft Windows x64 (64-Bit) Bundle Patch 13715810 CVE-2012-0552, CVE-2012-0534, CVE-2012-0528, CVE-2012-0527, CVE-2012-0526, CVE-2012-0525, CVE-2012-0520, CVE-2012-0512, CVE-2012-0511, CVE-2012-0510
Oracle Database home Patch 13705478 CVE-2011-5035 OC4J 10.1.3.3 one-off patch
Oracle CRS home CRS 11.1.0.7.7 PSU Patch 11724953 Released April 2011 Non-security content only
Oracle Database home Patch 9288120 Released April 2011 Database UIXFor Oracle Secure Enterprise Search 11.1.2.x installations, follow the instructions given in MOS note Note 1359600.1.
Oracle Database home Patch 10073948 Released April 2011 Enterprise Manager Database Control UIXNot applicable to Oracle Secure Enterprise Search 11.1.2.x
Oracle Database home Patch 11738232 Released April 2011 Warehouse BuilderNot applicable to Oracle Secure Enterprise Search 11.1.2.x

 

Patch Availability for Oracle Database 10.2.0.5

Product Home Patch Advisory Number Comments
Oracle Database home Database 10.2.0.5 CPU Patch 13632738, orDatabase 10.2.0.5.7 PSU Patch 13632743, orMicrosoft Windows (32-Bit) Bundle Patch 13654814, orMicrosoft Windows x64 (64-Bit) Bundle Patch 13654815, or

Microsoft Windows Itanium (64-Bit) Patch 13870404

CVE-2012-0552, CVE-2012-0534, CVE-2012-0528, CVE-2012-0527, CVE-2012-0526, CVE-2012-0520
Oracle Database home Patch 13705478 CVE-2011-5035 OC4J 10.1.3.4 one-off patch (Special OPatch needed, see README)
Oracle Database home Patch 12536181 Released July 2011 Enterprise Manager Database ControlFor HP-UX PA-RISC and HP-UX Itanium platforms only
Oracle Warehouse Builder home Patch 11738172 Released April 2011 Warehouse Builder
Oracle CRS home CRS 10.2.0.5.2 PSU Patch 9952245 Released January 2011 Non-security content only

 

Patch Availability for Oracle Database 10.2.0.4
Product Home Patch Advisory Number Comments
Oracle Database home Database 10.2.0.4 CPU Patch 12879926, orDatabase 10.2.0.4.12 PSU Patch 12879933 CVE-2012-0552, CVE-2012-0534, CVE-2012-0528, CVE-2012-0527, CVE-2012-0526, CVE-2012-0520, CVE-2012-0511, CVE-2012-0510 10.2.0.4.4 PSU Patch 9352164 is base PSU for 10.2.0.4.12 Overlay PSU
Oracle Database home Patch 13705478 CVE-2011-5035 OC4J 9.0.4.1 one-off patch
Oracle Database home Patch 12536167 Released July 2011 Enterprise Manager Database ControlFor HP-UX PA-RISC and HP-UX Itanium platforms only
Oracle Database home Patch 12758181 Released July 2011 Enterprise Manager Database Control UIX
Oracle Database home Patch 9249369 Released April 2011 Database UIX
Oracle Database home Patch 9273865 Released April 2011 iSqlPlus UIX
Oracle CRS home CRS 10.2.0.4.4 PSU Patch 9294403 Released April 2010 Non-security content only

 

比较令人惊讶的是虽然 版本10gR2已经实际进入Sustaining Support周期, 但是这一次仍释出了 10.2.0.5上最新的 PSU 10.2.0.5.7 ,和10.2.0.4上的 10.2.0.4.12 PSU。

 

虽然10.2.0.5.7当前的状态要求 有  Extended Support CSI 才能下载, 但是实际在几个月前 10.2.0.5.5 release时也如现在一般,但是10.2.0.5.6 又变成了只要有一般的premier support账号即可下载, 谁能摸得清Oracle Patch Support team的脾气呢?

 

 

PSU 10.2.0.5.7 修复的bug fix 包括:

 

PSU 10.2.0.5.7 contains all fixes previously released in PSU 10.2.0.5.6 and the following new fixes:

Buffer Cache Management

8822531 – TAKING AWR SNAP HANGS

12748240 – FIX FOR BUG 12748240

12780098 – FIX FOR BUG 12780098

13503598 – FIX FOR BUG 13503598

Generic

7115910 – ORA-7445 [KQLCHG] INTERMITTENTLY HIT DURING DBMS_REFRESH.REFRESH OF MV

9689310 – SPORADIC BUNCHES OF ORA-600 [17059]

9694101 – SHARED CURSOR TEST HANGS DUE TO ‘CURSOR: PIN S WAIT ON X’

11858315 – ORA-600 [17147] ORA-600 [KGHALO4] WITH PATCH 10277915 APPLIED

High Availability

9448311 – BOTH INSTANCE DOWN WITH ORA-00481.

11674645 – GCS DRM FREEZE IN ENTER SERVER MODE WAIT EVENT

13554409 – FIX FOR BUG 13554409

Oracle Space Management

6076890 – ORA-600[16622] WHEN SYNONYM IS SPECIFIED IN DBMS_SPACE.UNSUSED_SPACE

11790175 – SMON SPINS ON REDO APPLICATION ON BASICFILE LOBS

Oracle Virtual Operating System Services

10326338 – HIGH RESMGR:CPU QUANTUM WITH APPSQOS_PLAN IN PLACE

Server Manageability

13257247 – POPULATING WRH$_TEMPSTATXS MAY BE SLOW DUE TO INEFFICIENT QUERY EXECUTION PLAN

11gR2新特性:LMHB Lock Manager Heart Beat后台进程

LMHB是11gR2中新引入的后台进程,官方文档的介绍是Global Cache/Enqueue Service Heartbeat Monitor,Monitor the heartbeat of LMON, LMD, and LMSn processes,LMHB monitors LMON, LMD, and LMSn processes to ensure they are running normally without blocking or spinning。  Database and ASM instances, Oracle RAC

该进程负责监控LMON、LMD、LMSn等RAC关键的后台进程,保证这些background process不被阻塞或spin。 LMHB可能是Lock Manager Heartbeat的缩写。

 

我们来看一下该进程的trace跟踪文件以便了解其功能:

按照 100s -> 80s -> 100s -> 80s的间隔监控并输出一次LMSn、LCKn、LMON、LMD等进程的状态及wait chain,由kjfmGCR_HBCheckAll函数控制

 

*** 2012-02-03 00:03:10.066
==============================
LMS0 (ospid: 17247) has not moved for 77 sec (1328245389.1328245312)
kjfmGCR_HBCheckAll: LMS0 (ospid: 17247) has status 2
  : waiting for event 'gcs remote message' for 0 secs with wait_id 15327.
  ===[ Wait Chain ]===
  Wait chain is empty.
kjgcr_Main: KJGCR_ACTION - id 5

*** 2012-02-03 00:04:50.091
==============================
LMS0 (ospid: 17247) has not moved for 88 sec (1328245489.1328245401)
kjfmGCR_HBCheckAll: LMS0 (ospid: 17247) has status 2
  : waiting for event 'gcs remote message' for 0 secs with wait_id 24546.
  ===[ Wait Chain ]===
  Wait chain is empty.
kjgcr_Main: KJGCR_ACTION - id 5

 LCK0 (ospid: 2662) has not moved for 95 sec (1309746735.1309746640)
  kjfmGCR_HBCheckAll: LCK0 (ospid: 2662) has status 6
  ==================================================
  === LCK0 (ospid: 2662) Heartbeat Report
  ==================================================
  LCK0 (ospid: 2662) has no heartbeats for 95 sec. (threshold 70 sec)
   : Not in wait; last wait ended 80 secs ago.
   : last wait_id 2317342 at 'libcache interrupt action by LCK'.
  ..
  .
   Session Wait History:
       elapsed time of 1 min 20 sec since last wait
    0: waited for 'libcache interrupt action by LCK'
  ..

 

大约每3分钟输出一次TOP CPU User,CPU使用率高的session信息:

 

*** 2012-02-03 00:05:30.102
kjgcr_SlaveReqBegin: message queued to slave
kjgcr_Main: KJGCR_ACTION - id 3
CPU is high.  Top oracle users listed below:
     Session           Serial         CPU
      29                 7             0
     156                23             0
       3                 1             0
       4                 1             0
       5                 1             0

*** 2012-02-03 00:08:30.147
kjgcr_SlaveReqBegin: message queued to slave
kjgcr_Main: KJGCR_ACTION - id 3
CPU is high.  Top oracle users listed below:
     Session           Serial         CPU
      29                 7             0
     156                23             0
       3                 1             0
       4                 1             0
       5                 1             0

 

如果发现有session的CPU使用率极高,根据内部算法可能会激活 资源计划(resource management plan) ,甚至于kill 进程:

 

*** 2012-02-03 00:08:35.149
kjgcr_Main: Reset called for action high cpu, identify users, count 0

*** 2012-02-03 00:08:35.149
kjgcr_Main: Reset called for action high cpu, kill users, count 0

*** 2012-02-03 00:08:35.149
kjgcr_Main: Reset called for action high cpu, activate RM plan, count 0

*** 2012-02-03 00:08:35.149
kjgcr_Main: Reset called for action high cpu, set BG into RT, count 0

 

从11.2.0.2 开始LMHB开始使用slave 进程GCRn来完成实际的任务(Global Conflict Resolution Slave Process Performs synchronous tasks on behalf of LMHB GCRn processes are transient slaves that are started and stopped as required by LMHB to perform synchronous or resource intensive tasks.) LMHB会控制GCRn进程的启停,以便使用多个GCRn完成同步和缓解资源紧张的任务(例如kill进程)。

可以看到实际LMHB调用的多为kjgcr或kjfmGCR开头的内部函数,GCR意为Global Conflict Resolution。

 

kjgcr_Main: KJGCR_ACTION – id 5

GCR 进程的trace :

*** 2011-11-28 02:42:44.466
kjgcr_SlaveActionCbk: Callback failed, check trace
Dumping GCR slave work message at 0x96b81fc0
GCR layer information: type = 1, index = 0
Unformatted dump of ksv layer header:

 

LMHB进程的出现是为了提高RAC的可用性,特别是在资源紧张的环境中他会主动地去尝试kill掉最耗费资源的服务进程,以保证LMS等关键的RAC后台进程能正常工作; 因为该进程定期监控LMS、LMON等后台进程的等待事件及session的CPU使用率等信息,所以该LMHB进程的跟踪日志也可能成为诊断RAC故障的之一,这是11.2.0.1以来RAC一个潜在的新特性和增强。

相关隐式参数

_lm_hb_callstack_collect_time hb diagnostic call stack collection time in seconds — 5s
_lm_hb_disable_check_list list of process names to be disabled in heartbeat check — none

 

11.2是第一个引入LMHB进程的版本,所以并不是太成熟,在实际过程中对于资源使用率很高的RAC系统而言LMHB可能会帮一些倒忙,若你确实遇到了相关的问题或者是在11.2 RAC上碰到了一些诡异的现象,那么可以关注一下以下这些MOS Note:

 

ORA-29770 LMHB Terminates Instance as LMON Waited for Control File IO or LIBRARY CACHE or ROW CACHE Event for too Long [ID 1197674.1]
Bug 8888434 – LMHB crashes the instance with LMON waiting on controlfile read [ID 8888434.8]
Bug 11890804 – LMHB crashes instance with ORA-29770 after long “control file sequential read” waits [ID 11890804.8]
Bug 11890804: LMHB TERMINATE INSTANCE WHEN LMON WAIT CHANGE FROM CF READ AFTER 60 SEC
Bug 13467673: CSS MISSCOUNT AND ALL ASM DOWN WITH ORA-29770 BY LMHB
Bug 13390052: KJFMGCR_HBCHECKALL MESSAGES ARE CONTINUOUSLY LOGGED IN LMHB TRACE FILE.
Bug 13322797: LMHB TERMINATES THE INSTANCE DUE TO ERROR 29770
Bug 11827088 – Latch ‘gc element’ contention, LMHB terminates the instance [ID 11827088.8]

Bug 13061883: LMHB IS TERMINATING THE INSTANCE DURING SHUTDOWN IMMEDIATE
Bug 12564133 – ORA-600[1433] in LMHB process during RAC reconfiguration [ID 12564133.8]
Bug 12886605: ESSC: LMHB TERMINATE INSTANCE DUE TO 29770 – LMON WAIT ENQ: AM – DISK OFFLINE
Bug 12757321: LMHB TERMINATING THE INSTANCE DUE TO ERROR 29770
Bug 10296263: LMHB (OSPID: 15872): TERMINATING THE INSTANCE DUE TO ERROR 29770
Bug 11899415: ORA-29771 AND LMHB (OSPID: XXXX) KILLS USER (OSPID: XXX
Bug 10431752: SINGLE NODE RAC: LMHB TERMINATES INSTANCE DUE TO 29770
Bug 11656856: LMHB (OSPID: 27701): TERMINATING THE INSTANCE DUE TO ERROR 29770
Bug 10411143: INSTANCE CRASHES WITH IPC SEND TIMEOUT AND LMHB TERMINATES WITH ORA-29770
Bug 11704041: DATABASE INSTANCE CRASH BY LMHB PROCESS
Bug 10412545: ORA-29770 LMHB TERMINATE INSTANCE DUE TO VARIOUS LONG CSS WAIT
Bug 10147827: INSTANCE TERMINATED BY LMHB WITH ERROR ORA-29770
Bug 10016974: ORA-29770 LMD IS HUNG FOR MORE THAN 70 SECONDS AND LMHB TERMINATE INSTANCE
Bug 9376100: LMHB TERMINATING INSTANCE DUE ERROR 29770

 

 

Oracle数据库版本10.2实际进入扩展支持Extended Support周期

不了解Oracle软件Lifetime Support支持生命周期的朋友可以直接参阅Expect Lifetime Support http://www.oracle.com/us/support/lifetime-support/index.html页面。

 

我们知道Oracle软件的支持周期可以分为Premier Support 和 Extended Support, 在Premier Support 时期只要是购买了Oracle PS服务的用户都可以申请 创建或合并补丁(create or merge patch) , 当支持周期进入Extended Support后 只有购买了扩展服务包的用户才能申请 新的补丁。

 

具体各Release 版本的Database的Support 周期如下:

 

 

 

如上图所见 版本10.2的Premier Support 已在2010年过期,实际10.2已经过度到了Extended Support时期,且会在2013年进入Sustainging Support。

但是实际My Oracle Support并没有在2010年立即限制仅购买Premier Support的用户下载July 2010 后发布的一些PSU/CPU补丁,例如Patch 12419392: DATABASE PSU 10.2.0.5.4 (INCLUDES CPUJUL2011) 是在2011年7月发布的 , 仅购买了Premier Support的用户同样可以下载该Patch set Update。

因为Oracle没有立即限制扩展补丁的下载,所以我们有时候都已经忘记了 已经过度到Extended Support周期了。

但是最近发布的:

  • 10.2.0.5 上的
    • Patch 12827745: DATABASE PSU 10.2.0.5.5 (INCLUDES CPUOCT2011)
    • Patch 12828105: CPUOCT2011 DATABASE 10.2.0.5
  • 10.2.0.4 上
    • Patch 12827778: DATABASE PSU 10.2.0.4.10 (REQUIRES PRE-REQUISITE 10.2.0.4.4|INCLUDES CPUOCT2011)
    • Patch 12828112: CPUOCT2011 DATABASE 10.2.0.4

 

即 自2011 OCT以后发布的10.2上的 PSU和CPU补丁都要求 用户具有相关的Patch权限方能下载 , 见下图:

 

 

注意上图中的”You do not have privileges to download Extended Support patches. See How Patches and Updates Entitlements Works for more information.  learn more privileges “信息。

 

Mos 文档<How Patches and Updates Entitlement Works> 叙述了用户如何查询自身在MOS上的权限以及如何获得相关Patch的下载权限。

 

显然Oracle此举是一举三得的:

  1. 驱动坚持仅购买PS服务的用户尽快升级他们的数据库到仍在Premier Support 周期内的版本,如11.1和11.2
  2. 一方面在于向普通购买PS服务的用户表明购买Extended Support服务包的重要性
  3. 另一方面也是向已经购买ES服务的用户的一种示好姿态, 毕竟要给人家VIP的体验嘛!

 

关于更多Oracle database Lifetime policy 的信息见下文:

 

Oracle's Life Time Support Policy (LSP)
=======================================
Oracle Database Softwares are not desupported, they get in Sustaining Support with deliverable
restrictions as described below.

To help our customer to drive their business success, Oracle has put in place the Lifetime Support Policy (LSP).

Since Database version 8.1.7 there are 3 Stages of support:

1. Premier Support - provides maintenance and support of Oracle Database for five years from
their general availability date.

Premier Support include:
Major product and technology releases.
Technical support.
Updates, fixes, security alerts, data fixes, and critical patch updates.
Tax, legal, and regulatory updates.
Upgrade scripts.
Certification with most new third-party products/versions.
Certification with most new Oracle products

2. Extended Support - provides with an extra three years of support for specific Oracle releases
for an additional fee.

Extended Support include:
Major product and technology releases.
Technical support.
Updates, fixes, security alerts, data fixes, and critical patch updates.
Tax, legal, and regulatory updates.
Upgrade scripts.
Certification with most existing third-party products/versions.
Certification with most existing Oracle products
Extended Support may not include certification with some new third-party products/versions.

3. Sustaining Support - provide access to support tools, knowledgebase, pre-existing fixes,
and assistance from technical support experts.

Sustaining Support include:
Major product and technology releases.
Technical support.
Access to OracleMetaLink, POINT Support Portal, AVT Support Portal, Global Support Portal System.
Fixes, updates, and critical patch updates created during the Premier Support stage.
Upgrade scripts created during the Premier Support stage.
Assistance with service requests, on a commercially reasonable basis, 24 hours per day, 7 days a week
Sustaining Support does not include
New updates, fixes, security alerts, data fixes, and critical patch updates.
New upgrade scripts.
Certification with new third-party products/versions.
Certification with new Oracle products.
24 hour commitment and response guidelines for Severity 1 service requests as defined in the Severity
Level section of “Technical Support Policies“ document.

-> Premier and Extended Support dates for all current releases (e.g. 10.2 or 11.2) can be found in the
"http://www.oracle.com/us/support/library/lifetime-support-technology-069183.pdf#page=7"

-> Note that although 10.2 Extended Support begins in August 2010, Extended Support fees have been
waived for the first year for all customers
For more information please see :

Oracle Technical Support Policy document
http://www.oracle.com/us/support/library/057419.pdf#page=7
section 6.

Note 1293180.1 Database Patch Set 10.2.0.4 patching extended to July 31, 2011

-> Patches created from August 2011 will be be Entitled under "Software Extended Support"

-> For downloading the Patches under Extended Support you would need Extended Support "EXS" CSI.
An Extended Support contract is required to receive patches once a release enters the Extended Support phase.

For more information, please see :

Note 757445.1 FAQ for Products in Extended Support

Lifetime Support Policy covering Technology Products for dates of Extended Support
"http://www.oracle.com/us/support/library/lifetime-support-technology-069183.pdf#page=7".

-> NOTE if you have a Valid CSI for Extended "EXS" Support, would request you to please create
a Non-Tech SR to verify the same as mentioned in
Note 757445.1 FAQ for Products in Extended Support

Usefull References :
====================
Note 742060.1 Release Schedule of Current Database Releases
Note 209768.1 Database, FMW, EM Grid Control, and OCS Software Error Correction Support Policy
Note 1293180.1 Database Patch Set 10.2.0.4 patching extended to July 31, 2011
Note 757445.1 FAQ for Products in Extended Support
Note 161818.1 Oracle Server (RDBMS) Releases Support Status Summary
Note 821748.1 What is the Lifetime Support Policy For Captovation Capture / Oracle Document Capture Products?

Lifetime Support Policy
http://www.oracle.com/us/support/library/lifetime-support-technology-069183.pdf

Oracle Software Technical Support Policies
http://www.oracle.com/us/support/library/057419.pdf

Patch Set Update and Critical Patch Update October 2011补丁更新发布了

2011年10月的CPU在18日发布了,Database相关的PSU/CPU包括:

最新发布的11.2.0.3 patchset补丁集这次没有出psu/cpu

11.2.0.2: CPU Patch 12828071, or DB PSU Patch 12827726, or GI PSU Patch 12827731, or Exadata BP12 Patch 12982245

注意Oracle Database 11.2.0.1 的Final Patch 是在July 2011,也就是说11.2.0.1 不会有新的psu/cpu了,包括Exadata的patch。

11.1.0.7 : CPU Patch 12828097, or PSU Patch 12827740

10.2.0.5 : CPU Patch 12828105, or PSU Patch 12827745

10.2.0.4 : CPU Patch 12828112, or PSU Patch 12827778

Oracle Database 11.2.0.3

Oracle Database 11.2.0.3 patch set includes all announced vulnerabilities; there are no Critical Patch Updates for October 2011.

Oracle Database 11.2.0.2

Patch Information for Oracle Database 11.2.0.2

Patch Information 11.2.0.2 Comments
Final patch July 2012
CPU On-Request platforms HP-UX PA RISCIBM: Linux on System Z
PSU On-Request platforms 32-bit client-only platforms except Linux x86

 

Patch Availability for Oracle Database 11.2.0.2

 

Oracle Database 11.2.0.2 UNIX Microsoft Windows (32-Bit) Microsoft Windows x64 (64-bit) Advisory Number Comments
Oracle Database home CPU Patch 12828071, or DB PSU Patch 12827726, or GI PSU Patch 12827731, or Exadata BP12 Patch 12982245 Bundle Patch 13038787 Bundle Patch 13038788 CVE-2011-3511, CVE-2011-3512

Oracle Database 11.1.0.7

Patch Information for Oracle Database 11.1.0.7

 

Patch Information 11.1.0.7 Comments
Final patch July 2015
CPU On-Request platforms
PSU On-Request platforms

 

Patch Availability for Oracle Database 11.1.0.7

 

Oracle Database 11.1.0.7 UNIX Microsoft Windows (32-Bit) Microsoft Windows x64 (64-Bit) Advisory Number Comments
Oracle Database home CPU Patch 12828097, or PSU Patch 12827740 Bundle Patch 12914915 Bundle Patch 12914916 CVE-2011-2301, CVE-2011-3511, CVE-2011-3512, CVE-2011-2322 (Windows only)
Oracle Database home Patch 9288120 Patch 9288120 Patch 9288120 Released April 2011 Database UIXFor Oracle Secure Enterprise Search 11.1.2.x installations, follow the instructions given in MOS note Note 1359600.1.
Oracle Database home Patch 10073948 Patch 10073948 Patch 10073948 Released April 2011 Enterprise Manager Database Control UIXNot applicable to Oracle Secure Enterprise Search 11.1.2.x
Oracle Database home Patch 11738232 Patch 11738232 Patch 11738232 Released April 2011 Warehouse BuilderNot applicable to Oracle Secure Enterprise Search 11.1.2.x

Oracle Database 10.2.0.5

Patch Information for Oracle Database 10.2.0.5

 

Patch Information 10.2.0.5 Comments
Final patch July 2013
CPU On-Request platforms HP-UX PA-RISCIBM: Linux on System ZLinux ItaniumLinux on POWER
PSU On-Request platforms

 

Patch Availability for Oracle Database 10.2.0.5

Oracle Database 10.2.0.5 UNIX Microsoft Windows (32-Bit) Microsoft Windows Itanium (64-Bit) Microsoft Windows x64 (64-Bit) Advisory Number Comments
Oracle Database home CPU Patch 12828105, or PSU Patch 12827745 Bundle Patch 12914911 NA Bundle Patch 12914913 CVE-2011-3511, CVE-2011-3512
Oracle Database home Patch 12536181 NA NA NA Released July 2011 Enterprise Manager Database ControlFor HP-UX PA-RISC and HP-UX Itanium platforms only
Oracle Database home Patch 11738172 Patch 11738172 Patch 11738172 Patch 11738172 Released April 2011 Warehouse Builder

Oracle Database 10.2.0.4

 

Patch Information for Oracle Database 10.2.0.4

 

Patch Information 10.2.0.4 Comments
Final patch July 2013 for Oracle Solaris x86 (32-bit) and Apple Mac OS XFinal patch date pending release of 10.2.0.5 patch set for HP Open VMS-Alpha and VMS-ItaniumJuly 2011 for all other platforms
CPU On-Request platforms Apple Mac OS XHP Open VMS-AlphaHP Open VMS-ItaniumOracle Solaris x86 (32-bit)
PSU On-Request platforms

Patch Availability for Oracle Database 10.2.0.4

 

Oracle Database 10.2.0.4 UNIX Advisory Number Comments
Oracle Database home CPU Patch 12828112, or PSU Patch 12827778 CVE-2011-2301, CVE-2011-3511, CVE-2011-3512
Oracle Database home Patch 12536167 Released July 2011 Enterprise Manager Database ControlFor HP-UX PA-RISC and HP-UX Itanium platforms only
Oracle Database home Patch 9249369 Released April 2011 Database UIX
Oracle Database home Patch 12758181 Released July 2011 Enterprise Manager Database Control UIX
Oracle Database home Patch 9273865 Released April 2011 iSqlPlus UIX

 Oracle Database 10.2.0.3

 

 Patch Information for Oracle Database 10.2.0.3
Patch Information 10.2.0.3 Comments
Final patch IBM zSeries (z/OS) only
CPU On-Request platforms

 

Patch Availability for Oracle Database 10.2.0.3

 

Component IBM zSeries (z/OS) Advisory Number Comments
Oracle Database home CPU Patch 12828128 CVE-2011-2301, CVE-2011-3511, CVE-2011-3512

Oracle Database 10.1.0.5

 

Patch Information for Oracle Database 10.1.0.5

 

Patch Information 10.1.0.5 Comments
Final patch January 2012
CPU On-Request platforms Apple Mac OS XHP Open VMS AlphaHP Tru64 UNIXIBM zSeries (z/OS)Linux ItaniumLinux on POWEROracle Solaris x86 (32-bit)

 

Patch Availability for Oracle Database 10.1.0.5

 

Oracle Database 10.1.0.5 UNIX Microsoft Windows (32-Bit) Microsoft Windows Itanium (64-Bit) Advisory Number Comments
Oracle Database home Patch 6640838 Patch 6640838 Patch 6640838 Released October 2010 Oracle Universal Installer
Oracle Database home Patch 11842285 NA NA Released July 2011 Oracle Universal Installer
Oracle Database home CPU Patch 12828135 Bundle Patch 12914905 Bundle Patch 12914906 CVE-2011-2301, CVE-2011-3512
Oracle Database home Patch 12535977 NA NA Released July 2011 Enterprise Manager Database ControlFor HP-UX PA-RISC and HP-UX Itanium platforms only
Oracle Workspace Manager home Patch 7341989 Patch 7341989 Patch 7341989 Released April 2009
Oracle Database home Patch 9249369 Patch 9249369 Patch 9249369 Released April 2011 Database UIX
Oracle Database home Patch 10036362 Patch 10036362 Patch 10036362 Released April 2011 Enterprise Manager Database Control UIX
Oracle Database home Patch 9273888 Patch 9273888 Patch 9273888 Released April 2011 iSqlPlus UIX

 

Patch Set Update Availability for Oracle Database

Oracle Database UNIX Advisory Number Comments
11.2.0.2.4 Database PSU Patch 12827726 See Section 3.1.3.3, “Oracle Database 11.2.0.2”
11.2.0.2.4 Grid Infrastructure PSU Patch 12827731 See Section 3.1.3.3, “Oracle Database 11.2.0.2” Includes CPUOct2011 and 11.2.0.2.4 Database PSUIBM: Linux on System Z and HP-UX PA-RISC are On-Request Platforms for GI PSU 11.2.0.2.4
11.2.0.2 BP12 for Exadata Patch 12982245 See Section 3.1.3.3, “Oracle Database 11.2.0.2” Includes CPUOct2011 and 11.2.0.2.4 Database and Grid Infrastructure PSU fixes for Exadata
11.1.0.7.9 Database PSU Patch 12827740 See Section 3.1.3.4, “Oracle Database 11.1.0.7”
11.1.0.7.7 CRS PSU Patch 11724953 Released April 2011
10.2.0.5.5 Database PSU Patch 12827745 See Section 3.1.3.5, “Oracle Database 10.2.0.5”
10.2.0.5.2 CRS PSU Patch 9952245 Released January 2011 IBM: Linux on System Z, Solaris x86-64 and HP-UX PA-RISC are On-Request Platforms for CRS PSU 10.2.0.5.2
10.2.0.4.10 Database PSU Patch 12827778 See Section 3.1.3.6, “Oracle Database 10.2.0.4” Overlay PSU
10.2.0.4.4 Database PSU Patch 9352164 Released April 2010 Base PSU for 10.2.0.4.10
10.2.0.4.4 CRS PSU Patch 9294403 Released April 2010

Slide:了解Oracle critical patch update

沪ICP备14014813号-2

沪公网安备 31010802001379号