甲骨文发布2012 4月数据库安全补丁Critical Patch Update April 2012

2012/03/30 by Leave a Comment

根据最新的Update to Oracle Security Alert January 2012，Oracle Database的最新Critical Patch Updates将会在17 April 2012发布，即下个月的中旬， 包括针对版本11.2.0.3的 CPU、PSU补丁将 Release，因为版本10gR2已经实际进入Sustaining Support(Oracle Database 10.2 has now transitioned from Premier Support to Sustaining Support. Our records indicate the CSI used for this SR does not have Extended Support so you are only eligible to Sustaining Support. Sustaining Support includes assistance with service requests, on a commercially reasonable basis, 24 hours per day, 7 days a week. It does not include new program updates, fixes, security alerts and critical update. The support policy details can be accessed at “http://www.oracle.com/us/support/library/057419.pdf “. If you need Extended Support please contact your account team.)，

 

所以我们有理由相信这次的CPU更新将不会再针对10gR2的Last Patchset 10.2.0.5 ，让11gR2来得更激烈一些吧！

 

Critical Patch Updates

Critical Patch Updates are the primary means of releasing security fixes for Oracle products to customers with valid support contracts. They are released on the Tuesday closest to the 17th day of January, April, July and October. The next four dates are:

  • 17 April 2012
  • 17 July 2012
  • 16 October 2012
  • 15 January 2013

For Oracle Java SE Critical Patch Updates, the next three dates are:

  • 12 June 2012
  • 16 October 2012
  • 19 February 2013

 

 

Patch Set Update and Critical Patch Update April 2012 Availability Document 介绍了 2012 April CPU 相关的Database 补丁：

 

Patch Availability for Oracle Database 11.2.0.3

Product Home Patch Advisory Number Comments
Oracle Database home Database 11.2.0.3 CPU Patch 13632717, orDatabase 11.2.0.3.2 PSU Patch 13696216, orGI 11.2.0.3.2 PSU Patch 13696251, orDatabase patch for Exadata (April 2012 – 11.2.0.3.5) Patch 13734832, or

Quarterly Full Stack download for Exadata (April 2012) Patch 13839416, or

Microsoft Windows (32-Bit) Bundle Patch 13885388, or

Microsoft Windows x64 (64-Bit) Bundle Patch 13885389

 CVE-2012-0552, CVE-2012-0534, CVE-2012-0527, CVE-2012-0526, CVE-2012-0525
Oracle Database home Patch 13705478 CVE-2011-5035 OC4J 10.1.3.4 one-off patch (Special OPatch needed, see README)

 

Patch Availability for Oracle Database 11.2.0.2

Product Home Patch Advisory Number Comments
Oracle Database home Database 11.2.0.2 CPU Patch 13632725, orDatabase 11.2.0.2.6 PSU Patch 13696224, orGI 11.2.0.2.6 PSU Patch 13696242, orExadata Database Recommended Patch 16 Patch 13837673, or

Microsoft Windows (32-Bit) Bundle Patch 13697073, or

Microsoft Windows x64 (64-Bit) Bundle Patch 13697074

 CVE-2012-0552, CVE-2012-0534, CVE-2012-0527, CVE-2012-0526, CVE-2012-0525, CVE-2012-0520, CVE-2012-0512, CVE-2012-0519 (Windows only)
Oracle Database home Patch 13705478 CVE-2011-5035 OC4J 10.1.3.4 one-off patch (Special OPatch needed, see README)

 

Patch Availability for Oracle Database 11.1.0.7

Product Home Patch Advisory Number Comments
Oracle Database home Database 11.1.0.7 CPU Patch 13632731, orDatabase 11.1.0.7.11 PSU Patch 13621679, orMicrosoft Windows (32-Bit) Bundle Patch 13715809, orMicrosoft Windows x64 (64-Bit) Bundle Patch 13715810 CVE-2012-0552, CVE-2012-0534, CVE-2012-0528, CVE-2012-0527, CVE-2012-0526, CVE-2012-0525, CVE-2012-0520, CVE-2012-0512, CVE-2012-0511, CVE-2012-0510
Oracle Database home Patch 13705478 CVE-2011-5035 OC4J 10.1.3.3 one-off patch
Oracle CRS home CRS 11.1.0.7.7 PSU Patch 11724953 Released April 2011 Non-security content only
Oracle Database home Patch 9288120 Released April 2011 Database UIXFor Oracle Secure Enterprise Search 11.1.2.x installations, follow the instructions given in MOS note Note 1359600.1.
Oracle Database home Patch 10073948 Released April 2011 Enterprise Manager Database Control UIXNot applicable to Oracle Secure Enterprise Search 11.1.2.x
Oracle Database home Patch 11738232 Released April 2011 Warehouse BuilderNot applicable to Oracle Secure Enterprise Search 11.1.2.x

 

Patch Availability for Oracle Database 10.2.0.5

Product Home Patch Advisory Number Comments
Oracle Database home Database 10.2.0.5 CPU Patch 13632738, orDatabase 10.2.0.5.7 PSU Patch 13632743, orMicrosoft Windows (32-Bit) Bundle Patch 13654814, orMicrosoft Windows x64 (64-Bit) Bundle Patch 13654815, or

Microsoft Windows Itanium (64-Bit) Patch 13870404

 CVE-2012-0552, CVE-2012-0534, CVE-2012-0528, CVE-2012-0527, CVE-2012-0526, CVE-2012-0520
Oracle Database home Patch 13705478 CVE-2011-5035 OC4J 10.1.3.4 one-off patch (Special OPatch needed, see README)
Oracle Database home Patch 12536181 Released July 2011 Enterprise Manager Database ControlFor HP-UX PA-RISC and HP-UX Itanium platforms only
Oracle Warehouse Builder home Patch 11738172 Released April 2011 Warehouse Builder
Oracle CRS home CRS 10.2.0.5.2 PSU Patch 9952245 Released January 2011 Non-security content only

 

Patch Availability for Oracle Database 10.2.0.4
Product Home Patch Advisory Number Comments
Oracle Database home Database 10.2.0.4 CPU Patch 12879926, orDatabase 10.2.0.4.12 PSU Patch 12879933 CVE-2012-0552, CVE-2012-0534, CVE-2012-0528, CVE-2012-0527, CVE-2012-0526, CVE-2012-0520, CVE-2012-0511, CVE-2012-0510 10.2.0.4.4 PSU Patch 9352164 is base PSU for 10.2.0.4.12 Overlay PSU
Oracle Database home Patch 13705478 CVE-2011-5035 OC4J 9.0.4.1 one-off patch
Oracle Database home Patch 12536167 Released July 2011 Enterprise Manager Database ControlFor HP-UX PA-RISC and HP-UX Itanium platforms only
Oracle Database home Patch 12758181 Released July 2011 Enterprise Manager Database Control UIX
Oracle Database home Patch 9249369 Released April 2011 Database UIX
Oracle Database home Patch 9273865 Released April 2011 iSqlPlus UIX
Oracle CRS home CRS 10.2.0.4.4 PSU Patch 9294403 Released April 2010 Non-security content only

 

比较令人惊讶的是虽然 版本10gR2已经实际进入Sustaining Support周期， 但是这一次仍释出了 10.2.0.5上最新的 PSU 10.2.0.5.7 ，和10.2.0.4上的 10.2.0.4.12 PSU。

 

虽然10.2.0.5.7当前的状态要求 有  Extended Support CSI 才能下载， 但是实际在几个月前 10.2.0.5.5 release时也如现在一般，但是10.2.0.5.6 又变成了只要有一般的premier support账号即可下载， 谁能摸得清Oracle Patch Support team的脾气呢？

 

 

PSU 10.2.0.5.7 修复的bug fix 包括：

 

PSU 10.2.0.5.7 contains all fixes previously released in PSU 10.2.0.5.6 and the following new fixes:

Buffer Cache Management

8822531 – TAKING AWR SNAP HANGS

12748240 – FIX FOR BUG 12748240

12780098 – FIX FOR BUG 12780098

13503598 – FIX FOR BUG 13503598

Generic

7115910 – ORA-7445 [KQLCHG] INTERMITTENTLY HIT DURING DBMS_REFRESH.REFRESH OF MV

9689310 – SPORADIC BUNCHES OF ORA-600 [17059]

9694101 – SHARED CURSOR TEST HANGS DUE TO ‘CURSOR: PIN S WAIT ON X’

11858315 – ORA-600 [17147] ORA-600 [KGHALO4] WITH PATCH 10277915 APPLIED

High Availability

9448311 – BOTH INSTANCE DOWN WITH ORA-00481.

11674645 – GCS DRM FREEZE IN ENTER SERVER MODE WAIT EVENT

13554409 – FIX FOR BUG 13554409

Oracle Space Management

6076890 – ORA-600[16622] WHEN SYNONYM IS SPECIFIED IN DBMS_SPACE.UNSUSED_SPACE

11790175 – SMON SPINS ON REDO APPLICATION ON BASICFILE LOBS

Oracle Virtual Operating System Services

10326338 – HIGH RESMGR:CPU QUANTUM WITH APPSQOS_PLAN IN PLACE

Server Manageability

13257247 – POPULATING WRH$_TEMPSTATXS MAY BE SLOW DUE TO INEFFICIENT QUERY EXECUTION PLAN

Filed Under: Oracle, Oracle补丁patch Tagged With: ,

Oracle数据库版本10.2实际进入扩展支持Extended Support周期

2011/10/25 by 1 Comment

不了解Oracle软件Lifetime Support支持生命周期的朋友可以直接参阅Expect Lifetime Support http://www.oracle.com/us/support/lifetime-support/index.html页面。

 

我们知道Oracle软件的支持周期可以分为Premier Support 和 Extended Support， 在Premier Support 时期只要是购买了Oracle PS服务的用户都可以申请 创建或合并补丁(create or merge patch) ， 当支持周期进入Extended Support后 只有购买了扩展服务包的用户才能申请 新的补丁。

 

具体各Release 版本的Database的Support 周期如下：

 

 

 

如上图所见 版本10.2的Premier Support 已在2010年过期，实际10.2已经过度到了Extended Support时期，且会在2013年进入Sustainging Support。

但是实际My Oracle Support并没有在2010年立即限制仅购买Premier Support的用户下载July 2010 后发布的一些PSU/CPU补丁，例如Patch 12419392: DATABASE PSU 10.2.0.5.4 (INCLUDES CPUJUL2011) 是在2011年7月发布的 ， 仅购买了Premier Support的用户同样可以下载该Patch set Update。

因为Oracle没有立即限制扩展补丁的下载，所以我们有时候都已经忘记了 已经过度到Extended Support周期了。

但是最近发布的：

  • 10.2.0.5 上的
    • Patch 12827745: DATABASE PSU 10.2.0.5.5 (INCLUDES CPUOCT2011)
    • Patch 12828105: CPUOCT2011 DATABASE 10.2.0.5
  • 10.2.0.4 上
    • Patch 12827778: DATABASE PSU 10.2.0.4.10 (REQUIRES PRE-REQUISITE 10.2.0.4.4|INCLUDES CPUOCT2011)
    • Patch 12828112: CPUOCT2011 DATABASE 10.2.0.4

 

即 自2011 OCT以后发布的10.2上的 PSU和CPU补丁都要求 用户具有相关的Patch权限方能下载 ， 见下图：

 

 

注意上图中的”You do not have privileges to download Extended Support patches. See How Patches and Updates Entitlements Works for more information.  learn more privileges “信息。

 

Mos 文档<How Patches and Updates Entitlement Works> 叙述了用户如何查询自身在MOS上的权限以及如何获得相关Patch的下载权限。

 

显然Oracle此举是一举三得的：

  1. 驱动坚持仅购买PS服务的用户尽快升级他们的数据库到仍在Premier Support 周期内的版本，如11.1和11.2
  2. 一方面在于向普通购买PS服务的用户表明购买Extended Support服务包的重要性
  3. 另一方面也是向已经购买ES服务的用户的一种示好姿态， 毕竟要给人家VIP的体验嘛！

 

关于更多Oracle database Lifetime policy 的信息见下文:

 

Oracle's Life Time Support Policy (LSP)
=======================================
Oracle Database Softwares are not desupported, they get in Sustaining Support with deliverable
restrictions as described below.

To help our customer to drive their business success, Oracle has put in place the Lifetime Support Policy (LSP).

Since Database version 8.1.7 there are 3 Stages of support:

1. Premier Support - provides maintenance and support of Oracle Database for five years from
their general availability date.

Premier Support include:
Major product and technology releases.
Technical support.
Updates, fixes, security alerts, data fixes, and critical patch updates.
Tax, legal, and regulatory updates.
Upgrade scripts.
Certification with most new third-party products/versions.
Certification with most new Oracle products

2. Extended Support - provides with an extra three years of support for specific Oracle releases
for an additional fee.

Extended Support include:
Major product and technology releases.
Technical support.
Updates, fixes, security alerts, data fixes, and critical patch updates.
Tax, legal, and regulatory updates.
Upgrade scripts.
Certification with most existing third-party products/versions.
Certification with most existing Oracle products
Extended Support may not include certification with some new third-party products/versions.

3. Sustaining Support - provide access to support tools, knowledgebase, pre-existing fixes,
and assistance from technical support experts.

Sustaining Support include:
Major product and technology releases.
Technical support.
Access to OracleMetaLink, POINT Support Portal, AVT Support Portal, Global Support Portal System.
Fixes, updates, and critical patch updates created during the Premier Support stage.
Upgrade scripts created during the Premier Support stage.
Assistance with service requests, on a commercially reasonable basis, 24 hours per day, 7 days a week
Sustaining Support does not include
New updates, fixes, security alerts, data fixes, and critical patch updates.
New upgrade scripts.
Certification with new third-party products/versions.
Certification with new Oracle products.
24 hour commitment and response guidelines for Severity 1 service requests as defined in the Severity
Level section of “Technical Support Policies“ document.

-> Premier and Extended Support dates for all current releases (e.g. 10.2 or 11.2) can be found in the
"http://www.oracle.com/us/support/library/lifetime-support-technology-069183.pdf#page=7"

-> Note that although 10.2 Extended Support begins in August 2010, Extended Support fees have been
waived for the first year for all customers
For more information please see :

Oracle Technical Support Policy document
http://www.oracle.com/us/support/library/057419.pdf#page=7
section 6.

Note 1293180.1 Database Patch Set 10.2.0.4 patching extended to July 31, 2011

-> Patches created from August 2011 will be be Entitled under "Software Extended Support"

-> For downloading the Patches under Extended Support you would need Extended Support "EXS" CSI.
An Extended Support contract is required to receive patches once a release enters the Extended Support phase.

For more information, please see :

Note 757445.1 FAQ for Products in Extended Support

Lifetime Support Policy covering Technology Products for dates of Extended Support
"http://www.oracle.com/us/support/library/lifetime-support-technology-069183.pdf#page=7".

-> NOTE if you have a Valid CSI for Extended "EXS" Support, would request you to please create
a Non-Tech SR to verify the same as mentioned in
Note 757445.1 FAQ for Products in Extended Support

Usefull References :
====================
Note 742060.1 Release Schedule of Current Database Releases
Note 209768.1 Database, FMW, EM Grid Control, and OCS Software Error Correction Support Policy
Note 1293180.1 Database Patch Set 10.2.0.4 patching extended to July 31, 2011
Note 757445.1 FAQ for Products in Extended Support
Note 161818.1 Oracle Server (RDBMS) Releases Support Status Summary
Note 821748.1 What is the Lifetime Support Policy For Captovation Capture / Oracle Document Capture Products?

Lifetime Support Policy
http://www.oracle.com/us/support/library/lifetime-support-technology-069183.pdf

Oracle Software Technical Support Policies
http://www.oracle.com/us/support/library/057419.pdf
Filed Under: Oracle, Oracle补丁patch Tagged With: , , , ,

Patch Set Update and Critical Patch Update October 2011补丁更新发布了

2011/10/20 by 1 Comment

2011年10月的CPU在18日发布了，Database相关的PSU/CPU包括:

最新发布的11.2.0.3 patchset补丁集这次没有出psu/cpu

11.2.0.2: CPU Patch 12828071, or DB PSU Patch 12827726, or GI PSU Patch 12827731, or Exadata BP12 Patch 12982245

注意Oracle Database 11.2.0.1 的Final Patch 是在July 2011，也就是说11.2.0.1 不会有新的psu/cpu了，包括Exadata的patch。

11.1.0.7 : CPU Patch 12828097, or PSU Patch 12827740

10.2.0.5 : CPU Patch 12828105, or PSU Patch 12827745

10.2.0.4 : CPU Patch 12828112, or PSU Patch 12827778

Oracle Database 11.2.0.3

Oracle Database 11.2.0.3 patch set includes all announced vulnerabilities; there are no Critical Patch Updates for October 2011.

Oracle Database 11.2.0.2

Patch Information for Oracle Database 11.2.0.2

Patch Information 11.2.0.2 Comments
Final patch July 2012
CPU On-Request platforms HP-UX PA RISCIBM: Linux on System Z
PSU On-Request platforms 32-bit client-only platforms except Linux x86

 

Patch Availability for Oracle Database 11.2.0.2

 

Oracle Database 11.2.0.2 UNIX Microsoft Windows (32-Bit) Microsoft Windows x64 (64-bit) Advisory Number Comments
Oracle Database home CPU Patch 12828071, or DB PSU Patch 12827726, or GI PSU Patch 12827731, or Exadata BP12 Patch 12982245 Bundle Patch 13038787 Bundle Patch 13038788 CVE-2011-3511, CVE-2011-3512

Oracle Database 11.1.0.7

Patch Information for Oracle Database 11.1.0.7

 

Patch Information 11.1.0.7 Comments
Final patch July 2015
CPU On-Request platforms –
PSU On-Request platforms –

 

Patch Availability for Oracle Database 11.1.0.7

 

Oracle Database 11.1.0.7 UNIX Microsoft Windows (32-Bit) Microsoft Windows x64 (64-Bit) Advisory Number Comments
Oracle Database home CPU Patch 12828097, or PSU Patch 12827740 Bundle Patch 12914915 Bundle Patch 12914916 CVE-2011-2301, CVE-2011-3511, CVE-2011-3512, CVE-2011-2322 (Windows only)
Oracle Database home Patch 9288120 Patch 9288120 Patch 9288120 Released April 2011 Database UIXFor Oracle Secure Enterprise Search 11.1.2.x installations, follow the instructions given in MOS note Note 1359600.1.
Oracle Database home Patch 10073948 Patch 10073948 Patch 10073948 Released April 2011 Enterprise Manager Database Control UIXNot applicable to Oracle Secure Enterprise Search 11.1.2.x
Oracle Database home Patch 11738232 Patch 11738232 Patch 11738232 Released April 2011 Warehouse BuilderNot applicable to Oracle Secure Enterprise Search 11.1.2.x

Oracle Database 10.2.0.5

Patch Information for Oracle Database 10.2.0.5

 

Patch Information 10.2.0.5 Comments
Final patch July 2013
CPU On-Request platforms HP-UX PA-RISCIBM: Linux on System ZLinux ItaniumLinux on POWER
PSU On-Request platforms –

 

Patch Availability for Oracle Database 10.2.0.5

Oracle Database 10.2.0.5 UNIX Microsoft Windows (32-Bit) Microsoft Windows Itanium (64-Bit) Microsoft Windows x64 (64-Bit) Advisory Number Comments
Oracle Database home CPU Patch 12828105, or PSU Patch 12827745 Bundle Patch 12914911 NA Bundle Patch 12914913 CVE-2011-3511, CVE-2011-3512
Oracle Database home Patch 12536181 NA NA NA Released July 2011 Enterprise Manager Database ControlFor HP-UX PA-RISC and HP-UX Itanium platforms only
Oracle Database home Patch 11738172 Patch 11738172 Patch 11738172 Patch 11738172 Released April 2011 Warehouse Builder

Oracle Database 10.2.0.4

 

Patch Information for Oracle Database 10.2.0.4

 

Patch Information 10.2.0.4 Comments
Final patch July 2013 for Oracle Solaris x86 (32-bit) and Apple Mac OS XFinal patch date pending release of 10.2.0.5 patch set for HP Open VMS-Alpha and VMS-ItaniumJuly 2011 for all other platforms
CPU On-Request platforms Apple Mac OS XHP Open VMS-AlphaHP Open VMS-ItaniumOracle Solaris x86 (32-bit)
PSU On-Request platforms – –

Patch Availability for Oracle Database 10.2.0.4

 

Oracle Database 10.2.0.4 UNIX Advisory Number Comments
Oracle Database home CPU Patch 12828112, or PSU Patch 12827778 CVE-2011-2301, CVE-2011-3511, CVE-2011-3512
Oracle Database home Patch 12536167 Released July 2011 Enterprise Manager Database ControlFor HP-UX PA-RISC and HP-UX Itanium platforms only
Oracle Database home Patch 9249369 Released April 2011 Database UIX
Oracle Database home Patch 12758181 Released July 2011 Enterprise Manager Database Control UIX
Oracle Database home Patch 9273865 Released April 2011 iSqlPlus UIX

 Oracle Database 10.2.0.3

 

 Patch Information for Oracle Database 10.2.0.3
Patch Information 10.2.0.3 Comments
Final patch – IBM zSeries (z/OS) only
CPU On-Request platforms –

 

Patch Availability for Oracle Database 10.2.0.3

 

Component IBM zSeries (z/OS) Advisory Number Comments
Oracle Database home CPU Patch 12828128 CVE-2011-2301, CVE-2011-3511, CVE-2011-3512

Oracle Database 10.1.0.5

 

Patch Information for Oracle Database 10.1.0.5

 

Patch Information 10.1.0.5 Comments
Final patch January 2012
CPU On-Request platforms Apple Mac OS XHP Open VMS AlphaHP Tru64 UNIXIBM zSeries (z/OS)Linux ItaniumLinux on POWEROracle Solaris x86 (32-bit)

 

Patch Availability for Oracle Database 10.1.0.5

 

Oracle Database 10.1.0.5 UNIX Microsoft Windows (32-Bit) Microsoft Windows Itanium (64-Bit) Advisory Number Comments
Oracle Database home Patch 6640838 Patch 6640838 Patch 6640838 Released October 2010 Oracle Universal Installer
Oracle Database home Patch 11842285 NA NA Released July 2011 Oracle Universal Installer
Oracle Database home CPU Patch 12828135 Bundle Patch 12914905 Bundle Patch 12914906 CVE-2011-2301, CVE-2011-3512
Oracle Database home Patch 12535977 NA NA Released July 2011 Enterprise Manager Database ControlFor HP-UX PA-RISC and HP-UX Itanium platforms only
Oracle Workspace Manager home Patch 7341989 Patch 7341989 Patch 7341989 Released April 2009
Oracle Database home Patch 9249369 Patch 9249369 Patch 9249369 Released April 2011 Database UIX
Oracle Database home Patch 10036362 Patch 10036362 Patch 10036362 Released April 2011 Enterprise Manager Database Control UIX
Oracle Database home Patch 9273888 Patch 9273888 Patch 9273888 Released April 2011 iSqlPlus UIX

 

Patch Set Update Availability for Oracle Database

Oracle Database UNIX Advisory Number Comments
11.2.0.2.4 Database PSU Patch 12827726 See Section 3.1.3.3, “Oracle Database 11.2.0.2”
11.2.0.2.4 Grid Infrastructure PSU Patch 12827731 See Section 3.1.3.3, “Oracle Database 11.2.0.2” Includes CPUOct2011 and 11.2.0.2.4 Database PSUIBM: Linux on System Z and HP-UX PA-RISC are On-Request Platforms for GI PSU 11.2.0.2.4
11.2.0.2 BP12 for Exadata Patch 12982245 See Section 3.1.3.3, “Oracle Database 11.2.0.2” Includes CPUOct2011 and 11.2.0.2.4 Database and Grid Infrastructure PSU fixes for Exadata
11.1.0.7.9 Database PSU Patch 12827740 See Section 3.1.3.4, “Oracle Database 11.1.0.7”
11.1.0.7.7 CRS PSU Patch 11724953 Released April 2011
10.2.0.5.5 Database PSU Patch 12827745 See Section 3.1.3.5, “Oracle Database 10.2.0.5”
10.2.0.5.2 CRS PSU Patch 9952245 Released January 2011 IBM: Linux on System Z, Solaris x86-64 and HP-UX PA-RISC are On-Request Platforms for CRS PSU 10.2.0.5.2
10.2.0.4.10 Database PSU Patch 12827778 See Section 3.1.3.6, “Oracle Database 10.2.0.4” Overlay PSU
10.2.0.4.4 Database PSU Patch 9352164 Released April 2010 Base PSU for 10.2.0.4.10
10.2.0.4.4 CRS PSU Patch 9294403 Released April 2010
Filed Under: Oracle, Oracle补丁patch Tagged With: , ,

Slide:了解Oracle critical patch update

2011/09/08 by Leave a Comment
了解Oracle critical patch update

View more documents from Maclean Liu

Filed Under: Oracle, Oracle补丁patch Tagged With: , , ,

ORA-07445:[SIGFPE] [Integer divide by zero]内部错误一例

2011/04/19 by Leave a Comment

一套SUNOS 5.10上的单节点10.2.0.3系统出现了ORA-07445: exception encountered: core dump [SIGFPE] [Integer divide by zero] [42788866] [] [] []内部错误，具体trace日志如下:

mon_ora_17633.trc

Oracle Database 10g Enterprise Edition Release 10.2.0.3.0 - Production
With the Partitioning, OLAP and Data Mining options
ORACLE_HOME = /oracle/oracle/product/10.2.0
System name: SunOS
Node name: monitor-a
Release: 5.10
Version: Generic_139556-08
Machine: i86pc

ksedmp: internal or fatal error
ORA-07445: exception encountered: core dump [SIGFPE] [Integer divide by zero] [42788866] [] [] []
Current SQL statement for this session:
select req_time into :b0 from t_FIX_TranSerial where
((((tran_bank=:b1 and tran_type=:b2) and term_no=:b3)
and trace_no=:b4) and local_time='0')
----- Call Stack Trace -----

sigsetjmp <- call_user_handler
<- sigacthandler <- kpopfr <- kposdi <- kpopsdi <- opiefn0
<- kpoal8 <- opiodr <- ttcpip <- opitsk <- opiino
<- opiodr <- opidrv <- sou2o <- opimai_real <- main
<- 0000000000E54FE7

PROCESS STATE
-------------
O/S info: user: monitor, term: pts/5, ospid: 17621, machine: monitor-a
program: CTPDATA@monitor-a (TNS V1-V3)
application name: CTPDATA@monitor-a (TNS V1-V3), hash value=0
last wait for 'SQL*Net message to client' blocking sess=0x0 seq=6213 wait_time=1 seconds since wait started=0
driver id=62657100, #bytes=1, =0

通过在MOS上查询以上ORA-07445错误的arguement可以发现Note <ORA-7445 [KPOPFR] [SIGFPE] [INTEGER DIVIDE BY ZERO] When Repeatedly Executing a Query (Doc ID 421203.1)> :

Applies to:

Oracle Server - Enterprise Edition - Version: 10.2.0.1 to 10.2.0.3
This problem can occur on any platform.
Symptoms

1. Repeatedly executing a query can lead to the following error: 

ORA-7445 [kpopfr] [SIGFPE] [INTEGER DIVIDE BY ZERO]

2. The call stack from the ORA-07445 trace file should contain the following functions:
kposdi  kpopsdi

The error is caused by BUG 5753629.
Abstract: QUERY FAILS BY ORA-7445 [KPOPFR]
Repeatedly executing a query can lead to an ORA-7445[kpopfr] error.

Solution
To implement the solution, do one of the following: 

1. Upgrade to 11.1 or 10.2.0.4, when available.
At the time of writing the article these version were not yet available. (July 2007).
2. Apply one-off Patch 5753629 from MetaLink, if available for your platform and version.

There is no known workaround available for this bug.

References

BUG:5753629 - QUERY FAILS BY ORA-7445 [KPOPFR].

Hdr: 5753629 10.2.0.2 RDBMS 10.2.0.2 PRG INTERFACE PRODID-5 PORTID-23 ORA-7445
Abstract: QUERY FAILS BY ORA-7445 [KPOPFR].

*** 01/09/07 06:12 pm ***
TAR:
----

PROBLEM:
--------
When executing query again and again from one session, query fails
by ORA-7445[kpopfr].

  ====================================================================
  Sat Dec 30 00:22:39 2006
  Errors in file /var/log/oracle/trace/felica2_ora_6156.trc:
  ORA-7445: exception encountered: core dump [kpopfr()+536] [SIGFPE]
  [Integer divide by zero] [0x1023BCE18] [] []
  ====================================================================

DIAGNOSTIC ANALYSIS:
--------------------
From disassemble, %o3 is devided by %o0 and %o0 seems to be 0x0.

  0x1023f43d0 :       umul  %g5, %g4, %o0
  0x1023f43d4 :       mov  %g0, %y
  0x1023f43d8 :       udiv  %o3, %o0, %o3

%o0 is calcurated by %g5 X %g4 at kpopfr+528.

From our trace file, this value(%g5) is 0x100000.

  ub4 kponc_p [FFFFFFFF7B22AAAC, FFFFFFFF7B22AAB0) = 00100000

And %g4 seems to be 0x1000 from below trace file output.
 ========== FRAME [6] (kpopsdi()+148 -> kposdi()) ==========
  %l0 0000000100302B00 %l1 0000000000000002 %l2 FFFFFFFF7B263CA8
  %l3 00000003C36AFB80 %l4 0000000105D7CE20 %l5 0000000000000001
  %l6 0000000000000007 %l7 0000000105D7A920 %i0 0000000000000000
  %i1 FFFFFFFF7FFFB9EC %i2 0000000000001000 %i3 0000000105E03220
                       ~~~~~~~~~~~~~~~~~~~~ <--(*) here
  %i4 0000000000800000 %i5 0000000000105C00 %fp FFFFFFFF7FFFB241 

If %g4=0x1000 and %g5=0x100000, %g4 X %g5 = 0x100000000.
0x100000000 is 0x0 as ub4, and this may bring 0 divide and ORA-7445.

I can reproduce the similar problem in my house, so I'll upload testcase.
Problem reproduce at the following case.

 * sum of all column size is 1048576(0x100000)
 * run query again and again from one session (about 4096(0x1000) times)

From this results, above guess seems to be correct.

WORKAROUND:
-----------
n/a

RELATED BUGS:
-------------
n/a

REPRODUCIBILITY:
----------------
I have confirmed that this problem reproduces at the below env.

 * Linux x86 32bit, 10.2.0.3 : ORA-7445[kpopfr()+300]
 * Linux x86 64bit, 10.2.0.2 : ORA-7445[kpopfr()+339]
 * Solaris 64bit, 10.2.0.2   : ORA-7445[kpopfr()+536]
 * HP-UX Itanium, 10.2.0.2   : ORA-7445[_div32U()+34]

TEST CASE:
----------
At first, creating table like follows.

conn scott/tiger
drop table test;
create table test
( c000 char(2000),
  c001 char(2000),
    ... 
  c523 char(2000),
  c524 char(576));

  --> sum of all column size is 1048576(0x100000).

Run next shell script.

  while [ 1 ]
  do
  echo "set feedback off"
  echo "select * from test where c001 = 'A';"
  done | sqlplus -s scott/tiger

It takes 3-10 minutes to reproduce the problem.
Required time for reproducing depends on hardware spec.

STACK TRACE:
------------
 ksedmp ssexhd sighndlr call_user_handler kposdi kpopsdi kpoal8
 opiodr ttcpip opitsk opiino opiodr opidrv sou2o opimai_real
 main start

具体向Oracle GCS提交SR以后确认为 BUG 5753629. Oracle GCS给出了2种解决方案:
1.升级到10.2.0.4或更高版本
2.应用Apply one-off Patch 5753629

Filed Under: Oracle, Oracle Bug Tagged With: , , , ,

在OEL5上安装配置Oracle Gird Control 10.2.0.5

2011/01/23 by 2 Comments

早期的Grid Control问题实在太多了，以至于把10.2.0.1的Grid Control升级到10.2.0.5几乎是不可能完成的任务；此外10.2.0.5以前的gc不支持11g作为repository database仓库数据库，不仅于此10.2.0.1版本是不支持rhel5或OEL5的，如果想安装的话rhel/oel 4是仅有理想的平台。这就这为我们制造了许多局限。如果是Fresh Installation的话似乎只安装软件(software only)，而不在安装10.2.0.1阶段配置oms，在升级到10.2.0.5后再进行oms的config会是一种比较理想的安装方法。不过我们仍需要应付一个复杂的配置过程，写这个文档的目的是帮助我们应付(包括已安装过的人，因为很容易忘记)这种窘况。

1.我们需要一个已经存在的Oracle数据库，当然它应当是纯净的(没有相关的em repository)，其版本最好是10.2.0.5或者11.2.0.2；我们假设你的数据库已经满足了一切安装grid control的前提要求，这包括设置几个初始化参数和装有dbms_shared_pool包等等。

2.其次你需要下载对应的软件，这包括了完全版本的10.2.0.1安装介质和10.2.0.5 gc patchset，并且最好有10.2.0.5版的agent(个人经验agent不太稳定，有时候需要重配，所以有介质的话会方便些):

  • Linux_Grid_Control_full_102010_disk1.zip
  • Linux_Grid_Control_full_102010_disk2.zip
  • Linux_Grid_Control_full_102010_disk3.zip
  • gc_x86_64_10205_part1of2.zip
  • gc_x86_64_10205_part2of2.zip
  • Linux_x86_64_Grid_Control_agent_download_10_2_0_5_0.zip

要下载这一大堆介质可能是我们安装过程中最麻烦的一件事情，特别是当你的网络状况欠佳的季节。
因为都是zip包，所以你只需要使用unzip命令将以上介质一一解压到合适目录就可以了。

3.配置OMS所在主机的内核参数和rpm包，下面给出了相关配置文件的示例值：

/etc/sysctl.conf:
kernel.shmall = 2097152
kernel.shmmax = 536870912
kernel.shmmni = 4096
kernel.sem = 250 32000 100 128
fs.file-max = 65536
# semaphores: semmsl, semmns, semopm, semmni
net.ipv4.ip_local_port_range = 1024 65000
net.core.rmem_default = 262144
net.core.rmem_max = 262144
net.core.wmem_default = 262144
net.core.wmem_max = 262144

/* 注意以上参数并不一定适合你的主机，具体如何配置请参见Metalink文档 */

同时修改/etc/security/limits.conf参数文件:
*               soft    nproc   2047
*               hard    nproc   16384
*               soft    nofile  1024
*               hard    nofile  65536

/* 星号换上你的安装用户名，如oracle或者其他dba组成员 */

安装适当的rpm包，安装database时需要的包一律也都需要，此外请特别留意安装一下几个包:
compat-libstdc++-296-2.96-138.i386
libstdc++-devel-4.1.2-48.el5.x86_64
libstdc++-devel-4.1.2-48.el5.i386
glibc-devel-2.5-49.x86_64
glibc-devel-2.5-49.i386

并建立下列符号连接:
ln -s /usr/lib/libgdbm.so.2.0.0 /usr/lib/libdb.so.2

4.上述工作完成后我们需要修改response文件以满足安装的需要，在10.2.0.1安装介质的解压目录下操作:

[root@nas media]# ls
dcommon  doc  index.htm  install  libskgxn  oms  rdbms  response  runInstaller  stage

[root@nas media]# vi response/em_using_existing_db.rsp 

/* 修改em_using_existing_db.rsp响应文件 */

包括以下参数需要从默认值修改为指定值:
UNIX_GROUP_NAME="dba"
#dba应当是有效的安装用户所在组

FROM_LOCATION="/s01/media/oms/Disk1/stage/products.xml"
#FROM LOCATION指向安装介质stage目录下的products.xml文件

BASEDIR="/s01/app/gc"
#BASEDIR指向grid control安装的基础目录

INSTALLATION_NAME="oms10g"
#安装名

s_reposHost="rh3.oracle.com"
#repository数据库的主机名或ip地址

s_reposPort="1521"
#repository数据库的监听端口

s_reposSID="EMREP"
#repository数据库的sid

s_reposDBAPwd="maclean"
#repository数据库的sys用户密码

s_mgmtTbsName="/s01/orabase/oradata/EMREP/mgmt.dbf"
#repository数据库今后的mgmt表空间的数据文件名

s_ecmTbsName=s_mgmtTbsName="/s01/orabase/oradata/EMREP/mgmt_ecm.dbf"
#repository数据库今后的ecm表空间的数据文件名

s_securePassword="maclean"
#agent将来使用的secure密码

s_securePasswordConfirm="maclean"
#确认上一步的密码

b_lockedSelected=false
#确定agent交互是否被锁

s_reposPwd="maclean"
#确定仓库数据库中模式拥有者(sysman)的密码

s_reposPwdConfirm="maclean"
#确认上一步的密码

5.以静默方式安装grid control 10.2.0.1，但不配置oms:

[maclean@nas ~]$ export  TMP=/tmp

[maclean@nas ~]$  /s01/media/install/runInstaller -noconfig -silent -ignoreSysPrereqs -responseFile \
/s01/media/response/em_using_existing_db.rsp  use_prereq_checker=false b_skipDBValidation=true -force

以上安装完成后，运行相关脚本:
[maclean@nas ~]$ su - root -c "/home/maclean/oraInventory/orainstRoot.sh"

[maclean@nas ~]$ su - root -c "/s01/app/gc/oms10g/allroot.sh"

并使用opmonctl命令关闭http等服务:
[maclean@nas ~]$ /s01/app/gc/oms10g/opmn/bin/opmnctl stopall
opmnctl: stopping opmn and all managed processes...

5.接下来我们需要安装grid control 10.2.0.5补丁集，同样的需要修改一个response响应文件:

[maclean@nas 10205]$ unzip /tmp/gc_x86_64_10205_part2of2.zip
Archive:  /tmp/gc_x86_64_10205_part2of2.zip
extracting: p3731593_10205_Linux-x86-64.zip

[maclean@nas 10205]$ unzip p3731593_10205_Linux-x86-64.zip
..............

[maclean@nas ~]$ cp /s01/10205/3731593/Disk1/response/patchset.rsp /s01/10205/3731593/Disk1/response/oms_patchset.rsp

/* 对oms_patchset.rsp修改已有的参数为指定值 */

[maclean@nas ~]$ vi /s01/10205/3731593/Disk1/response/oms_patchset.rsp

ORACLE_HOME="/s01/app/gc/oms10g"
b_softwareonly=true
s_sysPassword="maclean"
sl_pwdInfo={ "maclean" }
oracle.iappserver.st_midtier:szl_InstanceInformation={ "maclean" }

ORACLE_HOME_NAME="oms10g"
#另外增加以上条目

[maclean@nas ~]$ /s01/10205/3731593/Disk1/runInstaller -noconfig -silent \
-responseFile /s01/10205/3731593/Disk1/response/oms_patchset.rsp

/* 以上10.2.0.5补丁安装完成后，同样需要执行root.sh */

[maclean@nas ~]$ su - root -c "/s01/app/gc/oms10g/root.sh"

6.完成上述安装后可以开始配置OMS了:

[maclean@nas ~]$ export PERL5LIB=/s01/app/gc/oms10g/perl/lib/5.6.1

[maclean@nas ~]$ /s01/app/gc/oms10g/perl/bin/perl /s01/app/gc/oms10g/sysman/install/ConfigureGC.pl \
/s01/app/gc
Base Directory: /s01/app/gc

 Starting ito execute Configuration Assistants: 

Running the configuration assistants using the following command:
/s01/app/gc/oms10g/oui/bin/runConfig.sh INV_PTR_LOC=/s01/app/gc/oms10g/oraInst.loc
ORACLE_HOME=/s01/app/gc/oms10g ACTION=configure MODE=perform
COMPONENT_XML={encap_oms.1_0_0_0_0.xml}
perform - mode is starting for action: configure

以上命令的具体形式为:
<OMS ORACLE_HOME>/perl/bin/perl <OMS ORACLE_HOME>/sysman/install/ConfigureGC.pl <Parent Directory filepath> 

配置会消耗大量的时间，建议通过.../oms10g/cfgtoollogs/oui/configActions<>.log.日志文件监控配置过程:

[root@nas oui]# cd /s01/app/gc/oms10g/cfgtoollogs/oui

[root@nas oui]# tail -f configActions2011-01-23_08-57-20-AM.log
... return status = 0 (success)
Oracle JAAS [Sun Jan 23 08:57:43 CST 2011]  $ORACLE_HOME/j2ee/home/config/jazn-data.xml is synchronized successfully to dcm repository.
Please check the log file [/s01/app/gc/oms10g/cfgtoollogs/jaznca.log] for details.

The plug-in Java Security Configuration Assistant has successfully been performed
------------------------------------------------------
------------------------------------------------------
The plug-in Web Cache Configuration Assistant is running

2
Start traversing...
got process-manager node
got ias-instance node
attrValue=IASPT

attrValue=DSA

attrValue=HTTP_Server

attrValue=LogLoader

attrValue=dcm-daemon

attrValue=OC4J

attrValue=WebCache

Entity found.

got ias-instance node
Current status is : enabled
Changing the value of port to enabled
 Modified ...
Before After WaitForComplete
After WaitForComplete
Completed smiSetStatus
Checking status ... enableconfiguration
In ... getWebcachePort
WebCache Default Port :7777
In ... updateApacheConf
Apache Port Value : 7777
Apache Before WaitForComplete
Apache After WaitForComplete
Checking for Apache updation status
Apache httpd.conf updated
smiTearDown
Will be checking the status ...
Webcache Configuration finished successfully

The plug-in Web Cache Configuration Assistant has successfully been performed
------------------------------------------------------
------------------------------------------------------
The plug-in Oracle Application Server Instance Configuration Assistant is running

The plug-in Oracle Application Server Instance Configuration Assistant has successfully been performed
------------------------------------------------------
------------------------------------------------------
The plug-in OC4J Instance Configuration Assistant is running

Reading ini file - '/s01/app/gc/oms10g/j2ee/deploy.ini'
Adding web-app 'IsWebCacheWorkingWeb.war' for app 'IsWebCacheWorking'.
Adding web-app 'wsrp-samples.war' for app 'portletapp'.
Initializing DCM...done.
OC4J instance 'home' already exists.
Starting OC4J instance 'home'...done.
Deploying application 'portletapp' to OC4J instance 'home'.
Notification ==> Application Deployer for portletapp STARTS [ 2011-01-23T08:58:00.972CST ]
Notification ==> Undeploy previous deployment
Notification ==> Removing files for app file:/s01/app/gc/oms10g/j2ee/home/applications/portletapp.ear
Notification ==> Copy the archive to /s01/app/gc/oms10g/j2ee/home/applications/portletapp.ear
Notification ==> Unpack portletapp.ear begins...
Notification ==> Unpack portletapp.ear ends...
Notification ==> Initialize portletapp.ear begins...
Notification ==> Initialize portletapp.ear ends...
Notification ==> Initialize wsrp-samples begins...
Notification ==> Initialize wsrp-samples ends...
Notification ==> deleting:  /s01/app/gc/oms10g/j2ee/home/applications/portletapp.ear
Notification ==> deleting:  /s01/app/gc/oms10g/j2ee/home/applications/portletapp/wsrp-samples.war
Notification ==> Application Deployer for portletapp COMPLETES [ 2011-01-23T08:58:01.319CST ] 

Deploying application 'IsWebCacheWorking' to OC4J instance 'home'.
Notification ==> Application Deployer for IsWebCacheWorking STARTS [ 2011-01-23T08:58:01.328CST ]
Notification ==> Undeploy previous deployment
Notification ==> Removing files for app file:/s01/app/gc/oms10g/j2ee/home/applications/IsWebCacheWorking.ear
Notification ==> Copy the archive to /s01/app/gc/oms10g/j2ee/home/applications/IsWebCacheWorking.ear
Notification ==> Unpack IsWebCacheWorking.ear begins...
Notification ==> Unpack IsWebCacheWorking.ear ends...
Notification ==> Initialize IsWebCacheWorking.ear begins...
Notification ==> Initialize IsWebCacheWorking.ear ends...
Notification ==> Initialize IsWebCacheWorkingWeb begins...
Notification ==> Initialize IsWebCacheWorkingWeb ends...
Notification ==> deleting:  /s01/app/gc/oms10g/j2ee/home/applications/IsWebCacheWorking.ear
Notification ==> deleting:  /s01/app/gc/oms10g/j2ee/home/applications/IsWebCacheWorking/IsWebCacheWorkingWeb.war
Notification ==> Application Deployer for IsWebCacheWorking COMPLETES [ 2011-01-23T08:58:01.362CST ] 

Calling updateConfig to notify DCM of new deployments...done.
Adding dependent libraries for application 'portletapp'...done.
Adding OC4J mount points for application 'portletapp'...done.
Adding OC4J mount points for application 'IsWebCacheWorking'...done.
Calling SMI to save changes.
SMISession.saveChanges succeeded.
Binding web app 'wsrp-samples' to default-web-site for application 'portletapp' in OC4J instance 'home'
Web app 'wsrp-samples' bound successfully.
Binding web app 'IsWebCacheWorkingWeb' to default-web-site for application 'IsWebCacheWorking' in OC4J instance 'home'
Web app 'IsWebCacheWorkingWeb' bound successfully.
Calling updateConfig to notify DCM of new web-bindings...done.
Adding application 'portletapp' to the DCM repository...done.
Application 'portletapp' deployed successfully.
Adding application 'IsWebCacheWorking' to the DCM repository...done.
Application 'IsWebCacheWorking' deployed successfully.
Stopping OC4J instance 'home'...done.
Calling SMI to retry init of failed plugins...done.
Terminating DCM...done.
Copying /s01/app/gc/oms10g/j2ee/deploy.ini to /s01/app/gc/oms10g/j2ee/deploy.ini.1295744298019.bak.
Writing any undeployed entries back to /s01/app/gc/oms10g/j2ee/deploy.ini.

Oc4jDeploy tool completed successfully!

The plug-in OC4J Instance Configuration Assistant has successfully been performed
------------------------------------------------------
------------------------------------------------------
The plug-in Register DCM Plug-Ins With EM is running

Operation successful.

The plug-in Register DCM Plug-Ins With EM has successfully been performed
------------------------------------------------------
------------------------------------------------------
The plug-in DCM Repository Backup Assistant is running

backup created: InstalledImage_EnterpriseManager0.nas

The plug-in DCM Repository Backup Assistant has successfully been performed
------------------------------------------------------
------------------------------------------------------
The plug-in EM Technology Stack Upgrade is running

The plug-in EM Technology Stack Upgrade has successfully been performed
------------------------------------------------------
------------------------------------------------------
The plug-in OMS Configuration is running

Operation Stopping OPMN Processes is in progress.
Operation EM Deploying is in progress.
Operation Creating OMS Respository is in progress.
Operation Configuring OMS is in progress.
OMS is being Secured and Lock is set to false.
Precompiling JSPs.
Performing installation of CLI services for client.
Operation Restarting OPMN Processes is in progress.

The plug-in OMS Configuration has successfully been performed
------------------------------------------------------
------------------------------------------------------
The plug-in Agent Configuration Assistant is running

Performing free port detection on host=nas
Securing the agent
Performing targets discovery and agent configuration

The plug-in Agent Configuration Assistant has failed its perform method
------------------------------------------------------
The action configuration has failed its perform method
###################################################

7.如果以上oms configuration顺利完成那么Grid Control的网页界面已经可以登录了，但我们在本地服务器上的agent仍是10.2.0.1版本的(所以Agent Configuration Assistant失败了)，这里我推荐将原agent目录删除后通过10.2.0.5的agent介质(Linux_x86_64_Grid_Control_agent_download_10_2_0_5_0.zip)重新安装并部署，这样可以很大程度上避免出现问题。

Filed Under: Oracle Tagged With: , , , ,

AIX操作系统上安装Oracle数据库必不可少的几项检查工作

2010/10/13 by 1 Comment

一直以来在UNIX/Linux like操作系统上安装Oracle数据库软件都是一门精细活，在实际安装软件前有不少操作系统参数或配置需要我们关心。我们以10g release 2为例，尽可能完整地列出所有有必要的预检查工作。

1.确认使用的AIX版本经过认证，AIX 5.2之前的版本包括5.1都没有通过Oracle 10g的认证，换而言之如果你要安装10g的话就要保证AIX的版本>=5.2，我们可以通过以下脚本进行验证:

[Read more…]

Filed Under: aix, Oracle Tagged With: , , , , ,

沪ICP备14014813号-2

沪公网安备 31010802001379号