I see that the January 2014 Critical Patch Update (CPU) has been released:
My employer is requiring that all Oracle instances be updated immediately. However, I have an Oracle XE instance on my Windows development machine, and there does not seem to be any way I can find to apply the patch:
- XE is a free product, yet access to the patches from the CPU page requires a Support Identifier. Access to the OPatch tool also requires a Support Identifier.
- Even *with* a Support Identifier, there is no listing of a patch for 18.104.22.168 (the version of the latest XE release); it's either 22.214.171.124 or 126.96.36.199.
- Even if there *were* a patch for this version, OPatch seems to require the presence within ORACLE_HOME of Java and of certain Perl tools, both of which are missing from the XE installation.
Any thoughts on how to proceed? If I cannot patch my XE instance, I will have to uninstall it. I write a lot of ETL scripts that use SQL Loader, but this is not available as a stand-alone install the way SQL Plus is, so I'm sort of in a bind. Any help much appreciated. Ideally, I would love to find a step-by-step walk-through of how to apply the patch. It is hard for me to believe that Oracle would simply require every XE instance worldwide to run in a state with known security flaws.
You cannot apply patches to XE instance - How to get and install 10.2.0.3 patch for Oracle XE (express)
See the "No technical Support" portion of the XE license agreement - Oracle Technology Network Developer License Terms for Oracle Database 11g Express Edition
Hi Srini, thanks for the reply. In that case, maybe I'm asking the wrong question, or more to the point, maybe I've wound up with the wrong product. Let me try this as "My Question, 2.0":
Is there any product I can download:
- for use only on my development box
- without any current, known security vulnerabilities
- that would include SQL Loader
Your #2 requirement is tough :-) Every software out there has known vulnerabilities :-)
You could use 188.8.131.52 or 184.108.40.206 available at Oracle Database Software Downloads | Oracle Technology Network | Oracle
Pl review the licensing agreement carefully - if you expect to apply patches, then you should purchase licenses with a support agreement