Forum Stats

  • 3,734,347 Users
  • 2,246,954 Discussions
  • 7,857,240 Comments

Discussions

can not download patch

888953
888953 Member Posts: 6
edited Sep 22, 2011 2:49AM in Downloads Issues
http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html

I went to the link above and click to download CPU for oracle 10g release 2. After login with my account, it shows the error page:

Failure of server APACHE bridge:
--------------------------------------------------------------------------------
No backend server available for connection: timed out after 10 seconds or idempotent set to OFF.
--------------------------------------------------------------------------------

The problem is there for more than 3 days. Is the server really down or did I do something wrong?

Thanks.
f5e9e1b2-d17c-4b4d-8963-c504dca6095e

Best Answer

  • orafad
    orafad Member Posts: 8,035 Silver Trophy
    Accepted Answer
    user3169384 wrote:
    My security guy detects the vulnerability of Oracle XE on my server. So I need to apply the patches.
    Please re-read the license agreement for XE, specially the part about updates.

    There are no patches. If you "need" to then you should consider paying up and going to Standard or Enterprise Edition.

    An alternative way might be migrating to 11.2 XE (which is 11.2.0.2 version, maybe good enough).
    http://www.oracle.com/technetwork/database/express-edition/downloads/index.html

Answers

  • JustinCave
    JustinCave Member Posts: 30,293 Gold Crown
    Oracle database patches are available from http://metalink.oracle.com Why are you trying to download a patch from a non-Oracle domain? That's almost certainly a violation of copyright and there is a substantial risk that you're downloading an infected patch.

    Justin
  • Hussein Sawwan-Oracle
    Hussein Sawwan-Oracle Member Posts: 69,485 Employee
    edited Sep 19, 2011 2:03AM
    I can open https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=1159443.1 with no issues.

    Have you tried to use a different browser and/or a different machine?

    What is the patch number you are trying to download? Instead of downloading it from the link you have posted above, go directly to My Oracle Support (MOS) website, click on "Patches & Updates" tab, search for the patch number and download it from there -- https://support.oracle.com

    Thanks,
    Hussein
    Hussein Sawwan-Oracle
  • 888953
    888953 Member Posts: 6
    ----------
    I can open https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=1159443.1 with no issues.

    Have you tried to use a different browser and/or a different machine?

    What is the patch number you are trying to download? Instead of downloading it from the link you have posted above, go directly to My Oracle Support (MOS) website, click on "Patches & Updates" tab, search for the patch number and download it from there -- https://support.oracle.com

    Thanks,
    Hussein
    --------------------------
    Yes, I did go to https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=1159443.1 and it gave me the error message. I tried other browsers (ie, firefox, safari) and other machines but still encountered same error message.

    I also went to https://support.oracle.com. It asked me to 'Sign in' which I did. Then it asked me to enter CSI number. It is a compulsory field and I don't have that. I am using free oracle 10g express edition. So there is no contract between me and oracle for CSI, I think.

    Is that other way to patch oracle 10g express edition? I am frustrated by this process. Oracle make express edition so easy to download. Yet it is so difficult to download patch.
  • Hussein Sawwan-Oracle
    Hussein Sawwan-Oracle Member Posts: 69,485 Employee
    Yes, I did go to https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=1159443.1 and it gave me the error message. I tried other browsers (ie, firefox, safari) and other machines but still encountered same error message.

    I also went to https://support.oracle.com. It asked me to 'Sign in' which I did. Then it asked me to enter CSI number. It is a compulsory field and I don't have that. I am using free oracle 10g express edition. So there is no contract between me and oracle for CSI, I think.
    This is an expected behavior if you do not have a CSI number.
    Is that other way to patch oracle 10g express edition? I am frustrated by this process. Oracle make express edition so easy to download. Yet it is so difficult to download patch.
    What is the patch number you are trying to download?

    Thanks,
    Hussein
    Hussein Sawwan-Oracle
  • 888953
    888953 Member Posts: 6
    Thank you Hussein.

    I need 2 CPU for Oracle 10g express release 2
    October 2010 CPU
    January 2011 CPU

    Is there a direct way to download them?
  • Hussein Sawwan-Oracle
    Hussein Sawwan-Oracle Member Posts: 69,485 Employee
    I need 2 CPU for Oracle 10g express release 2
    October 2010 CPU
    January 2011 CPU
    Do you have any patch numbers? IINM, you do not need to apply CPU patches for Oracle XE, that's why I am asking about the numbers. Or, what is reason you need to apply those patches?
    Is there a direct way to download them?
    The only way to do is via MOS/Metalink website which requires a valid username/password and CSI number.

    Thanks,
    Hussein
    Hussein Sawwan-Oracle
  • 888953
    888953 Member Posts: 6
    My security guy detects the vulnerability of Oracle XE on my server. So I need to apply the patches.

    For Oracle XE without CSI, is it still possible to apply the patches?
  • Hussein Sawwan-Oracle
    Hussein Sawwan-Oracle Member Posts: 69,485 Employee
    My security guy detects the vulnerability of Oracle XE on my server. So I need to apply the patches.
    What vulnerability we are talking about here? Any details? How do you know it is related to Oracle XE?
    For Oracle XE without CSI, is it still possible to apply the patches?
    Most Oracle Database Patches (if not all) are available on MOS website only.

    Thanks,
    Hussein
    Hussein Sawwan-Oracle
  • 888953
    888953 Member Posts: 6
    Security guy detect vulnerability on port 1521 which belongs to Oracle XE. And they point out it is database and show me the 2 websites below:

    http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
    http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html

    I am afraid I can't tell them Oracle XE does not need patch. Yet I don't have access to patches. This really a dilemma.
  • orafad
    orafad Member Posts: 8,035 Silver Trophy
    Accepted Answer
    user3169384 wrote:
    My security guy detects the vulnerability of Oracle XE on my server. So I need to apply the patches.
    Please re-read the license agreement for XE, specially the part about updates.

    There are no patches. If you "need" to then you should consider paying up and going to Standard or Enterprise Edition.

    An alternative way might be migrating to 11.2 XE (which is 11.2.0.2 version, maybe good enough).
    http://www.oracle.com/technetwork/database/express-edition/downloads/index.html
  • 888953
    888953 Member Posts: 6
    Thanks everyone for you replies.

    I get it now that express edition is not supported by patches. Sorry I did not read license agreement carefully. I don't read license agreement for paid software either -)

    I did not install 11g express edition because I did not find migrate tools in it. It seems to be a fresh installation. Correct me if I am wrong here. The solution I can think of is to install 11g on a new machine and copy my data from 10g to 11g. I don't have that luxury.

    The workaround I have now is to configure firewall to limit port 1521 to certain machines (hosting web applications) only. That way I have peace of mind that my Oracle will not be hacked.
This discussion has been closed.