Forum Stats

  • 3,837,050 Users
  • 2,262,222 Discussions
  • 7,900,192 Comments

Discussions

Oracle patch's

2651744
2651744 Member Posts: 1
edited Jul 14, 2014 4:31AM in General Database Discussions

Hi everyone,

I need a help with Oracle patching info. I have a DB 10.2.0.5.0 but I don't understand what does number 5 mean in version. How to check do I need to download update or not ?

1)Here says version 10.2.0.5 is vulnerable, but i don't know do I neet to update or not.

2)And what the different between PSU and patch set?

3)How to check which of CPU was installed?

Example of my DB.

As you can see in my DB was installed patch set 4.

https://cloud.mail.ru/public/e0e69dc57430/воспрос.jpg

Oracle Critical Patch Update - July 2013

Tagged:

Answers

  • Alvaro
    Alvaro Member Posts: 709 Silver Badge
    edited Jul 12, 2014 12:36AM

    Hello,

    1) It's "vulnerable" because it's not the current one, and by your screenshot it's not even on the latest PSU.

    2) Patch set is the general version of the release. 10.2.0.5 , means you are on the "release update version" 5 of the release 10.2. PSU is the one step below, it's the patch that fixes bugs and general security problems within your patchset. So, you could be on version 10.2.0.5.2, 10.2.0.5.4, so on and so forth.

    3) CPU is an old nomenclature, it's basically a bundle of one-off patches that fixes security issues. Many of these issues are also included in the PSU mentioned above.

    You can find wich patch is installed by the opatch lsinventory command which you posted. Seems you have a 10.2.0.5 with the patch 10155843 which is  10.2.0.5 Patch 2 which means you could say you are on '10.2.0.5.2' windows version.

  • Salman Qureshi
    Salman Qureshi Member Posts: 2,483

    Hi,

    1. 5 means patchset. 10.2.0.5 means Oracle 10g release 2 patchset 5.

    2. PSU are quarterly (every 3 months) released patches for bugs and security vulnerabilities.

    Above 2 should be enough to explain the difference between patchset and PSU.

    3. CPU contains only security vulnerability patches and also released quarterly. It is recommended to use PSU. Once you start applying either PSU or CPU, then you should continue using same for every next release of CPU/PSU.

    For your case, 10.2.0.1 was your major release. Your patchset is 10.2.0.5 which is patchset 4 because - 10.2.0.2  was patchset 1, 10.2.0.3 was patchset 2 and 10.2.0.4 was patchset 3

    You can use opatch utility to install any patch and also extract of details of patches applied on your ORACLE HOME.

    Salman

  • Aman....
    Aman.... Member Posts: 22,919 Gold Crown

    For #2, read this,

    https://blogs.oracle.com/security/entry/the_benefits_of_database_serve

    For the rest, you have already got the answers.

    Aman....

This discussion has been closed.