SQL & PL/SQL

Oracle database patches are available from http://metalink.oracle.com Why are you trying to download a patch from a non-Oracle domain? That's almost certainly a violation of copyright and there is a substantial risk that you're downloading an infected patch.

Justin

I can open https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=1159443.1 with no issues.

Have you tried to use a different browser and/or a different machine?

What is the patch number you are trying to download? Instead of downloading it from the link you have posted above, go directly to My Oracle Support (MOS) website, click on "Patches & Updates" tab, search for the patch number and download it from there -- https://support.oracle.com

Thanks,
Hussein

----------
I can open https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=1159443.1 with no issues.

Have you tried to use a different browser and/or a different machine?

What is the patch number you are trying to download? Instead of downloading it from the link you have posted above, go directly to My Oracle Support (MOS) website, click on "Patches & Updates" tab, search for the patch number and download it from there -- https://support.oracle.com

Thanks,
Hussein
--------------------------
Yes, I did go to https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=1159443.1 and it gave me the error message. I tried other browsers (ie, firefox, safari) and other machines but still encountered same error message.

I also went to https://support.oracle.com. It asked me to 'Sign in' which I did. Then it asked me to enter CSI number. It is a compulsory field and I don't have that. I am using free oracle 10g express edition. So there is no contract between me and oracle for CSI, I think.

Is that other way to patch oracle 10g express edition? I am frustrated by this process. Oracle make express edition so easy to download. Yet it is so difficult to download patch.

This is an expected behavior if you do not have a CSI number.
What is the patch number you are trying to download?

Thanks,
Hussein

Thank you Hussein.

I need 2 CPU for Oracle 10g express release 2
October 2010 CPU
January 2011 CPU

Is there a direct way to download them?

Do you have any patch numbers? IINM, you do not need to apply CPU patches for Oracle XE, that's why I am asking about the numbers. Or, what is reason you need to apply those patches?
The only way to do is via MOS/Metalink website which requires a valid username/password and CSI number.

Thanks,
Hussein

My security guy detects the vulnerability of Oracle XE on my server. So I need to apply the patches.

For Oracle XE without CSI, is it still possible to apply the patches?

What vulnerability we are talking about here? Any details? How do you know it is related to Oracle XE?
Most Oracle Database Patches (if not all) are available on MOS website only.

Thanks,
Hussein

Security guy detect vulnerability on port 1521 which belongs to Oracle XE. And they point out it is database and show me the 2 websites below:

http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html

I am afraid I can't tell them Oracle XE does not need patch. Yet I don't have access to patches. This really a dilemma.

Thanks everyone for you replies.

I get it now that express edition is not supported by patches. Sorry I did not read license agreement carefully. I don't read license agreement for paid software either -)

I did not install 11g express edition because I did not find migrate tools in it. It seems to be a fresh installation. Correct me if I am wrong here. The solution I can think of is to install 11g on a new machine and copy my data from 10g to 11g. I don't have that luxury.

The workaround I have now is to configure firewall to limit port 1521 to certain machines (hosting web applications) only. That way I have peace of mind that my Oracle will not be hacked.