11 Replies Latest reply on Sep 22, 2011 6:49 AM by 888953

    can not download patch

    888953
      http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html

      I went to the link above and click to download CPU for oracle 10g release 2. After login with my account, it shows the error page:

      Failure of server APACHE bridge:
      --------------------------------------------------------------------------------
      No backend server available for connection: timed out after 10 seconds or idempotent set to OFF.
      --------------------------------------------------------------------------------

      The problem is there for more than 3 days. Is the server really down or did I do something wrong?

      Thanks.
        • 1. Re: can not download patch
          JustinCave
          Oracle database patches are available from http://metalink.oracle.com Why are you trying to download a patch from a non-Oracle domain? That's almost certainly a violation of copyright and there is a substantial risk that you're downloading an infected patch.

          Justin
          • 2. Re: can not download patch
            Hussein Sawwan-Oracle
            I can open https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=1159443.1 with no issues.

            Have you tried to use a different browser and/or a different machine?

            What is the patch number you are trying to download? Instead of downloading it from the link you have posted above, go directly to My Oracle Support (MOS) website, click on "Patches & Updates" tab, search for the patch number and download it from there -- https://support.oracle.com

            Thanks,
            Hussein
            1 person found this helpful
            • 3. Re: can not download patch
              888953
              ----------
              I can open https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=1159443.1 with no issues.

              Have you tried to use a different browser and/or a different machine?

              What is the patch number you are trying to download? Instead of downloading it from the link you have posted above, go directly to My Oracle Support (MOS) website, click on "Patches & Updates" tab, search for the patch number and download it from there -- https://support.oracle.com

              Thanks,
              Hussein
              --------------------------
              Yes, I did go to https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=1159443.1 and it gave me the error message. I tried other browsers (ie, firefox, safari) and other machines but still encountered same error message.

              I also went to https://support.oracle.com. It asked me to 'Sign in' which I did. Then it asked me to enter CSI number. It is a compulsory field and I don't have that. I am using free oracle 10g express edition. So there is no contract between me and oracle for CSI, I think.

              Is that other way to patch oracle 10g express edition? I am frustrated by this process. Oracle make express edition so easy to download. Yet it is so difficult to download patch.
              • 4. Re: can not download patch
                Hussein Sawwan-Oracle
                Yes, I did go to https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=1159443.1 and it gave me the error message. I tried other browsers (ie, firefox, safari) and other machines but still encountered same error message.

                I also went to https://support.oracle.com. It asked me to 'Sign in' which I did. Then it asked me to enter CSI number. It is a compulsory field and I don't have that. I am using free oracle 10g express edition. So there is no contract between me and oracle for CSI, I think.
                This is an expected behavior if you do not have a CSI number.
                Is that other way to patch oracle 10g express edition? I am frustrated by this process. Oracle make express edition so easy to download. Yet it is so difficult to download patch.
                What is the patch number you are trying to download?

                Thanks,
                Hussein
                1 person found this helpful
                • 5. Re: can not download patch
                  888953
                  Thank you Hussein.

                  I need 2 CPU for Oracle 10g express release 2
                  October 2010 CPU
                  January 2011 CPU

                  Is there a direct way to download them?
                  • 6. Re: can not download patch
                    Hussein Sawwan-Oracle
                    I need 2 CPU for Oracle 10g express release 2
                    October 2010 CPU
                    January 2011 CPU
                    Do you have any patch numbers? IINM, you do not need to apply CPU patches for Oracle XE, that's why I am asking about the numbers. Or, what is reason you need to apply those patches?
                    Is there a direct way to download them?
                    The only way to do is via MOS/Metalink website which requires a valid username/password and CSI number.

                    Thanks,
                    Hussein
                    1 person found this helpful
                    • 7. Re: can not download patch
                      888953
                      My security guy detects the vulnerability of Oracle XE on my server. So I need to apply the patches.

                      For Oracle XE without CSI, is it still possible to apply the patches?
                      • 8. Re: can not download patch
                        Hussein Sawwan-Oracle
                        My security guy detects the vulnerability of Oracle XE on my server. So I need to apply the patches.
                        What vulnerability we are talking about here? Any details? How do you know it is related to Oracle XE?
                        For Oracle XE without CSI, is it still possible to apply the patches?
                        Most Oracle Database Patches (if not all) are available on MOS website only.

                        Thanks,
                        Hussein
                        1 person found this helpful
                        • 9. Re: can not download patch
                          888953
                          Security guy detect vulnerability on port 1521 which belongs to Oracle XE. And they point out it is database and show me the 2 websites below:

                          http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
                          http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html

                          I am afraid I can't tell them Oracle XE does not need patch. Yet I don't have access to patches. This really a dilemma.
                          • 10. Re: can not download patch
                            orafad
                            user3169384 wrote:
                            My security guy detects the vulnerability of Oracle XE on my server. So I need to apply the patches.
                            Please re-read the license agreement for XE, specially the part about updates.

                            There are no patches. If you "need" to then you should consider paying up and going to Standard or Enterprise Edition.

                            An alternative way might be migrating to 11.2 XE (which is 11.2.0.2 version, maybe good enough).
                            http://www.oracle.com/technetwork/database/express-edition/downloads/index.html
                            • 11. Re: can not download patch
                              888953
                              Thanks everyone for you replies.

                              I get it now that express edition is not supported by patches. Sorry I did not read license agreement carefully. I don't read license agreement for paid software either -)

                              I did not install 11g express edition because I did not find migrate tools in it. It seems to be a fresh installation. Correct me if I am wrong here. The solution I can think of is to install 11g on a new machine and copy my data from 10g to 11g. I don't have that luxury.

                              The workaround I have now is to configure firewall to limit port 1521 to certain machines (hosting web applications) only. That way I have peace of mind that my Oracle will not be hacked.