Alert

Are there security fixes included? Which CVEs?

I received multiple questions from colleagues and customers over the past weeks regarding the security content in RUs and MRPs. See also my blog post from yesterday where I touched this topic briefly. The question regarding RUs, MRPS and CSPUs often is: Are there security fixes included? Which CVEs?

Are there security fixes included? Which CVEs?

Photo by Gene Gallin on Unsplash

Release Updates are the primary vehicle

As I explained already, Release Updates (RU) are the primary and main vehicle to deliver security fixes. MRPs and CSPUs contain only a smaller portion, usually those fixes with really high CVE scores which can’t wait until …

Patching recommendations: Which route is the best? RUs, MRPs, n-1??

Posted on September 21, 2026 by Mike.Dietrich Best Practice Patch Recommendation Release Schedule 6

Be aware, this is a longer Monday blog post. Upfront, I am not the master of patching. And I clearly see that many of you struggle with the current situation. Not only regarding Oracle software but I guess, this extends to almost every software or OS. Since I get asked almost daily about the ideal approach, and since we discuss these topics internally across the tech teams as well, I thought I would share here my personal Patching recommendations: Which route is the best? RUs, MRPs, n-1??

Patching recommendations: Which route is the best? RUs, MRPs, n-1??

Photo by Ben Wicks on Unsplash

Prelude

Two important things I’d like to …

Hide and Seek with RU 19.18.0

Posted on February 2, 2023 by Mike.Dietrich Flaws and Pitfalls Patch Recommendation 46

One and a half weeks ago we released the Database and Grid Infrastructure Release Updates (RU) 19.18.0. You could read on the blog how to apply it, and you could read also about an alert. So far, all was more or less transparent but apparently sort of an Hide and Seek with RU 19.18.0 has happened. So let me shed some light.

Photo by Braydon Anderson on Unsplash

Heads Up!

I am just the messenger trying to bring some light into the topic. Neither is our team responsible nor do we have any sort of control on this process. I …

Important alert for Oracle Database and GI RU 19.18.0 on Linux

Posted on January 25, 2023 by Mike.Dietrich Flaws and Pitfalls Patch Recommendation 59

Some of you may have seen the alert already released yesterday. And thanks to Peter Lehmann again for alerting me. When you logon to MyOracle Support, you will find it simply in the alert section to the left. On Jan 25, 2023, this Important alert for Oracle Database and GI RU 19.18.0 on Linux has been released.

Important alert for Oracle Database and GI RU 19.18.0 on Linux

Photo by Gary Bendig on Unsplash

What is the situation?

Due to an issue described in MOS Note: 2923428.1 – LMON trace file with repeated entries of “Submitting asynchronized dump request” the Release Updates (RU) 19.18.0 for the Oracle Database and …

Patching all my environments with the January 2022 Patch Bundles

Posted on January 20, 2022 by Mike.Dietrich Patch Recommendation 60

It’s patching time. When I checked an SR and had a quick discussion with a customer yesterday, Peter reminded me that it’s patching day. And at about 20:00h CET the new patch bundles appeared on MOS. So let me show you again Patching all my environments with the January 2022 Patch Bundles for 11.2.0.4, 12.2.0.1, 19c and 21c.

Patching all my environments with the January 2022 Patch Bundles

Photo by Mehmet Turgut Kirkgoz on Unsplash

As usual, an important annotation upfront: I patch in-place due to space issues. But in reality, you please patch always out-of-place with a separate home. Please see this blog post about how to apply the …

CPU October 2019 Patch Bundles are available

Posted on October 16, 2019 by Mike.Dietrich Patch Recommendation 2

As of Oct 15, 2019, the CPU October 2019 Patch Bundles are available for download. So let me do the quarterly exercise to download and install all of them into my various environments.

CPU October 2019 Patch Bundles are available

Critical Patch Alert October 2019

At first, I check the Alert and the Risk Matrix whether critical issues with a high risk score are included. I will install the patch bundles anyway, but I’m curious. In my particular case I will take care on the database only. You of course will check for other products you are using, too.

January 2018 Database RU and RUR got released

Posted on January 17, 2018 by Mike.Dietrich Patch Recommendation 8

It’s patching time again. The January 2018 Database RU and RUR got released. And of course other patch bundles as well. And of course not only for the database but for many other products as well. I try to summarize below the most important information and links.

January 2018 Database RU and RUR got released

First of all always have a look at the Critical Patch Alert and the Risk Matrix:

Then you’ll see that there are three fixes included for vulnerabilities which may be remotely exploitable without authentication, …

Ouch, this hurts: bug 21923026 – patch Oracle 12c Home before upgrading if you have OLTP Compression in 11g

Posted on November 2, 2015 by Mike.Dietrich Flaws and Pitfalls Oracle Database 12c Patch Recommendation 1

Patch

Actually I’d consider this as a real serious issue which may affect many customers with larger deployments using the Advanced Compression Option’s OLTP Compression.

I came across it as Don Seiler full of anger twittered some bad words about Oracle Database 12.1.0.2.. We’ve exchanged a good number of emails – and I could see the issues Don and his colleagues got while assisting a customer to go live on Oracle Database 12c.

The most interesting one happened on the physical standby after the primary got upgraded. The MRP failed with an ORA-600.

Issue

After upgrading from Oracle 11.2.0.3 to …

Alert

Are there security fixes included? Which CVEs?

Release Updates are the primary vehicle

Patching recommendations: Which route is the best? RUs, MRPs, n-1??

Prelude

Hide and Seek with RU 19.18.0

Heads Up!

Important alert for Oracle Database and GI RU 19.18.0 on Linux

What is the situation?

Patching all my environments with the January 2022 Patch Bundles

CPU October 2019 Patch Bundles are available

Critical Patch Alert October 2019

January 2018 Database RU and RUR got released

January 2018 Database RU and RUR got released

Ouch, this hurts: bug 21923026 – patch Oracle 12c Home before upgrading if you have OLTP Compression in 11g

Issue

Archives

Categories

Upgrade @YouTube

RSS Feed for Upgrade your Database – NOW!

Subscribe via Email

Recent Posts