Security

Can I apply an RU to a home with an MRP?

Posted on September 2, 2026 by Mike.Dietrich Patch Recommendation 0

This question came up by a customer, and it was referring to the FAQ MOS note for MRPs. In brief, it was stated that you could apply a higher RU into a home where an MRP up to MRP3 had been installed in the previous home. So the question raised to me was: Can I apply an RU to a home with an MRP as it was mentioned in the FAQ document?

Can I apply an RU to a home with an MRP?

Photo by Liana S on Unsplash

Which note, and what’s the statement?

The FAQ2283 – Introducing Monthly Recommended Patches (MRPs) and FAQ stated the following under Q18:

Q18:

Join us in Bengaluru and Hyderabad for SANGAM 2026

Posted on July 16, 2026 by Mike.Dietrich Conference 0

Many of you may have seen the social media posts already. But just in case you were in doubt, please get your ticket asap and join us in Bengaluru and Hyderabad for SANGAM 2026 this weekend. AIOUG (All India Oracle User Group – or more modern, AI Oracle User Group) is organizing the biggest and best Oracle conference in the APAC region with world-class speakers.

Still not convinced yet?

I understand, it will be on Saturday and Sunday. Your weekend.

But guess what: It’s our weekend, too.

Don’t waste time relaxing on your sofa – join us, come by, …

CPU, CSPU, MRP, RU – some clarifications

I just returned from a 2 week vacation in Asia this weekend. And I was following from a distance. On May 28, the first CSPUs got released, some MOS notes got published. There are a lot of patching options now. CPU, CSPU, MRP, RU – some clarifications may be needed.

CPU, CSPU, MRP, RU - some clarifications

Photo by Daniel Salcius on Unsplash

The Prelude

On May 4, 2026, I published this blog post Patch your database against AI cybersecurity threads following these two announcements:

Patch your databases against AI-enabled cybersecurity threats

Posted on May 4, 2026 by Mike.Dietrich Oracle AI Database 26ai Oracle Database 19c Patch Recommendation Security 35

I guess you all read the announcements and predictions over the past weeks. New AI models and improvements to existing models may allow to find security issues in existing software much quicker. While this sounds alarming on one side (yes, it does), it also enables software vendors to secure their software. But in order to benefit from it, you must patch your databases against AI-enabled cybersecurity threats.

Patch your databases against AI-enabled cybersecurity threats

Photo by Scott Webb on Unsplash

Read the official announcements

At first, please read the official announcements released here:

Accelerating Vulnerability Detection and Response at Oracle (3 min read – April 29,

News and updates in opatch 12.2.0.1.45 (Jan 2025)

Posted on January 23, 2025 by Mike.Dietrich Patch Recommendation 10

Are you interested in the news and updates in opatch 12.2.0.1.45 (Jan 2025)? This is the opatch version being released on January 21, 2025 together with the January Release Updates (RUs) and other patch bundles.

Photo by Khyta on Unsplash

What’s new in opatch 12.2.0.1.45 (Jan 2025)?

When I refer to opatch, I mean the opatch tool for the Oracle Database installations. You can always download it via OPatch Download: Patch 6880880. You will use this opatch for Oracle Database 12.1.0.2, 12.2.0.1, 18c, 19c and 21c. In addition, the same changes and updates are present in opatch 11.2.0.3.49 …

DOAG 2023 Conference – our talks this year

Posted on November 16, 2023 by Mike.Dietrich Conference 2

Time flies so quickly – and I guess I wrote this phrase already plenty of times on the blog. It is already November, and just a few weeks until Christmas. And this year, DOAG conference in Nuernberg is again in November – which means: next week. So, let me give you a quick overview for DOAG 2023 Conference – our talks this year.

DOAG 2023 Conference - our talks this year

Photo by Thomas Winkler on Unsplash

When, who, where?

At first, DOAG 2023 will happen from November 21-24, 2023 at the usual superb location in Nuernberg. You find all the details on the DOAG webpage. …

Why you simply can’t upgrade from Oracle 11g or 12c to Oracle 23c

Posted on August 1, 2022 by Mike.Dietrich Release Schedule 5

It’s time for a Monday morning rant. I receive more and more questions which all start similar. “My customer is on Oracle 11g and/or 12c, and want to know whether the next long term support release …“. Now let me clarify Why you simply can’t upgrade from Oracle 11g or 12c to Oracle 23c. And why you MUST upgrade to Oracle Database 19c.

Why you simply can't upgrade from Oracle 11g or 12c to Oracle 23c

Photo by SpaceX on Unsplash

What is the intention?

After a lot of discussions across many regions, especially in JAPAC during the past weeks I realized that there is a reason for all …

Patching all my environments with the January 2022 Patch Bundles

Posted on January 20, 2022 by Mike.Dietrich Patch Recommendation 60

It’s patching time. When I checked an SR and had a quick discussion with a customer yesterday, Peter reminded me that it’s patching day. And at about 20:00h CET the new patch bundles appeared on MOS. So let me show you again Patching all my environments with the January 2022 Patch Bundles for 11.2.0.4, 12.2.0.1, 19c and 21c.

Patching all my environments with the January 2022 Patch Bundles

Photo by Mehmet Turgut Kirkgoz on Unsplash

As usual, an important annotation upfront: I patch in-place due to space issues. But in reality, you please patch always out-of-place with a separate home. Please see this blog post about how to apply the …

Welcome onboard at Oracle: Rodrigo Jorge

Posted on June 8, 2021 by Mike.Dietrich General 3

We are thrilled to announce that as of June 7, 2021 we have a new member in our Product Management team: Rodrigo Jorge joins our group as Product Manager for Database Cloud Migrations, Upgrade and Patching. Many of you may know Rodrigo already. He “was” an Oracle ACE Director until June 6, presented at many conferences and user group events – and he has an excellent technical blog. We are really excited to welcome Rodrigo at Oracle.

Welcome onboard at Oracle: Rodrigo Jorge

Photo by Raphael Nogueira on Unsplash

Who is Rodrigo?

Rodrigo is joining us from Accenture / Enkitec. He’s very well known in

Patching all my environments with the April 2021 Patch Bundles

Posted on April 21, 2021 by Mike.Dietrich Patch Recommendation 62

Oh well, time flies. And it is April 2021, and hence I will start Patching all my environments with the April 2021 Patch Bundles. In my case, this will be 19.11.0 and 12.2.0.1 Release Updates. But there will be an additional blog post for the OJVM bundle, too.

Photo by Piron Guillaume on Unsplash

No RURs for 12.2.0.1 – and Oracle 11.2.0.4 left Extended Support

Posted on January 26, 2021 by Mike.Dietrich Patch Recommendation Release Schedule 0

Last week I blogged about the quarterly patching fun when applying the Release Updates to my environments. But I completely forget to mention and explain a few things. There are No RURs for 12.2.0.1 – and Oracle 11.2.0.4 left Extended Support.

No RURs for 12.2.0.1 - and Oracle 11.2.0.4 left Extended Support

Photo by Md Mahdi on Unsplash

No Release Update Revisions for Oracle 12.2.0.1

Thanks to my friend Rodrigo Jorge who messaged me on the weekend. He goes way deeper with applying the quarterly patches and highlights the differences. And he recognized and blogged already about the fact that there are no RURs available for Oracle 12.2.0.1.

And …

Patching all my environments with the January 2021 Patch Bundles

Posted on January 20, 2021 by Mike.Dietrich Patch Recommendation 40

Groundhog day on the upgrade blog. It’s time for my quaterly Patching all my environments with the January 2021 Patch Bundles blog post. And still no RAC and ASM. Sorry for that … too many virtual events and other tasks since months unfortunately.

Photo by Bofu Shaw on Unsplash

Security Alert January 2021

Find …

JDK patching happens with every RU since January 2020

Posted on April 22, 2020 by Mike.Dietrich Patch Recommendation 29

A while ago, a customer asked me whether he needs to apply JDK patches separately. He discovered that the JDK in the $ORACLE_HOME is quite outdated. But there was no clear answer available. And the MOS Note he pointed me to, seemed to be quite incomplete. But times have changed. And JDK patching happens with every RU since January 2020.

Photo by David Billings on Unsplash

JDK who?

JDK stands for Java Development Toolkit. As the Wikipedia article explains, “the JDK includes a private JVM and a few other resources to finish the development of a Java Application”. …

Oracle Security Alerts for July 2019 got published

Posted on July 16, 2019 by Mike.Dietrich Patch Recommendation 14

It’s patching day. And I’m already downloading the patch bundles for all my installations (11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c). The Oracle Security Alerts for July 2019 got published today.

Oracle Security Alerts for July 2019 got published

Patch Advisory and Risk Matrix

You can find the July 2019 Patch Advisory here. I checked the risk matrix for the database. It contains 8 new fixes for the database server. Please pay attention that 3 of the vulnerabilities may be exploitable from a client without an Oracle Database server being installed. The highest score is 9.8.

Please check the risk matrix by yourself:

Behavior Change: READ privilege for user SYSTEM in Oracle 12.2

Posted on December 1, 2017 by Mike.Dietrich Behavior Change 2

All credits here go to Marcel Pils from Logicalis, a German Oracle partner. Thanks Marcel! In Oracle 12.2 there’s an interesting behavior change: READ privilege for user SYSTEM in Oracle 12.2.

Some Background Information

In Oracle 12.1 the READ privilege has been introduced. Please find more information in the Oracle 12.1 Security Guide: New READ Object Privilege and READ ANY TABLE System Privilege for SELECT Operations. The idea behind the READ object and the READ ANY TABLE system privileges is that you can enable users query database tables, views, materialized views, and synonyms. But they can’t lock rows …

Download and use the Oracle Database Security Assessment Tool

Posted on September 18, 2017 by Mike.Dietrich Security 11

I visit customers on a regular basis. And when we sit together in front of the machine I sometimes spot tiny little things which may impose a security risk. This could be things such as SEC_CASE_SENSITIVE_LOGON=FALSE or the use of UTL_FILE_DIR or something else. To detect such sensitive spots you should download and use the Oracle Database Security Assessment Tool (DBSAT).

CREATE SESSION SELECT on SYS.REGISTRY$HISTORY Role SELECT_CATALOG_ROLE Role DV_SECANALYST (wenn Database Vault aktiviert ist) Role AUDIT_VIEWER (nur 12c) Role CAPTURE_ADMIN (nur 12c) SELECT on SYS.DBA_USERS_WITH_DEFPWD (11g und 12c) SELECT on AUDSYS.AUD$UNIFIED (nur 12c)

DBSAT – Oracle Database Security Assessment Tool – Collector and Reporter Components

Download and use the Oracle Database Security Assessment Tool

First of all, you need to download the tool from MyOracle Support:

MOS Note:2138254.1 – Oracle Database Security

Having some fun with SEC_CASE_SENSITIVE_LOGON and ORA-1017

Posted on April 24, 2017 by Mike.Dietrich Behavior Change Oracle Database 12.2.0.1 Security 24

The init.ora/spfile parameter SEC_CASE_SENSITIVE_LOGON got deprecated since Oracle Database 12.1.0.1. This means, we don’t do any further developments to it, you shouldn’t change it from its default TRUE – and if you still do you’ll receive a nice warning during STARTUP of your database:

SQL> alter system set sec_case_sensitive_logon=false scope=spfile;

System altered.

SQL> startup force
ORA-32004: obsolete or deprecated parameter(s) specified for RDBMS instance
ORACLE instance started.

Recently a customer asked me if we’d changed the behavior of this parameter in Oracle Database 12c Release 2 as he receives now an ORA-1017: Invalid username or password error when …

Unified Auditing – Performance Improvements in Oracle 12.1.0.2

Posted on April 19, 2017 by Mike.Dietrich Auditing Performance Tuning Security 14

Unified Auditing got introduced in Oracle Database 12.1.

Unified Auditing - Performance Improvements in Oracle 12.1 The downsides of the “old” auditing facilities became obvious when too many users had activities or transactions at the same time leading to audit records being written into AUD$. Contention was a typical issue. The same thing happened when too many users tried to login at the same time. Furthermore protecting the auditing information required Database Vault as there was no default protection available.

This – and some other things – should be remedied by Unified Auditing which is available since Oracle Database 12c. It gets enabled in sort of a “mixed …

Oracle 12.1.0.2 – Security Behavior Change with non-SYSDBA Triggers

Posted on May 26, 2015 by Mike.Dietrich Behavior Change Flaws and Pitfalls Oracle Database 12c Security 6

Oracle Database Security Sometimes things get revealed at unexpected occasions. This one happened during a recent customer upgrade to Oracle Database 12c with a 3rd party geospatioanl application installed (ESRI).

At the very end of the upgrade the customer saw many ORA-1031 (insufficient privileges) errors and it seemed to be that nothing was working correctly anymore.

This happened during the run of catupend.sql. The following code path in catupend.sql causes the error.

cursor ddl_triggers
is
select o.object_id from dba_triggers t, dba_objects o
where t.owner = o.owner and t.trigger_name = o.object_name and o.object_type = 'TRIGGER'
and (t.triggering_event like '%ALTER%' or t.triggering_event like '%DDL%');

New Behaviour in Oracle Database 12c and 11.2.0.4: SELECT ANY DICTIONARY with reduced privilege set

Posted on March 2, 2015 by Mike.Dietrich Behavior Change Oracle Database 12c Security 5

You’ve just upgraded to Oracle Database 12c – but your favorite admin tool receives an ORA-1031: Insufficient Privileges after connection?

Then the reason may be the reduced set of privileges for the SELECT ANY DICTIONARY privilege. This privilege does not allow access to tables USER$, ENC$ and DEFAULT_PWD$, LINK$, USER_HISTORY$, CDB_LOCAL_ADMINAUTH$, and XS$VERIFIERS. Actually such changes are not new. For instance in Oracle 10.1 we removed the access to LINK$ in SELECT ANY DICTIONARY (well, this may have happened because the dblink’s password was stored in clear text in LINK$ – a misbehavior which is fixed since …

October 2013 PSUs and CPUs – News for 12c

Posted on October 16, 2013 by Mike.Dietrich Patch Recommendation 0

Last night CET the most recent Patch Set Updates (PSU) and Critical Patch Updates (CPU aka SPU) got published on MOS. And there’s a significant and remarkable change for Oracle Database 12c onwards. MOS Note: 1571391.1 – Patch Set Update and Critical Patch
Update October 2013 Availability Document says:

2.1 Database Security Patching from 12.1.0.1 Onwards

Starting with Oracle Database version 12.1.0.1, Oracle only provides
Patch Set Updates (PSU) to meet the Critical Patch Update (CPU) program
requirements for security patching. Security Patch Updates (SPU) will no
longer be available. Oracle has moved to this simplified model due to
popular

Security

Which note, and what’s the statement?

Still not convinced yet?

The Prelude

Read the official announcements

What’s new in opatch 12.2.0.1.45 (Jan 2025)?

When, who, where?

What is the intention?

Who is Rodrigo?

No Release Update Revisions for Oracle 12.2.0.1

Security Alert January 2021

JDK who?

Patch Advisory and Risk Matrix

Some Background Information

Download and use the Oracle Database Security Assessment Tool

Unified Auditing got introduced in Oracle Database 12.1.

2.1 Database Security Patching from 12.1.0.1 Onwards

Archives

Categories

Upgrade @YouTube

Subscribe via Email

Recent Posts