从别人的博客粘过来,写得真心不错,分享给更多需要的朋友!!
1、CPU、PSU和SPU
CPU:Critical Patch Update(关键补丁更新), 开始于2005年1月,Oracle对于其产品每个季度发行一次安全补丁包,通常是为了修复产品中的安全隐患。2012年10月的关键补丁更新改名为Security Patch Update (SPU)。
PSU:Patch Set Update(补丁集更新),Oracle对于其产品每个季度发行一次的补丁包,包含了bug的修复。Oracle选取被用户下载数量多,且被验证过具有较低风险的补丁放入到每个季度的PSU中。在每个PSU中不但包含Bug的修复而且还包含了最新的CPU。PSU通常随CPU一起发布。Patch Set Updates (PSU) are the same cumulative patches that include both the security fixes and priority fixes. The key with PSUs is they are minor version upgrades (e.g., 11.2.0.1.1 to 11.2.0.1.2). Once a PSU is applied, only PSUs can be applied in future quarters until the database is upgraded to a new base version.
SPU:Security Patch Update(安全补丁更新),Security Patch Update (SPU) terminology is introduced in the October 2012 Critical Patch Update as the term for the quarterly security patch. SPU patches are the same as previous CPU patches, just a new name. For the database, SPUs can not be applied once PSUs have been applied until the database is upgraded to a new base version.
CPU是累积的(Cumulative),即最新的CPU补丁已经包含以往的CPU补丁,所以只要安装最新的CPU补丁即可。
PSU通常也是增量的,大部分PSU可以直接安装,但有些PSU则必须要求安装了上一 个版本的PSU之后才能继续安装,要仔细看各个PSU的Readme文档。
2、Oracle数据库
2013年8月27日,Oracle最终发布了11.2.0.4版本,这将是Oracle 11gR2的终极版本。从下图上可以看到,Oracle11g在2007年发布,将在2017年底结束扩展支持,跨度为11年,这是一个重量级的版本,扩 展了10g开始的大规模自动化特性,使Oracle在这个方向真正成熟起来,11g之后,再无Grid,Oracle进入了Cloud的时代,12c的舞台已经搭好。
11.2.0.4 13390677 11.2.0.4.0 PATCH SET FOR ORACLE DATABASE SERVER
11.2.0.3.8 16902043 DATABASE PATCH SET UPDATE 11.2.0.3.8 (INCLUDES CPUOCT2013)
11.2.0.3.7 16619892 DATABASE PATCH SET UPDATE 11.2.0.3.7 (INCLUDES CPUJUL2013)
11.2.0.3.6 16056266 DATABASE PATCH SET UPDATE 11.2.0.3.6 (INCLUDES CPUAPR2013)
11.2.0.3.5 14727310 DATABASE PATCH SET UPDATE 11.2.0.3.5 (INCLUDES CPUJAN2013):
11.2.0.3.4 14275605 DATABASE PATCH SET UPDATE 11.2.0.3.4 (INCLUDES CPUOCT2012)
11.2.0.3.3 13923374 DATABASE PATCH SET UPDATE 11.2.0.3.3 (INCLUDES CPU JUL2012):
11.2.0.3.2 13696216 DATABASE PATCH SET UPDATE 11.2.0.3.2 (INCLUDES CPU APR2012)
11.2.0.3.1 13343438 DATABASE PATCH SET UPDATE 11.2.0.3.1 (INCLUDES CPU JAN2012)
11.2.0.3 10404530 11.2.0.3.0 PATCH SET FOR ORACLE DATABASE SERVER
11.2.0.2.11 16619893 DATABASE PATCH SET UPDATE 11.2.0.2.11 (INCLUDES CPUJUL2013)
11.2.0.2.10 16056267 DATABASE PATCH SET UPDATE 11.2.0.2.10 (INCLUDES CPUAPR2013)
11.2.0.2.9 14727315 DATABASE PATCH SET UPDATE 11.2.0.2.9 (INCLUDES CPUJAN2013):
11.2.0.2.8 14275621 DATABASE PATCH SET UPDATE 11.2.0.2.8 (INCLUDES CPUOCT2012)
11.2.0.2.7 13923804 DATABASE PATCH SET UPDATE 11.2.0.2.7 (INCLUDES CPU JUL2012)
11.2.0.2.6 13696224 DATABASE PATCH SET UPDATE 11.2.0.2.6 (INCLUDES CPU APR2012)
11.2.0.2.5 13343424 DATABASE PATCH SET UPDATE 11.2.0.2.5 (INCLUDES CPU JAN2012)
11.2.0.2.4 12827726 DATABASE PSU 11.2.0.2.4 (INCLUDES CPUOCT2011)
11.2.0.2.3 12419331 DATABASE PSU 11.2.0.2.3 (INCLUDES CPUJUL2011)
11.2.0.2.2 11724916 DATABASE PSU 11.2.0.2.2 (INCLUDES CPUAPR2011)
11.2.0.2.1 10248523 DATABASE PSU 11.2.0.2.1
11.2.0.2 10098816 11.2.0.2.0 PATCH SET FOR ORACLE DATABASE SERVER
11.2.0.1.6 12419378 DATABASE PSU 11.2.0.1.6 (INCLUDES CPUJUL2011)
11.2.0.1.5 11724930 DATABASE PSU 11.2.0.1.5 (INCLUDES CPUAPR2011)
11.2.0.1.4 10248516 DATABASE PSU 11.2.0.1.4 (INCLUDES CPUJAN2011)
11.2.0.1.3 9952216 DATABASE PSU 11.2.0.1.3 (INCLUDES CPUOCT2010)
11.2.0.1.2 9654983 DATABASE PSU 11.2.0.1.2 (INCLUDES CPUJUL2010)
11.2.0.1.1 9352237 DATABASE PSU 11.2.0.1.1
Oracle 11.2.0.4该PatchSet的补丁号为:13390677 。
安装类型 | 压缩文件 |
Oracle Database(includes Oracle Database和Oracle RAC)安装数据库至少需要这两个安装包 | p13390677_112040_Linux-x86-64_1of7.zip p13390677_112040_Linux-x86-64_2of7.zip |
Oracle Grid Infrastructure(包括Oracle ASM、Oracle Clusterware和Oracle Restart) | p13390677_112040_Linux-x86-64_3of7.zip |
Oracle Database Client | p13390677_112040_Linux-x86-64_4of7.zip |
Oracle Gateways | p13390677_112040_Linux-x86-64_5of7.zip |
Oracle Examples | p13390677_112040_Linux-x86-64_6of7.zip |
Deinstall | p13390677_112040_Linux-x86-64_7of7.zip |
3、漏洞修复
Product Home | Patch | Advisory Number | Comments |
---|---|---|---|
Oracle Database home | Database 11.2.0.4 SPU Patch 18139690, or Database 11.2.0.4.2 PSU Patch 18031668, or GI 11.2.0.4.2 PSU Patch 18139609, or Microsoft Windows (32-Bit) & x64 (64-Bit) BP 4 Patch 18296644, or later; Quarterly Database Patch for Exadata (April 2014) 11.2.0.4.6 BP Patch 18371656, or Quarterly Full Stack download for Exadata (April 2014) BP Patch 18370227 | CVE-2014-2406, CVE-2014-2408 |
Product Home | Patch | Advisory Number | Comments |
---|---|---|---|
Oracle Database home | Database 11.2.0.4 SPU Patch 17551709, or Database 11.2.0.4.1 PSU Patch 17478514, or Microsoft Windows (32-Bit) & x64 (64-Bit) BP 1 Patch 17987366, or later; Quarterly Database Patch for Exadata (January 2014) BPPatch 17904156, or Quarterly Full Stack download for Exadata (January 2014) BP Patch 17816151 | CVE-2013-5858, CVE-2014-0377, CVE-2014-0378 |
4、安装SPU补丁
--检查当前OPatch版本,必须最少为OPatch utility version 11.2.0.3.4 or later
$ echo $ORACLE_HOME
$ export PATH=$PATH:$ORACLE_HOME/OPatch
$ opatch version
OPatch Version: 11.2.0.3.4
OPatch succeeded.
--停止Oracle相关进程
$ lsnrctl stop
$ emctl stop dbconsole
$ sqlplus / as sysdba
SQL> shutdown immediate;
--安装
$ cd /opt/patch/17551709
$ opatch napply -skip_subset -skip_duplicate
Oracle 中间补丁程序安装程序版本 11.2.0.3.4
版权所有 (c) 2012, Oracle Corporation。保留所有权利。
Oracle Home : /u01/app/oracle/product/11.2.0/dbhome_1
Central Inventory : /u01/app/oraInventory
from : /u01/app/oracle/product/11.2.0/dbhome_1/oraInst.loc
OPatch version : 11.2.0.3.4
OUI version : 11.2.0.4.0
Log file location : /u01/app/oracle/product/11.2.0/dbhome_1/cfgtoollogs/opatch/opatch2014-07-03_08-29-32上午_1.log
Verifying environment and performing prerequisite checks...
Checking skip_duplicate
Checking skip_subset
OPatch continues with these patches: 17551709 17811429 17811438 17811447 17811456
是否继续? [y|n]
y
User Responded with: Y
All checks passed.
请关闭本地系统上在此 ORACLE_HOME 之外运行的 Oracle 实例。
(Oracle 主目录 = ‘/u01/app/oracle/product/11.2.0/dbhome_1‘)
本地系统是否已准备打补丁? [y|n]
y
User Responded with: Y
Backing up files...
Applying interim patch ‘17551709‘ to OH ‘/u01/app/oracle/product/11.2.0/dbhome_1‘
正在为组件 oracle.rdbms.rsf, 11.2.0.4.0 打补丁...
正在为组件 oracle.rdbms, 11.2.0.4.0 打补丁...
Verifying the update...
Applying interim patch ‘17811429‘ to OH ‘/u01/app/oracle/product/11.2.0/dbhome_1‘
正在为组件 oracle.rdbms, 11.2.0.4.0 打补丁...
Verifying the update...
Applying interim patch ‘17811438‘ to OH ‘/u01/app/oracle/product/11.2.0/dbhome_1‘
正在为组件 oracle.rdbms, 11.2.0.4.0 打补丁...
Verifying the update...
Applying interim patch ‘17811447‘ to OH ‘/u01/app/oracle/product/11.2.0/dbhome_1‘
正在为组件 oracle.rdbms, 11.2.0.4.0 打补丁...
正在为组件 oracle.sdo, 11.2.0.4.0 打补丁...
正在为组件 oracle.sdo.locator, 11.2.0.4.0 打补丁...
Verifying the update...
Applying interim patch ‘17811456‘ to OH ‘/u01/app/oracle/product/11.2.0/dbhome_1‘
正在为组件 oracle.rdbms, 11.2.0.4.0 打补丁...
正在为组件 oracle.rdbms.rsf, 11.2.0.4.0 打补丁...
Verifying the update...
Patches 17551709,17811429,17811438,17811447,17811456 successfully applied.
Log file location: /u01/app/oracle/product/11.2.0/dbhome_1/cfgtoollogs/opatch/opatch2014-07-03_08-29-32上午_1.log
OPatch succeeded.
--启动数据库,确定更新成功
cd $ORACLE_HOME/rdbms/admin
sqlplus /nolog
SQL> CONNECT / AS SYSDBA
SQL> STARTUP
SQL> @catbundle.sql cpu apply
--在dba_registry_history中查看
SQL> select version, id, bundle_series, comments from dba_registry_history;
SQL> QUIT
本文出自 “李鹏飞oracle” 博客,请务必保留此出处http://lipengfei666666.blog.51cto.com/6384154/1639698
原文地址:http://lipengfei666666.blog.51cto.com/6384154/1639698