The Critical Patch Update (CPU) for January 2011 was released on January 18, 2011. Oracle strongly recommends applying the patches as soon as possible.
The Critical Patch Update Advisory is the starting point for relevant information. It includes a list of products affected, pointers to obtain the patches, a summary of the security vulnerabilities, and links to other important documents.
Supported Products that are not listed in the "Supported Products and Components Affected" Section of the advisory do not require new patches to be applied.
Also, it is essential to review the Critical Patch Update supporting documentation referenced in the Advisory before applying patches, as this is where you can find important pertinent information.
The Critical Patch Update Advisory is available at the following location:
The next four Critical Patch Update release dates are:
Hi Steven,
The EBS note (1271167.1) suggests that there is a database CPU for 11.2.0.1, but not for 11.2.0.2.
Looking at the DB note (1263374.1) there is an 11.2.0.2 PSU patch (10248523).
Do I infer from the missing 11.2.0.2 in the EBS note that Oracle are suggesting we don not apply the 11.2.0.2 DB PSU to our EBS databases?
Thanks
Des
Hi, Des,
Unfortunately, I'm not permitted to discuss security issues on this blog.
Your best bet would be to log a formal Service Request via My Oracle Support (formerly Metalink) to get one of our specialists engaged.
Please feel free to forward your Service Request number to me if it gets stuck in the support process for some reason.
Regards,
Steven
Steven,
There is a lot of confusion around the Security Alert for the JRE with the Floating Point updater and vulnerability. Could you please cover it in your blog?
Confusion around:
- generation of rt.jar file
- .22 build 3 (certified) or .23 (certified) or .24 (not certified) - which JRE?
- does .24 have the *new* rt.jar file?
We have a mandate that these types of fixes have to be applied in 24 hours...:-(
Thanks!!
John
John,
JRE 1.6.0_24 is certified; see:
Sun JRE 1.6.0_24 Certified with Oracle E-Business Suite
http://blogs.oracle.com/stevenChan/2011/02/sun_jre_160_24_ebs.html
Regards,
Steven
For R12.1.2 do I apply just the patch for forms or also for infrustructure and middleware from note 738923.1 ?
I'm confused on what constitues the fusion middleware for R12.1.2.
Note Oracle E-Business Suite Releases 11i and 12 Critical Patch Update Knowledge Document (April 2011) [ID 1272097.1]
Say's this which is wonderful to see written out:
Oracle E-Business Suite Release 12 installs three Oracle homes - one each for the Oracle Database,
Oracle Fusion Middleware 10.1.3 (Java), and
Oracle Fusion Middleware 10.1.2 (Tools).
But then it doesn't says, what is The Oracle home:
Table 1: Information on patches to apply to Oracle E-Business Suite Database Oracle home
Refer's each version to note: Refer to My Oracle Support Knowledge Document 738923.1
This note breaks down the Fusion Middleware into each of it's commponents.
There is the infrustructure home, middeware home and forms to name a few of the things on the list.
Finally my question:
For R12.1.2 do I apply just the patch for forms or also for infrustructure and middleware?
Hello, Mo,
We can provide general conceptual guidance here, but I'm afraid that this blog isn't the best place to get technical support for specific issues like the one that you're working through.
Your best bet would be to log a formal Service Request via My Oracle Support (formerly Metalink) to get one of our CPU specialists engaged. Support can help clarify which patches need to be applied to which components for your environment.
Regards,
Steven