Critical Patch Update for Oracle Fusion Middleware - CPU July 2013

The latest Critical Patch Update (CPU) has been released for Oracle products. Start your reading here

Critical Patch Updates, Security Alerts and Third Party Bulletin 

This is the home page containing links to all "Critical Patch Updates" released to date, along with sections detailing 

  • Security Alerts 
  • Third Party Bulletin
  • Public Vulnerabilities Fixed
  • Policies
  • Reporting Security Vulnerabilities

On this page you will find the link to the

Oracle Critical Patch Update Advisory - July 2013

The advisory lists the support documents that cover the patch availability for all Oracle products.

For Oracle Fusion Middleware, go to:

Patch Set Update and Critical Patch Update July 2013 Availability Document [ID 1548709.1]

Highlights - WebLogic Server Patch Set Updates (PSU)

  • WebLogic Server - 12.1.1.0.5
  • WebLogic Server - 10.3.6.0.5

July 2013 marks the end of CPU/PSU patches for Weblogic Server 10.3.5. Looking forward, we will see the final CPU patches for Weblogic Server 9.2.3.0 and 9.2.4.0 in October 2013

If you are hit any unexpected errors when applying the CPU patches, check out the known issues documented in these two support documents.

  • Critical Patch Update July 2013 Oracle Fusion Middleware Known Issues  [ID 1548690.1]
  • Critical Patch Update July 2013 Database Known Issues [ID 1546428.1]

And lastly, for an informal summary of what the Critical Patch Update fixes, check out the blog posts by "Oracle Software Security Assurance" team

July 2013 Critical Patch Update Released

Comments:

I have been searching your site for over 3 hours trying to find where to download CPU-JUL-2013 with no luck, every time i seem to find what I am looking for I get sent to an "Add Support Identifiers" page. Please forward me a link to download patches.

Posted by guest on September 25, 2013 at 08:49 PM BST #

Hi

As you have probably discovered the links to the Fusion Middleware CPU patches are to be found in My Oracle Support Knowledge Article:

Patch Set Update and Critical Patch Update July 2013 Availability Document [ID 1548709.1]

For example, if you looking for the latest WebLogic Server 10.3.x CPU, you will find the link in

"Table 128 Patch Set Update Availability for Oracle WebLogic Server"

PSU 10.3.6.0.5 Patch 16619891

https://support.oracle.com/epmos/faces/ui/patch/PatchDetail.jspx?patchId=16619891

From your comment, it sounds like you have clicked on a Patch link such as the one above but either

- You are having a problem logging into My Oracle Support

or (more likely)

- You have logged in successfully, but there is some issue with your CSI which is preventing access to the patch

If I am on the right lines, contact Support Sales. They will be happy to help you. The Support Sales telephone numbers for each country / region can be found on this web page

http://www.oracle.com/us/support/contact/index.html

Posted by Dan on September 26, 2013 at 09:57 AM BST #

Hi Dan, my organization has Support Identifiers and DBAs with the ability to download patches. I need to find which patch will solve the IAVA hits on a workstation. The Oracle database Version is 11.1.0.7.0 and the alert says CPU-JUL-2013 & older. Looking at the advisory page, it says the Oracle Fusion Middleware document number is 1548709.1, so my question is that the correct place to find the downloadable patch? Please let me know. I have to ask the DBA to download the patch. Thank you, Mike J.

Posted by guest on October 30, 2013 at 07:23 PM GMT #

Hi Mike

The general answer to your question is that links to the Critical Patch Update patches are to be found in the My Oracle Support knowledge articles - the links to which are found on the Oracle Critical Patch Advisory Web Page. The latest advisory page being this one

http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html

For info, the Critical Patch Update for October 2013 was released approximately two weeks ago. I have just published a short blog to highlight the Fusion Middleware documents which pertain to it.

https://blogs.oracle.com/fmwinstallproactive/entry/critical_patch_update_for_oracle3

I am not familiar with IAVA .. not sure if this a typo - IAVA = JAVA - or an acronym for something else. Which alert are you referring to? Can you provide the support document id or link?

Regards Dan

Posted by guest on October 31, 2013 at 08:55 AM GMT #

IAVA = Information Assurance Vulnerability Alert
http://en.wikipedia.org/wiki/Information_Assurance_Vulnerability_Alert

The documentation of the CPU-JUL-2013 says:
"3.3.1 Preinstallation Instructions
1. Ensure that your Oracle Database installation is the same release for which you are applying this patch. In other

words, only apply the Release 11.2.0.3 Bundle patch to an Oracle Database Release 11.2.0.3."

The workstation that I need to patch has database version 11.1.0.7.0, so I need to know which Release applies to that version. I thought the latest Release would work, but it's for a newer version. Because of a project they are working on, they don't want to upgrade now.

Can you tell me which CPU handles 11.1.0.7.0? I have been looking but so far have not found it.

Thank you!

Posted by guest on November 06, 2013 at 03:24 PM GMT #

Hi Mike

Thanks for the clarification regards IAVA. Apologies for my ignorance.

Regards CPUJUL2013 for Oracle Database 11.1.0.7

[http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html]

On this page, clicking on the link "Database" in the row labelled "Oracle Database 11g Release 1, version 11.1.0.7" will take you to the My Oracle Support knowledge article:

Patch Set Update and Critical Patch Update July 2013 Availability Document (Doc ID 1548709.1)
[https://support.oracle.com/epmos/faces/DocumentDisplay?id=1548709.1]

Scan down to

Table 15 Patch Availability for Oracle Database 11.1.0.7

and will find the relevant patches for this database version. I am struggling to find where "3.3.1 Preinstall Instructions", you quote above, come from. The wording suggests it comes from a 11.2 specific patch README. If I am right, then yes, you are looking at the wrong patch. Database 11.1 and 11.2 are two different major release versions.

Oracle Database 11.1.0.x = Oracle Database 11g Release 1
Oracle Database 11.2.0.x = Oracle Database 11g Release 2

You cannot apply 11.2 patch set updates to a 11.1 database.

Finally, not sure what the 11.1.0.7 context is. Bear in mind this is a Fusion Middleware blog. If you require more assistance / advice regards applying a patch to the Oracle Database, I advise

a) Log a discussion thread via this support community

https://communities.oracle.com/portal/server.pt/community/database_administration/227

OR

b) Log a Service Request via My Oracle Support picking "Oracle Database" as the product to ensure the Service Request is routed directly to the right team.

Posted by guest on November 06, 2013 at 04:51 PM GMT #

Post a Comment:
  • HTML Syntax: NOT allowed
About

This is the blog of the Oracle Fusion Middleware Proactive Support Delivery Team. Here we will provide information about our activities, publications, product related information and more. Feedback welcome.

Follow OracleMWSupport on Twitter

Search

Archives
« April 2014
SunMonTueWedThuFriSat
  
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
   
       
Today