Shulou(Shulou.com)06/01 Report--

Oracle 11.2.0.1 for windows server2012R2 applies the p12429529_112010_MSWIN-x86-64 patch set, which is also the area of oracle database security hardening. Because every time the oracle database is hardened,

There will always be some surprises. Here is a record of the oracle 11.2.0.1 for windows server2012R2 application p12429529_112010_MSWIN-x86-64 patch set.

Reference documents for the use of this oracle security reinforcement:

I. purpose

The latest CPU patch set p12429529 is available for oracle database 11.2.0.1 applications running on windwos server 2012/2012R2 platform to fix the risk vulnerabilities of this version of database in daily applications.

Reduce the unplanned downtime of the application system architecture and shield the possibility of database risk vulnerabilities being exploited.

2. Basic information of safety reinforcement

Operating system Typ

Database version

Pre-patched version

Remarks

Windows server 2012R2

Oracle 11.2.0.1

P12429529_112010_MSWIN-x86-64

The latest CPU

Windows server 2012

Oracle 11.2.0.1

P12429529_112010_MSWIN-x86-64

The latest CPU

Operation steps of safety reinforcement

1. Shut down the application of the pre-used patch set database

2. Check the basic health of the pre-used patch set database.

3. Start and stop the preused patch set before database backup to eliminate the interference of existing sessions.

4. Back up the database of the pre-used patch set and complete the expdp/rman.

5. All database-related services will be stopped before the pre-patch set.

A) stop database snooping lsnrctl stop

B) stop the database service shutdown immediate

C) stop all oracle-related services at the operating system level

6. Opatch version upgrade

A) back up the old version of opatch directories and files

B) extract the new version of opatch (p6880880_112000_MSWIN-x86-64) to the ORACLE_HOME directory

7. Apply patch set

A) extract the patch set p12429529

B) set operating system environment variables

C) apply patch set p12429529

8. Start database related services

A) start database operating system level related services, refer to 5.c operation

B) confirm database snooping status lsnrctl status

C) confirm the database status

Select open_mode from v$database

Select status from v$instance

D) confirm the patch set application opatch lsinventory

9. Application functional verification

IV. Risk assessment

1. The application of CPU patch can repair existing database vulnerabilities, but it will also introduce new unknown oracle vulnerabilities. The impact of CPU should be found in the future use of the application.

2. Do not rule out the failure of CPU patch application.

5. Fallback from failure

1. Try to roll back the patch set, and then restart the database service. If the application test is normal, the rollback is successful.

2. Delete the current database, create a new corresponding version of the database, and restore it using backup. After the test is normal, the fallback is successful.

-

Oracle 11.2.0.1 for windows server2012R2 applies the p12429529_112010_MSWIN-x86-64 patch set as follows:

1. Shut down the related oracle database applications.

2. Basic health check of database before patching

-- View database instance status

SQL > select open_mode from v$database

OPEN_MODE

-

READ WRITE

SQL > select status from v$instance

STATUS

-

OPEN

SQL > select count (*) from v$session

COUNT (*)

-

thirty-one

SQL >

-- View the database size

-- View the database archive mode to determine the database backup strategy

-- View the status of database components

-- check the database alarm log to determine whether the database has any historical faults

3. Start and stop the preused patch set before database backup to eliminate the interference of existing sessions.

4. Back up the pre-used patch set database and complete the expdp (because the other database is in non-archiving mode)

Create directory zhul as'e:\ orabak'

Expdp\ "/ as sysdba\" directory = zhul dumpfile=expdp_full_orcl_20171201_%U.dmp expdp_full_orcl_20171201.log full=y

5. All database-related services will be stopped before the pre-patch set.

A) stop database snooping lsnrctl stop

C:\ Users\ Administrator > lsnrctl stop

LSNRCTL for 64-bit Windows: Version 11.2.0.1.0-Production on 01-December-2017 17:14:04

Copyright (c) 1991, 2010, Oracle. All rights reserved.

Connecting to (DESCRIPTION= (ADDRESS= (PROTOCOL=TCP) (HOST=hp) (PORT=1521)

Command executed successfully

B) stop the database service shutdown immediate

C) stop all oracle-related services at the operating system level

6. Opatch version upgrade

A) back up the old version of opatch directories and files

B) extract the new version of opatch (p6880880_112000_MSWIN-x86-64) to the ORACLE_HOME directory

D:\ app\ Administrator\ product\ 11.2.0\ dbhome_1\ OPatch > opatch lsinventory

Oracle Intermediate Patch installer version 11.2.0.3.6

Copyright (c) 2013, Oracle Corporation. All rights reserved.

Oracle Home: d:\ app\ Administrator\ product\ 11.2.0\ dbhome_1

Central Inventory: C:\ Program Files\ Oracle\ Inventory

From: n/a

OPatch version: 11.2.0.3.6

OUI version: 11.2.0.1.0

Log file location: d:\ app\ Administrator\ product\ 11.2.0\ dbhome_1\ cfgtoollogs\ opa

Tch\ opatch3017-12-01pm 17-29-01 afternoon _ 1.log

Lsinventory Output file location: d:\ app\ Administrator\ product\ 11.2.0\ dbhome_1\

Cfgtoollogs\ opatch\ lsinv\ lsinventory2017-12-01 October 17-29-01 p.m. Txt

Installed top-level products (1):

Oracle Database 11g 11.2.0.1.0

1 product has been installed in this Oracle home directory.

No intermediate patches are installed in this Oracle home directory.

OPatch succeeded.

D:\ app\ Administrator\ product\ 11.2.0\ dbhome_1\ OPatch >

7. Apply patch set

A) extract the patch set p12429529

B) set operating system environment variables

C:\ Users\ Administrator > set oracle_home=D:\ app\ Administrator\ product\ 11.2.0\ dbhome_1

C) apply patch set p12429529

D:\ app\ Administrator\ product\ 11.2.0\ dbhome_1\ OPatch > c:

C:\ > cd C:\ Users\ Administrator\ Desktop\ p12429529_112010_MSWIN-x86-64\ 12429529

C:\ Users\ Administrator\ Desktop\ p12429529_112010_MSWIN-x86-64\ 12429529 > D:\ app\ Administrator\ product\ 11.2.0\ dbhome_1\ OPatch\ opatch apply

Oracle Intermediate Patch installer version 11.2.0.3.6

Copyright (c) 2013, Oracle Corporation. All rights reserved.

Oracle Home: d:\ app\ Administrator\ product\ 11.2.0\ dbhome_1

Central Inventory: C:\ Program Files\ Oracle\ Inventory

From: n/a

OPatch version: 11.2.0.3.6

OUI version: 11.2.0.1.0

Log file location: d:\ app\ Administrator\ product\ 11.2.0\ dbhome_1\ cfgtoollogs\ opa

Tch\ 12429529_Dec_01_2017_17_34_20\ apply2017-12-01pm 17-34-20 PM _ 1.log

Applying interim patch '12429529' to OH' D:\ app\ Administrator\ product\ 11.2.0\ dbhome_1'

Verifying environment and performing prerequisite checks...

Patch 12429529: Optional component (s) missing: [oracle.rdbms.ic, 11.2.0.1.0]

, [oracle.has.crs, 11.2.0.1.0], [oracle.usm, 11.2.0.1.0]

All checks passed.

Provide an email address for receiving notifications about security issues and install Oracle Configuration Manager

And activate it. If you use My Oracle

Support email address / user name, the operation will be easier.

For more information, visit http://www.oracle.com/support/policies.html.

Email address / user name:

An email address has not been provided to receive notifications about security issues.

Whether you do not want to be notified of security issues (yes [Y], no [N]) [N]: y

Please close the Oracle instance running outside this ORACLE_HOME on the local system.

(Oracle home directory ='D:\ app\ Administrator\ product\ 11.2.0\ dbhome_1')

Is the local system ready to patch? [y | n]

Y

User Responded with: Y

Backing up files...

Patching component oracle.rdbms.rsf, 11.2.0.1.0.

Patching component oracle.rdbms, 11.2.0.1.0.

Patching component oracle.rdbms.util, 11.2.0.1.0.

Patching component oracle.rdbms.dbscripts, 11.2.0.1.0.

Patching component oracle.rdbms.plsql, 11.2.0.1.0.

Patching component oracle.xdk.rsf, 11.2.0.1.0.

Patching component oracle.network.rsf, 11.2.0.1.0.

Patching component oracle.oraolap, 11.2.0.1.0.

Patching component oracle.ntoledb.odp_net_2, 11.2.0.1.0.

Patching component oracle.has.db, 11.2.0.1.0.

Patching component oracle.has.rsf, 11.2.0.1.0.

Patching component oracle.javavm.server, 11.2.0.1.0.

Patching component oracle.network.listener, 11.2.0.1.0.

Patching component oracle.odbc.ic, 11.2.0.1.0.

Patching component oracle.oraolap.api, 11.2.0.1.0.

Patching component oracle.owb.rsf, 11.2.0.1.0.

Patching component oracle.precomp.common, 11.2.0.1.0.

Patching component oracle.ctx, 11.2.0.1.0.

Patching component oracle.has.common, 11.2.0.1.0.

Patching component oracle.rdbms.rsf.ic, 11.2.0.1.0.

Patching component oracle.rdbms.oci, 11.2.0.1.0.

Patching component oracle.has.common.cvu, 11.2.0.1.0.

Patching component oracle.has.deconfig, 11.2.0.1.0.

Patching component oracle.swd.oui.core, 11.2.0.1.0.

Patching component oracle.ntoledb, 11.2.0.1.0.

Patching component oracle.rdbms.deconfig, 11.2.0.1.0.

Patching component oracle.sysman.agent, 10.2.0.4.2.

Patching component oracle.precomp.rsf, 11.2.0.1.0.

Patching component oracle.precomp.common, 11.2.0.1.0.

Patching component oracle.sysman.console.db, 11.2.0.1.0.

Patching component oracle.sysman.oms.core, 10.2.0.4.2.

Patching component oracle.sysman.plugin.db.main.repository, 11.2.0.1.0.

Patching component oracle.rdbms.dv.oc4j, 11.2.0.1.0.

Patching component oracle.ldap.rsf, 11.2.0.1.0.

Patching component oracle.ldap.rsf.ic, 11.2.0.1.0.

Patching component oracle.rdbms.dv, 11.2.0.1.0.

Patching component oracle.nlsrtl.rsf, 11.2.0.1.0.

Verifying the update...

Patch 12429529 successfully applied

Log file location: d:\ app\ Administrator\ product\ 11.2.0\ dbhome_1\ cfgtoollogs\ opat

Ch\ 12429529_Dec_01_2017_17_34_20\ apply2017-12-01pm 17-34-20 PM _ 1.log

OPatch succeeded.

C:\ Users\ Administrator\ Desktop\ p12429529_112010_MSWIN-x86-64\ 12429529 > d:

D:\ app\ Administrator\ product\ 11.2.0\ dbhome_1\ OPatch >

D:\ app\ Administrator\ product\ 11.2.0\ dbhome_1\ OPatch > opatch lsinventory

Oracle Intermediate Patch installer version 11.2.0.3.6

Copyright (c) 2013, Oracle Corporation. All rights reserved.

Oracle Home: d:\ app\ Administrator\ product\ 11.2.0\ dbhome_1

Central Inventory: C:\ Program Files\ Oracle\ Inventory

From: n/a

OPatch version: 11.2.0.3.6

OUI version: 11.2.0.1.0

Log file location: d:\ app\ Administrator\ product\ 11.2.0\ dbhome_1\ cfgtoollogs\ opa

Tch\ opatch3017-12-01pm 17-38-33 afternoon _ 1.log

Lsinventory Output file location: d:\ app\ Administrator\ product\ 11.2.0\ dbhome_1\

Cfgtoollogs\ opatch\ lsinv\ lsinventory2017-12-01 October 17-38-33 p.m. Txt

Installed top-level products (1):

Oracle Database 11g 11.2.0.1.0

1 product has been installed in this Oracle home directory.

Intermediate patch (1):

Patch 12429529: applied on Fri Dec 01 17:35:58 CST 2017

Unique Patch ID: 13854432

Created on 17 Jun 2011, 02:07:52 hrs PST8PDT

Bugs fixed:

12429529, 9554332, 12363485, 10625485, 9268192, 9935787, 10205230

12412745, 12393432, 12341758, 10130392, 11853331, 6055658, 11723722

11735927, 11772687, 9902590, 9871302, 10132870, 7365514, 10422748

10180190, 9825461, 11731176, 9368502, 9705984, 10302581, 10130633

8331063, 10237271, 10082277, 10054513, 9695366, 8889137, 10383833

11076894, 10220194, 10401327, 9042035, 10235640, 9564886, 10104492

9302054, 10374238, 9613016, 10432045, 8772524, 10357603, 9243068, 9448277

8672862, 9725141, 9328390, 9275876, 9033671, 10154951, 9890701, 9628444

10352692, 10086495, 10155684, 10156303, 10157313, 10201938, 10220033

10278864, 8332021, 8771916, 8800514, 8874588, 8946311, 9003145, 9115829

9131242, 9240305, 9398685, 9469117, 9569029, 9751158, 8446618, 10245351

10052141, 10116578, 10134677, 10140809, 10157402, 10172454, 7662438

8397251, 8499180, 8522654, 9090269, 9234660, 9255996, 9395237, 9461782

9668086, 9703463, 9736701, 9795214, 9823660, 9826065, 9866728, 9916260

9972680, 9524640, 8841699, 10216200, 10225758, 10155838, 10030675

10080167, 10132342, 6866145, 8790561, 8984021, 9096076, 9137871, 9193873

9277263, 9303326, 9457109, 9457492, 9472669, 9539440, 9659614, 9845644

9903704, 9920616, 9930649, 10100101, 8780369, 8866808, 8883722, 9004242

9021724, 9028780, 9049725, 9058865, 9212844, 9243912, 9306119, 9350527

9387574, 9399991, 9413827, 9488247, 9498108, 9500147, 9532911, 9544104

9548269, 9578533, 9593656, 9594372, 9706490, 9721013, 9734300, 9746699

9764806, 9770451, 9778018, 9799342, 9828495, 9881328, 9932143, 10080735

9901433, 9966926, 8574851, 8790837, 8802195, 8863249, 8981681, 8993052

9198871, 9217088, 9300021, 9369183, 9442189, 9500046, 9648040, 9657283

9685694, 9772171, 9847494, 9793452, 9888298, 9135679, 9495697, 9081430

6855031, 8793567, 9286015, 9442015, 9504322, 9535951, 8684595, 9663844

9539556, 7452759, 9196440, 8893949, 9011590, 9382101, 9775337, 9083671

9324531, 8654177, 8569325, 8686932, 9271344, 8434467, 6086930, 9024737

9047975, 9056912, 9069046, 9336476, 9355794, 9495669, 8467123, 8663644

8855396, 8886819, 8951812, 8467825, 9187546, 9102860, 9109487, 8546356

9170308, 8725282, 9308296, 9406607, 8720802, 9711859, 9531984, 9482399

9471411, 9390484, 9362218, 9320786, 9320130, 9302343, 9290526, 9231605

8554900, 9490054, 9389304, 8783690, 9577583, 9736229, 9259407, 8602840

9469133, 8682102, 9693101, 9898160, 9669478, 9736865, 7327630, 8268775

8505803, 8544696, 8565708, 8633358, 8664189, 8702535, 8755082, 8771556

8783301, 8790767, 8799099, 8803762, 8839301, 8856478, 8865718, 8872096

8909984, 8974548, 8981059, 8991997, 9023338, 9032717, 9057443, 9119194

9145181, 9147830, 9165206, 9170608, 9216806, 9219338, 9227662, 9255542

9275072, 9321701, 9341448, 9363145, 9363384, 9391025, 9399090, 9467635

9488887, 9637033, 9711600, 9713537, 9714832, 9719541, 9736836, 7028305

7519406, 8330783, 8431487, 8477973, 8496830, 8581792, 8607693, 8643160

8650719, 8717461, 8730312, 8774868, 8813536, 8815639, 8822531, 8822832

8834425, 8875671, 8879707, 8891929, 8914054, 8918433, 9001453, 9002336

9007859, 9010222, 9011088, 9015983, 9027691, 9035113, 9041943, 9050716

9053676, 9054253, 9057754, 9067282, 9068088, 9093300, 9120088, 9145541

9167285, 9189070, 9202351, 9271246, 9272086, 9294110, 9298307, 9316329

9378712, 9395500, 9408883, 9467727, 9504129, 9561609, 9584383, 9657157

9661684, 9489422, 9595786, 8405205, 8543770, 8856467, 8998066, 8897784

9004697, 9007836, 9036013, 9037724, 9047110, 9318214, 8328200, 8570322

8629716, 8761974, 8857211, 8885539, 9035438, 8971021, 8685327, 8707506

8866903, 8771297, 8772028, 8796511

OPatch succeeded.

D:\ app\ Administrator\ product\ 11.2.0\ dbhome_1\ OPatch >

C:\ Users\ Administrator > sqlplus / as sysdba

SQL*Plus: Release 11.2.0.1.0 Production on Friday 1 December 17:59:34 2017

Copyright (c) 1982, 2010, Oracle. All rights reserved.

Connect to:

Oracle Database 11g Enterprise Edition Release 11.2.0.1.0-64bit Production

With the Partitioning, OLAP, Data Mining and Real Application Testing options

SQL > STARTUP

SQL > @ catcpu.sql

SQL > @ utlrp.sql

SQL > quit

8. Start database related services

A) start database operating system level related services, refer to 5.c operation

B) confirm database snooping status lsnrctl status

C:\ Users\ Administrator > lsnrctl status

LSNRCTL for 64-bit Windows: Version 11.2.0.1.0-Production on 01-December-2017 20:38:48

Copyright (c) 1991, 2010, Oracle. All rights reserved.

Connecting to (DESCRIPTION= (ADDRESS= (PROTOCOL=IPC) (KEY=EXTPROC1521)

STATUS of LISTENER

-

Alias LISTENER

Version TNSLSNR for 64-bit Windows: Version 11.2.0.1.0-Production

Launch date 01-December-2017 20:38:43

Normal running time 0 days, 0 hours, 0 minutes, 5 seconds

Trace level off

Security ON: Local OS Authentication

SNMP OFF

Listener parameter file D:\ app\ Administrator\ product\ 11.2.0\ dbhome_1\ network\ admin\ listener.ora

Listener log file d:\ app\ administrator\ diag\ tnslsnr\ XXFB02\ listener\ alert\ log.xml

Listening Endpoint Summary.

(DESCRIPTION= (ADDRESS= (PROTOCOL=ipc) (PIPENAME=\\.\ pipe\ EXTPROC1521ipc))

(DESCRIPTION= (ADDRESS= (PROTOCOL=tcp) (HOST=XXFB02) (PORT=1521))

Service summary..

The service "CLRExtProc" contains 1 instance.

Instance "CLRExtProc", status UNKNOWN, contains 3 handlers for this service.

Command executed successfully

C) confirm the database status

C:\ Users\ Administrator > sqlplus / as sysdba

SQL*Plus: Release 11.2.0.1.0 Production on Friday 1 December 17:39:34 2017

Copyright (c) 1982, 2010, Oracle. All rights reserved.

Connect to:

Oracle Database 11g Enterprise Edition Release 11.2.0.1.0-64bit Production

With the Partitioning, OLAP, Data Mining and Real Application Testing options

SQL > select open_mode from v$database

OPEN_MODE

-

READ WRITE

SQL > select status from v$instance

STATUS

-

OPEN

SQL > select comp_id,comp_name,version,status from dba_registry

COMP_ID COMP_NAME VERSION STATUS

-

OWB OWB 11.2.0.1.0 VALID

APEX Oracle Application Express 3.2.1.00.10 VALID

EM Oracle Enterprise Manager 11.2.0.1.0 VALID

AMD OLAP Catalog 11.2.0.1.0 VALID

SDO Spatial 11.2.0.1.0 VALID

ORDIM Oracle Multimedia 11.2.0.1.0 VALID

XDB Oracle XML Database 11.2.0.1.0 VALID

CONTEXT Oracle Text 11.2.0.1.0 VALID

EXF Oracle Expression Filter 11.2.0.1.0 VALID

RUL Oracle Rules Manager 11.2.0.1.0 VALID

OWM Oracle Workspace Manager 11.2.0.1.0 VALID

CATALOG Oracle Database Catalog Views 11.2.0.1.0 VALID

CATPROC Oracle Database Packages and T 11.2.0.1.0 VALID

Ypes

JAVAVM JServer JAVA Virtual Machine 11.2.0.1.0 VALID

XML Oracle XDK 11.2.0.1.0 VALID

CATJAVA Oracle Database Java Packages 11.2.0.1.0 VALID

APS OLAP Analytic Workspace 11.2.0.1.0 VALID

XOQ Oracle OLAP API 11.2.0.1.0 VALID

18 rows have been selected.

SQL >

Exceptions that may be encountered during the process

1. Sometimes, although all services at the database operating system level are stopped, an error is still reported when applying the patch:

The reason for the above error is that although the oracle-related services have been stopped, the previous process of connecting to the database still occupies some files of the database software, resulting in OPatch unable to apply the patch and needs to be completely released

Oracle database software files, the solution is to restart the database server, pay attention to the need to temporarily adjust all oracle-related services to manual start, patch after the adjustment to the original settings.

2. The server with oracle database client needs to temporarily adjust the operating system PATH variable, otherwise it cannot log in to the database.

C:\ Users\ Administrator > sqlplus / as sysdba

SQL*Plus: Release 11.2.0.1.0 Production on Friday 1 December 20:29:40 2017

Copyright (c) 1982, 2010, Oracle. All rights reserved.

ERROR:

ORA-12560: TNS: protocol adapter error

Please enter a user name:

ERROR:

ORA-12560: TNS: protocol adapter error

Please enter a user name:

ERROR:

ORA-12560: TNS: protocol adapter error

SP2-0157: unable to connect to ORACLE after 3 attempts, exit SQL*Plus

C:\ Users\ Administrator >

-- before adjustment:

D:\ app\ Administrator\ product\ 11.2.0\ client_1;D:\ app\ Administrator\ product\ 11.2.0\ dbhome_1\ bin;C:\ ProgramData\ Oracle\ Java\ javapath;%SystemRoot%\ system32;%SystemRoot%;%SystemRoot%\ System32\ Wbem;%SYSTEMROOT%\ WindowsPowerShell\ v1.0\; C:\ Program Files (x86)\ Microsoft SQL Server\ 80\ Tools\ Binn\; C:\ AltiServ\ Exe;C:\ AltiServ\ SP\ H323SPX C:\ Program Files (x86)\ AltiGen\ VRManager\ bin

-- temporary adjustment

D:\ app\ Administrator\ product\ 11.2.0\ dbhome_1\ bin;C:\ ProgramData\ Oracle\ Java\ javapath;%SystemRoot%\ system32;%SystemRoot%;%SystemRoot%\ System32\ Wbem;%SYSTEMROOT%\ System32\ WindowsPowerShell\ v1.0\; C:\ Program Files (x86)\ Microsoft SQL Server\ 80\ Tools\ Binn\; C:\ AltiServ\ Exe;C:\ AltiServ\ SP\ H323SPX C:\ Program Files (x86)\ AltiGen\ VRManager\ bin

3. A total of three oracle instances have been implemented in this patch. In the process, one instance determined from the advanced log that there was a problem with its temporary tablespace, and the backup could not be backed up due to the temporary tablespace problem.

An example solution to the problem with temporary tablespaces is to rebuild temporary tablespaces.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.