Shulou(Shulou.com)05/31 Report--

This article mainly introduces the example analysis of oracle 11.2.0.4 single instance patching, which is very detailed and has a certain reference value. Interested friends must read it!

0. How to get the oracle 11g installation package:

1) Log in to SR (https://support.oracle.com), search 13390677, and select the corresponding installation package according to the platform, for example, rhel 64-bit select Linux x86-64

2) download the corresponding package:

P13390677_112040_Linux-x86-64_1of7.zip:oracle server software installation package

P13390677_112040_Linux-x86-64_2of7.zip:oracle server software installation package

P13390677_112040_Linux-x86-64_3of7.zip:grid software installation package

P13390677_112040_Linux-x86-64_4of7.zip:oracle client software installation package

1. How to get the oracle 11g patch:

1) Log in to SR and search for 1454618.1

2) options explain:

Oracle Database Base Releases: used to download some test versions of oracle software, such as 11.2.0.1, which is not recommended because there are many vulnerabilities.

Oracle Database Patchsets: database software installation package (you can search for the files in step 0)

Oracle Database Release Updates (Versions 12.2 & higher):?

Oracle Database Release Update Revisions (Versions 12.2 & higher):?

Oracle Database PSU,SPU (CPU), Bundle Patches (Versions 12.1 & lower): commonly used patch packs

OJVM RU/PSU/Bundle Patches: a patch pack containing OJVM

Lastest Available Microsoft Windows Patches:windows related

2. How to obtain opatch:

1) Log in to SR, search for documents (274526.1) or search opatch directly

2) Select the corresponding version to download.

3. Difference:

1) SPU (CPU): refers to the CPU (Critical Patch Update) patch. Released quarterly (should be released at regular intervals), some patches used to fix security are cumulative. It was renamed Security Patch Update (SPU) in 2012. Mainly refers to those who do not belong to software errors, normal use will not make mistakes. But people with ulterior motives can use special means to bypass the database security mechanism to obtain illegal permissions. To put it bluntly, it is a security patch to prevent hackers from using and attacking the database.

2) PSU: refers to Patch Set Update, which is a patch set. Oracle selects patches that have the largest number of downloads per quarter and have been verified to have a lower risk and put them into the PSU every quarter to fix some serious problems, which is also cumulative.

It is worth noting that the PSU for each quarter contains SPU patches for the corresponding quarter.

3) BP: refers to Bundle Patch, which is also a patch set, which fixes multiple Bug, but it is only used on the Windows platform and is cumulative. Oracle releases BP periodically (at least quarterly), and each BP contains all previous BP, that is, only the latest BP needs to be installed. In addition, the cluster software of Oracle is the same as the BP of database software, that is, it can be played on either the cluster or the database software.

4) GI PSU: patch set for installation in cluster software. For Oracle Rac.

5) OJVM PSU: patch set used to fix vulnerabilities related to the JAVA virtual machine. For Rac, it is recommended to play once at grid level and once at oracle level.

To sum up, it shows:

For windows systems, you only need to download the latest version of BP and type pudding once at the cluster level (if any) and at the database level.

For non-windows systems, you need to use the latest version of OJVM + GI PSU at the cluster level (if any) and OJVM + DB PSU at the database level.

4. Repair process:

1) upload the opatch file and single instance PSU to the server's / tmp directory

2) View the current patch set:

[oracle@testlihb OPatch] $cd $ORACLE_HOME/OPatch

[oracle@testlihb OPatch] $. / opatch lsinv

Oracle Interim Patch Installer version 11.2.0.3.4

Copyright (c) 2012, Oracle Corporation. All rights reserved.

Oracle Home: / database/jkzx/product/11.2.0/db_1

Central Inventory: / database/jkzx/oraInventory

From: / database/jkzx/product/11.2.0/db_1/oraInst.loc

OPatch version: 11.2.0.3.4

OUI version: 11.2.0.4.0

Log file location: / database/jkzx/product/11.2.0/db_1/cfgtoollogs/opatch/opatch3018-04-02 / 15-22-15PM_1.log

Lsinventory Output file location: / database/jkzx/product/11.2.0/db_1/cfgtoollogs/opatch/lsinv/lsinventory2018-04-02 / 15-22-15PM.txt

Installed Top-level Products (1):

Oracle Database 11g 11.2.0.4.0

There are 1 products installed in this Oracle Home.

There are no Interim patches installed in this Oracle Home.

OPatch succeeded.

3) replace the OPatch file

[oracle@testlihb OPatch] $cd $ORACLE_HOME

[oracle@testlihb db_1] $mv / tmp/p6880880_112000_Linux-x86-64.zip.

[oracle@testlihb db_1] $mv OPatch OPatch_bak

[oracle@testlihb db_1] $unzip p6880880_112000_Linux-x86-64.zip

4) decompress the PSU file

[oracle@testlihb db_1] $cd / tmp/

[oracle@testlihb tmp] $unzip p27011017_112040_Linux-x86-64.zip

5) install the PSU patch set (you must install the PSU patch set before the OJVM patch set)

[oracle@testlihb tmp] $cd 27011017 /

[oracle@testlihb 27011017] $ls

26925532 26925576 README.html README.txt

# # closing the Library

[oracle@testlihb 27011017] $sqlplus / as sysdba

SQL > shutdown immediate

SQL > exit

[oracle@testlihb 27011017] $ps-ef | grep smon_

Oracle 30411 30118 0 15:40 pts/0 00:00:00 grep smon_

# # closing and listening

[oracle@testlihb 27011017] $ps-ef | grep lsn

Oracle 24373 1 0 11:44? 00:00:00 / database/jkzx/product/11.2.0/db_1/bin/tnslsnr LISTENER-inherit

Oracle 30413 30118 0 15:40 pts/0 00:00:00 grep lsn

[oracle@testlihb 27011017] $lsnrctl stop

[oracle@testlihb 27011017] $ps-ef | grep lsn

Oracle 30415 30118 0 15:41 pts/0 00:00:00 grep lsn

# # Environment configuration and check before installation

[oracle@testlihb 27011017] $cd 26925576

[oracle@testlihb 26925576] $export PATH=$PATH:$ORACLE_HOME/OPatch:/usr/ccs/bin

[oracle@testlihb 26925576] $opatch prereq CheckConflictAgainstOHWithDetail-ph. /

Prereq "checkConflictAgainstOHWithDetail" passed.

OPatch succeeded.

[oracle@testlihb 26925576] $opatch apply

Do you want to proceed? [y | n]

Y

Email address/User Name:

Do you wish to remain uninformed of security issues ([Y] es, [N] o) [N]: y

Is the local system ready for patching? [y | n]

Y

Applying sub-patch '17478514' to OH'/ database/jkxt/product/11.2.0/db_1'

Patching component oracle.rdbms, 11.2.0.4.0...

. . .

Applying sub-patch '26392168' to OH'/ database/jkxt/product/11.2.0/db_1'

ApplySession: Optional component (s) [oracle.oid.client, 11.2.0.4.0] not present in the Oracle Home ora higher version is found.

OPatch found the word "error" in the stderr of the make command.

Please look at this stderr. You can re-run this make command.

Stderr output:

Chmod: changing permissions of `/ database/jkxt/product/11.2.0/db_1/bin/extjobO': Operation not permitted

Make: [iextjob] Error 1 (ignored)

Composite patch 26925576 successfully applied.

OPatch Session completed with warnings.

Log file location: / database/jkxt/product/11.2.0/db_1/cfgtoollogs/opatch/opatch3018-04-02 16-51-12PM_1.log

OPatch completed with warnings.

6) Supplementary work after installing PSU patch set

[oracle@testlihb 26925576] $cd $ORACLE_HOME/rdbms/admin

[oracle@testlihb admin] $sqlplus / as sysdba

SQL > startup

SQL > @ catbundle.sql psu apply

SQL > shutdown immediate

SQL > exit

7) install OJVM patch set pre-check

[oracle@testlihb admin] $cd / tmp/27011017/26925532

[oracle@testlihb 27011017] $cd 26925532

[oracle@testlihb 26925532] $export PATH=$PATH:/database/jkzx/product/11.2.0/db_1/OPatch

[oracle@testlihb 26925532] $opatch prereq CheckConflictAgainstOHWithDetail-ph. /

. . .

Prereq "checkConflictAgainstOHWithDetail" passed.

OPatch succeeded.

8) install the OJVM patch set

[oracle@testlihb 26925532] $opatch apply

. . .

OPatch continues with these patches: 26925532

Do you want to proceed? [y | n]

Y

Email address/User Name:

Do you wish to remain uninformed of security issues ([Y] es, [N] o) [N]: y

Is the local system ready for patching? [y | n]

Y

User Responded with: Y

Backing up files...

Applying interim patch '26925532' to OH' / database/jkxt/product/11.2.0/db_1'

ApplySession: Optional component (s) [oracle.sqlj, 11.2.0.4.0], [oracle.sqlj.companion, 11.2.0.4.0] not present in the Oracle Home ora higher version is found.

Patching component oracle.javavm.server, 11.2.0.4.0...

. . .

Patch 26925532 successfully applied.

Log file location: / database/jkxt/product/11.2.0/db_1/cfgtoollogs/opatch/opatch3018-04-02 / 17-10-13PM_1.log

OPatch succeeded.

9) follow-up work on installing the OJVM patch set

[oracle@testlihb 26925532] $cd $ORACLE_HOME/sqlpatch/26925532

[oracle@testlihb 26925532] $sqlplus / as sysdba

SQL > startup upgrade

SQL > @ postinstall.sql

SQL > shutdown immediate

SQL > startup

SQL > @? / rdbms/admin/utlrp.sql

SQL > exit

[oracle@testlihb 26925532] $lsnrctl start

[oracle@testlihb 26925532] $lsnrctl status

10) check the current patch set:

[oracle@testlihb 26925532] $opatch lsinv

. . .

Installed Top-level Products (1):

Oracle Database 11g 11.2.0.4.0

There are 1 products installed in this Oracle Home.

Interim patches (2):

Patch 26925532: applied on Mon Apr 02 17:11:56 CST 2018

Unique Patch ID: 21750570

Patch description: "OJVM PATCH SET UPDATE 11.2.0.4.180116"

Created on 27 Nov 2017, 11:12:35 hrs PST8PDT

Bugs fixed:

18933818, 19176885, 17201047, 25067795, 14774730, 19153980, 21911849

. . .

Patch 26925576: applied on Mon Apr 02 16:56:21 CST 2018

Unique Patch ID: 21773885

Patch description: "Database Patch Set Update: 11.2.0.4.180116 (26925576)"

Created on 5 Dec 2017, 05:23:24 hrs PST8PDT

Sub-patch 26392168; "Database Patch Set Update: 11.2.0.4.171017 (26392168)"

. . .

Sub-patch 17478514; "Database Patch Set Update: 11.2.0.4.1 (17478514)"

Bugs fixed:

21174504, 17184721, 21538558, 16091637, 18092127, 17381384, 15979965

. . .

OPatch succeeded.

The above is all the contents of the article "oracle 11.2.0.4 single instance patched example Analysis". Thank you for reading! Hope to share the content to help you, more related knowledge, welcome to follow the industry information channel!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.