Kevin Kempf's Blog

April 28, 2015

Security Patch Releases with EBS: Mission Impossible

Filed under: R12.2, Security — kkempf @ 12:33 pm

Regression Test Time

We’re about to enter our first R12.2 regression test.  High on my list is to get to Delta 6 on the AD/TXK side, and since the security patches just came out I figured I’d get up to date there.  For pretty good reason, we’re still running 11.2.0.4 base, and it took me some time to get the ETCC (patch 17537119) happy that I’ve got all the required patches.

Per 1967243.1 I figured I’d start with the core database.  Now we have combo PSU’s for database, OJVM, and GI, in addition to SPU’s and stand-alone PSU’s for each component.  It’s gotten complicated since I looked last!  The patches are all opatch installed; ideally I’d get the OJVM, SPU and PSU applied to the database home.

OJVM (20406239)

This is a documented problem on MOS.  Apparently, it’s not really cumulative, because I have to be on Oct 2014 or better security set to apply this.  Next.

The following make actions have failed :

Re-link fails on target “jox_refresh_knlopt ioracle”.

Do you want to proceed? [y|n]
n
User Responded with: N

 

PSU (20299013)

This one was even worse!

There are no patches that can be applied now.

Following patches have conflicts. Please contact Oracle Support and get the merged patch of the patches :
20488666, 20299013, 19791273, 19730032, 18260550, 17420796

Following patches are not required, as they are subset of the patches in Oracle Home or subset of the patches in the given list :
17811789, 19393542, 18828868, 18614015, 17892268, 17600719, 17468141, 16992075, 16929165

Following patches will be rolled back from Oracle Home on application of the patches in the given list :
20488666, 17811789, 19791273, 19730032, 19393542, 18260550, 18828868, 17420796, 18614015, 17892268, 17600719, 17468141, 16992075, 16929165

Conflicts/Supersets for each patch are:

Patch : 20299013

Bug Conflict with 20488666
Conflicting bugs are:
17912217 ETCC R12.2 requirement per 1594274.1

Bug Superset of 17811789
Super set bugs are:
17811789

Conflict with 19791273 ETCC R12.2 requirement per 1594274.1
Conflict details:
/u01/apptest/oracle/testdb/11.2.0.4/lib/libserver11.a:/ktsp.o
/u01/apptest/oracle/testdb/11.2.0.4/lib/libserver11.a:/kdc.o
/u01/apptest/oracle/testdb/11.2.0.4/lib/libserver11.a:/kdt.o
/u01/apptest/oracle/testdb/11.2.0.4/lib/libserver11.a:/ktsk.o
/u01/apptest/oracle/testdb/11.2.0.4/lib/libserver11.a:/ktsp.o
/u01/apptest/oracle/testdb/11.2.0.4/lib/libserver11.a:/ktsplb.o
/u01/apptest/oracle/testdb/11.2.0.4/lib/libserver11.a:/ktspsrch.o
/u01/apptest/oracle/testdb/11.2.0.4/lib/libserver11.a:/ktsp.o
/u01/apptest/oracle/testdb/11.2.0.4/lib/libserver11.a:/kdt.o
/u01/apptest/oracle/testdb/11.2.0.4/lib/libserver11.a:/ktsp.o

Bug Conflict with 19730032 ETCC R12.2 requirement per 1594274.1
Conflicting bugs are:
17174582,  18282562,  18244962,  17614134,  18674024,  17050888,  17478145,  18331850,  18964939,  17883081,  18436307

Bug Superset of 19393542
Super set bugs are:
19393542

Conflict with 18260550 ETCC R12.2 requirement per 1594274.1
Conflict details:
/u01/apptest/oracle/testdb/11.2.0.4/lib/libserver11.a:/kzd.o
/u01/apptest/oracle/testdb/11.2.0.4/lib/libserver11.a:/kzd.o

Bug Superset of 18828868
Super set bugs are:
18828868

Conflict with 17420796 ETCC R12.2 requirement per 1594274.1
Conflict details:
/u01/apptest/oracle/testdb/11.2.0.4/bin/lxinst

Bug Superset of 18614015
Super set bugs are:
18614015

Bug Superset of 17892268
Super set bugs are:
17892268

Bug Superset of 17600719
Super set bugs are:
17600719

Bug Superset of 17468141
Super set bugs are:
17468141

Bug Superset of 16992075
Super set bugs are:
16992075

Bug Superset of 16929165
Super set bugs are:
16929165

Security Patch Update 11.2.0.4.0 (20299015)

Surprise!

Conflicts/Supersets for each patch are:

Patch : 18203837

Conflict with 18260550 ETCC R12.2 requirement per 1594274.1
Conflict details:
/u01/apptest/oracle/testdb/11.2.0.4/lib/libserver11.a:/kzd.o

Patch : 19972566

Conflict with 18614015 ETCC R12.2 requirement per 1594274.1
Conflict details:
/u01/apptest/oracle/testdb/11.2.0.4/rdbms/admin/prvtutil.plb

Patch : 20506715

Conflict with 19730032 ETCC R12.2 requirement per 1594274.1
Conflict details:
/u01/apptest/oracle/testdb/11.2.0.4/lib/libgeneric11.a:/qcs.o

Patch : 20631274

Bug Superset of 17600719 ETCC R12.2 requirement per 1594274.1
Super set bugs are:
17600719

Following patches have conflicts: [   18260550   18203837   18614015   19972566   19730032   20506715 ]
Refer to My Oracle Support Note 1299688.1 for instructions on resolving patch conflicts.

Security or Compatibility: Why are these two at odds?

I’m trying to do the right thing, but Oracle is making it so hard to do that I’ve lost interest.  I don’t have a month to figure out what merged patches I need, what patch can go and what can stay. Why can’t there be a single note for EBS by version, with all patches for all components?  A database patch set which already deconflicted all the oddball ETCC requirements and delivered something which you could actually install out of the gate would make life much easier.

 

Advertisements

Blog at WordPress.com.