Oracle升级

浏览数：147 / 时间：2015年06月12日

从别人的博客粘过来，写得真心不错，分享给更多需要的朋友！！

1、CPU、PSU和SPU

CPU：Critical Patch Update（关键补丁更新）, 开始于2005年1月，Oracle对于其产品每个季度发行一次安全补丁包，通常是为了修复产品中的安全隐患。2012年10月的关键补丁更新改名为Security Patch Update (SPU)。

PSU：Patch Set Update（补丁集更新），Oracle对于其产品每个季度发行一次的补丁包，包含了bug的修复。Oracle选取被用户下载数量多，且被验证过具有较低风险的补丁放入到每个季度的PSU中。在每个PSU中不但包含Bug的修复而且还包含了最新的CPU。PSU通常随CPU一起发布。Patch Set Updates (PSU) are the same cumulative patches that include both the security fixes and priority fixes. The key with PSUs is they are minor version upgrades (e.g., 11.2.0.1.1 to 11.2.0.1.2). Once a PSU is applied, only PSUs can be applied in future quarters until the database is upgraded to a new base version.

SPU：Security Patch Update（安全补丁更新），Security Patch Update (SPU) terminology is introduced in the October 2012 Critical Patch Update as the term for the quarterly security patch. SPU patches are the same as previous CPU patches, just a new name. For the database, SPUs can not be applied once PSUs have been applied until the database is upgraded to a new base version.

CPU是累积的（Cumulative），即最新的CPU补丁已经包含以往的CPU补丁，所以只要安装最新的CPU补丁即可。
PSU通常也是增量的，大部分PSU可以直接安装，但有些PSU则必须要求安装了上一个版本的PSU之后才能继续安装，要仔细看各个PSU的Readme文档。

2、Oracle数据库

2013年8月27日，Oracle最终发布了11.2.0.4版本，这将是Oracle 11gR2的终极版本。从下图上可以看到，Oracle11g在2007年发布，将在2017年底结束扩展支持，跨度为11年，这是一个重量级的版本，扩展了10g开始的大规模自动化特性，使Oracle在这个方向真正成熟起来，11g之后，再无Grid，Oracle进入了Cloud的时代，12c的舞台已经搭好。

11.2.0.4 13390677 11.2.0.4.0 PATCH SET FOR ORACLE DATABASE SERVER

11.2.0.3.8 16902043 DATABASE PATCH SET UPDATE 11.2.0.3.8 (INCLUDES CPUOCT2013)

11.2.0.3.7 16619892 DATABASE PATCH SET UPDATE 11.2.0.3.7 (INCLUDES CPUJUL2013)

11.2.0.3.6 16056266 DATABASE PATCH SET UPDATE 11.2.0.3.6 (INCLUDES CPUAPR2013)

11.2.0.3.5 14727310 DATABASE PATCH SET UPDATE 11.2.0.3.5 (INCLUDES CPUJAN2013):

11.2.0.3.4 14275605 DATABASE PATCH SET UPDATE 11.2.0.3.4 (INCLUDES CPUOCT2012)

11.2.0.3.3 13923374 DATABASE PATCH SET UPDATE 11.2.0.3.3 (INCLUDES CPU JUL2012):

11.2.0.3.2 13696216 DATABASE PATCH SET UPDATE 11.2.0.3.2 (INCLUDES CPU APR2012)

11.2.0.3.1 13343438 DATABASE PATCH SET UPDATE 11.2.0.3.1 (INCLUDES CPU JAN2012)

11.2.0.3 10404530 11.2.0.3.0 PATCH SET FOR ORACLE DATABASE SERVER

11.2.0.2.11 16619893 DATABASE PATCH SET UPDATE 11.2.0.2.11 (INCLUDES CPUJUL2013)

11.2.0.2.10 16056267 DATABASE PATCH SET UPDATE 11.2.0.2.10 (INCLUDES CPUAPR2013)

11.2.0.2.9 14727315 DATABASE PATCH SET UPDATE 11.2.0.2.9 (INCLUDES CPUJAN2013):

11.2.0.2.8 14275621 DATABASE PATCH SET UPDATE 11.2.0.2.8 (INCLUDES CPUOCT2012)

11.2.0.2.7 13923804 DATABASE PATCH SET UPDATE 11.2.0.2.7 (INCLUDES CPU JUL2012)

11.2.0.2.6 13696224 DATABASE PATCH SET UPDATE 11.2.0.2.6 (INCLUDES CPU APR2012)

11.2.0.2.5 13343424 DATABASE PATCH SET UPDATE 11.2.0.2.5 (INCLUDES CPU JAN2012)

11.2.0.2.4 12827726 DATABASE PSU 11.2.0.2.4 (INCLUDES CPUOCT2011)

11.2.0.2.3 12419331 DATABASE PSU 11.2.0.2.3 (INCLUDES CPUJUL2011)

11.2.0.2.2 11724916 DATABASE PSU 11.2.0.2.2 (INCLUDES CPUAPR2011)

11.2.0.2.1 10248523 DATABASE PSU 11.2.0.2.1

11.2.0.2 10098816 11.2.0.2.0 PATCH SET FOR ORACLE DATABASE SERVER

11.2.0.1.6 12419378 DATABASE PSU 11.2.0.1.6 (INCLUDES CPUJUL2011)

11.2.0.1.5 11724930 DATABASE PSU 11.2.0.1.5 (INCLUDES CPUAPR2011)

11.2.0.1.4 10248516 DATABASE PSU 11.2.0.1.4 (INCLUDES CPUJAN2011)

11.2.0.1.3 9952216 DATABASE PSU 11.2.0.1.3 (INCLUDES CPUOCT2010)

11.2.0.1.2 9654983 DATABASE PSU 11.2.0.1.2 (INCLUDES CPUJUL2010)

11.2.0.1.1 9352237 DATABASE PSU 11.2.0.1.1

Oracle 11.2.0.4该PatchSet的补丁号为：13390677 。

安装类型	压缩文件
Oracle Database（includes Oracle Database和Oracle RAC）安装数据库至少需要这两个安装包	p13390677_112040_Linux-x86-64_1of7.zip p13390677_112040_Linux-x86-64_2of7.zip
Oracle Grid Infrastructure(包括Oracle ASM、Oracle Clusterware和Oracle Restart）	p13390677_112040_Linux-x86-64_3of7.zip
Oracle Database Client	p13390677_112040_Linux-x86-64_4of7.zip
Oracle Gateways	p13390677_112040_Linux-x86-64_5of7.zip
Oracle Examples	p13390677_112040_Linux-x86-64_6of7.zip
Deinstall	p13390677_112040_Linux-x86-64_7of7.zip

3、漏洞修复

Product Home	Patch	Advisory Number	Comments
Oracle Database home	Database 11.2.0.4 SPU Patch 18139690, or Database 11.2.0.4.2 PSU Patch 18031668, or GI 11.2.0.4.2 PSU Patch 18139609, or Microsoft Windows (32-Bit) & x64 (64-Bit) BP 4 Patch 18296644, or later; Quarterly Database Patch for Exadata (April 2014) 11.2.0.4.6 BP Patch 18371656, or Quarterly Full Stack download for Exadata (April 2014) BP Patch 18370227	CVE-2014-2406, CVE-2014-2408

Product Home

Patch

Advisory Number

Comments

Oracle Database home

Database 11.2.0.4 SPU Patch 18139690, or

Database 11.2.0.4.2 PSU Patch 18031668, or

GI 11.2.0.4.2 PSU Patch 18139609, or

Microsoft Windows (32-Bit) & x64 (64-Bit) BP 4 Patch 18296644, or later;

Quarterly Database Patch for Exadata (April 2014) 11.2.0.4.6 BP Patch 18371656, or

Quarterly Full Stack download for Exadata (April 2014) BP Patch 18370227

CVE-2014-2406, CVE-2014-2408

Product Home	Patch	Advisory Number	Comments
Oracle Database home	Database 11.2.0.4 SPU Patch 17551709, or Database 11.2.0.4.1 PSU Patch 17478514, or Microsoft Windows (32-Bit) & x64 (64-Bit) BP 1 Patch 17987366, or later; Quarterly Database Patch for Exadata (January 2014) BPPatch 17904156, or Quarterly Full Stack download for Exadata (January 2014) BP Patch 17816151	CVE-2013-5858, CVE-2014-0377, CVE-2014-0378

Product Home

Patch

Advisory Number

Comments

Oracle Database home

Database 11.2.0.4 SPU Patch 17551709, or

Database 11.2.0.4.1 PSU Patch 17478514, or

Microsoft Windows (32-Bit) & x64 (64-Bit) BP 1 Patch 17987366, or later;

Quarterly Database Patch for Exadata (January 2014) BPPatch 17904156, or

Quarterly Full Stack download for Exadata (January 2014) BP Patch 17816151

CVE-2013-5858, CVE-2014-0377, CVE-2014-0378

4、安装SPU补丁

--检查当前OPatch版本，必须最少为OPatch utility version 11.2.0.3.4 or later

$ echo $ORACLE_HOME

$ export PATH=$PATH:$ORACLE_HOME/OPatch

$ opatch version

OPatch Version: 11.2.0.3.4

OPatch succeeded.

--停止Oracle相关进程

$ lsnrctl stop

$ emctl stop dbconsole

$ sqlplus / as sysdba

SQL> shutdown immediate;

--安装

$ cd /opt/patch/17551709

$ opatch napply -skip_subset -skip_duplicate

Oracle 中间补丁程序安装程序版本 11.2.0.3.4

Oracle Home : /u01/app/oracle/product/11.2.0/dbhome_1

Central Inventory : /u01/app/oraInventory

from : /u01/app/oracle/product/11.2.0/dbhome_1/oraInst.loc

OPatch version : 11.2.0.3.4

OUI version : 11.2.0.4.0

Log file location : /u01/app/oracle/product/11.2.0/dbhome_1/cfgtoollogs/opatch/opatch2014-07-03_08-29-32上午_1.log

Verifying environment and performing prerequisite checks...

Checking skip_duplicate

Checking skip_subset

OPatch continues with these patches: 17551709 17811429 17811438 17811447 17811456

是否继续? [y|n]

User Responded with: Y

All checks passed.

请关闭本地系统上在此 ORACLE_HOME 之外运行的 Oracle 实例。

(Oracle 主目录 = ‘/u01/app/oracle/product/11.2.0/dbhome_1‘)

本地系统是否已准备打补丁? [y|n]

User Responded with: Y

Backing up files...

Applying interim patch ‘17551709‘ to OH ‘/u01/app/oracle/product/11.2.0/dbhome_1‘

正在为组件 oracle.rdbms.rsf, 11.2.0.4.0 打补丁...