Oracle Critical Patch Update Program, SAP security note 850306

SAP security note 850306, "Oracle Critical Patch Update Program". Below are the symptom, SAP recommended solution and related references.

Description

Symptom

This note is issued as a Hot News. Check the note regularly for updates. Otherwise, you will not be aware of important changes regarding prerequisites, consequences, and solutions. A new Hot News is not issued if a note is updated.

• May 2010: Explicit CPU patches will no longer be provided for UNIX platforms. Future CPU patches will be contained in Patch Set Updates (PSUs) available every four months within an SAP Bundle Patch (SBP).
• Since 2005: Oracle provides quarterly CPUs containing corrections for significant security issues. These must be installed unless they conflict with other mandatory SAP patches.
• Release 10.2.0.4: CPU patches now follow the "n-apply" procedure, containing only security patches without functional patches. Patch molecules can be installed independently, reducing the likelihood of conflicts.

Installation of CPU patches using MOPatch (Note 1027012) is not supported.

Solution

SPUs for 2015:

• Oracle SPU/CPU from October 19, 2015: see SAP Note 2243382.
• Oracle SPU/CPU from July 19, 2015: see SAP Note 2205776.
• Oracle SPU/CPU from April 19, 2015: see SAP Note 2171427.
• Oracle SPU/CPU from January 19, 2015: see SAP Note 2133286.

Refer to the SAP Note for detailed information on SPUs and CPUs from 2014, 2013, 2012, 2011, 2010, 2009, 2008, 2007, 2006, and 2005. Each entry includes the specific SAP Note number and a brief description of the patch or conflict.

Reason and prerequisites

Critical Patch Updates contain corrections for moderately severe and very severe security issues, including prerequisites for the security patch, patches requested by many clients, and patches that may already be implemented and could cause conflicts.

References

• SPU – Oracle Security Patch Update July 2013
• CPU Patches April 2013 (Oracle Critical Update Program)
• CPU Patches January 2013 (Oracle Critical Update Program)
• CPU Patches October 2012 (Oracle Critical Update Program)
• CPU Patches July 2012 (Oracle Critical Update Program)
• CPU Patches April 2012 (Oracle Critical Update Program)
• CPU patches January 2011 (Oracle Critical Update Program)
• Optimizer merge fix for Oracle 10.2.0.2
• Oracle 10.2.0: Applying patch set/patches/patch collection
• CPU Patches April 2009 (Oracle Critical Update Program)
• CPU patches January 2009 (Oracle Critical Update Program)
• CPU patches October 2008 (Oracle Critical Update Program)
• CPU Patches July 2008 (Oracle Critical Update Program)
• CPU patches January 2008 (Oracle Critical Update Program)
• Oracle Database 10g: Patch sets/patches for 10.1.0
• CPU Patches October 2007 (Oracle Critical Update Program)
• CPU patches July 2007 (Oracle Critical Update Program)
• CPU Patches April 2007 (Oracle Critical Update Program)
• CPU patches January 2007 (Oracle Critical Update Program)
• CPU patches July 2006 (Oracle Critical Update Program)
• CPU patches April 2006 (Oracle Critical Update Program)
• FAQ: Oracle Security Alerts
• Oracle Critical Patch Update Program