Re: Oracle security alert #68 - advice?

Andy Hardy <junkmail@[127.0.0.1]> wrote in message news:<lZsKl6Ci2WbBFwCb@[127.0.0.1]>...
> In message <416C36DD.11C374A2_at_YourShoesyahoo.com> , Walt
> <walt_askier_at_YourShoesyahoo.com> writes
> >
> >I'd like to apply the patch for Oracle Security Alert #68
> ><http://metalink.oracle.com/metalink/plsql/showdoc?db=NOT&id=281188.1.>
>
> I hope that the 9i patch is better than the 8i one - consists of 589
> files and a readme saying where they all should be copied to...

it depends.
9.2.0.5.0 requires the 10.1.0.2 OUI to first be installed.

check the alert #68 notes on metalink for updates. download the relevant patchsets.
read the readmes.
download ActiveState Perl v5.6.1 build 638. Install Perl.

shutdown/startup restrict.
export full=y
create a hot/cold/rman/boat-floating backup set.

prepare yourself in the event of requiring a complete software re-install.
contemplate if ORACLE_BASE was set, and what is the value of the env var inst_loc.

re-read the readme.txt, readme.html that were provided with the patchsets.
shtudown everything oracle. stop MS DTC and any backup software agents.

Install OUI 10.1.0.2 (into the 9.2 Oracle Home). Apply 9.2.0.5.0 with OUI in the provided patchset (into the 9.2 Oracle Home).
Apply the 9.2.0.5.3 patchset with OPatch (version 1.0.0.0.51 is a good one).
Apply the other patchset of you have the http components installed.

startup migrate
run the 9.2.0.5.0 and 9.2.0.5.3 post apply scripts. backup again, prior to allowing production usage.

if you would like, i've prepared a batch script for handling the 8.1.7.4.17 patchset application for win32.

hth.

-bdbafh Received on Thu Oct 14 2004 - 21:55:28 CDT