Re: security patches in any views?

In message
<06bfdbde-2dca-49cf-be1f-69e9eeed4c36_at_d62g2000hsf.googlegroups.com>, bdbafh <bdbafh_at_gmail.com> writes
>On Mar 18, 1:31 pm, NetComrade <netcomradeNS..._at_bookexchange.net>
>wrote:
>> Is there are a way to query all the security patches applied on a db?,
>> or is that a function of opatch only?
>>
>> Need for '3rd party' auditing purposes.
>>
>> thanks
>> .......
>> We run Oracle 9iR2,10gR2, 10g2RAC on RH4/RH5 and Solaris 10 (Sparc)
>> remove NSPAM to email
>
>
>This is a RH 4 box (U5) running 32 bit Oracle, 32 bit Linux.
>Its current and hasn't had the 10.2.0.4 patchset applied yet (but its
>sister test box has).
>
>$ sqlplus / as sysdba
>
>SQL*Plus: Release 10.2.0.3.0 - Production on Tue Mar 18 14:17:35 2008
>
>Copyright (c) 1982, 2006, Oracle. All Rights Reserved.
>
>
>Connected to:
>Oracle Database 10g Release 10.2.0.3.0 - Production
>
>SQL> select * from registry$history;
>
>ACTION_TIME
>---------------------------------------------------------------------------
>ACTION NAMESPACE
>------------------------------ ------------------------------
>VERSION ID
>------------------------------ ----------
>COMMENTS
>------------------------------------------------------------------------
>--------
>
>17-FEB-08 09.23.10.145133 AM
>CPU SERVER
>10.2.0.3.0 6646853
>CPUJan2008
>
>17-FEB-08 09.39.24.356214 AM
>CPU
> 6452863
>view recompilation
>
>
>hth.
>
>-bdbafh
>

v$registry_history is incomplete. I haven't had to time to go into it properly, but it looks as if a database created with binaries which have had a CPU installed doesn't show up has having the CPU installed in the database.

So you need a combination of when the CPU was applied to the binaries and when the database was created from those binaries.

-- 
Jim Smith