{"id":1505,"date":"2013-10-14T17:00:40","date_gmt":"2013-10-14T15:00:40","guid":{"rendered":"http:\/\/www.oradba.ch\/?p=1505"},"modified":"2013-10-16T09:08:39","modified_gmt":"2013-10-16T07:08:39","slug":"changes-in-database-security-patching-with-12c","status":"publish","type":"post","link":"https:\/\/www.oradba.ch\/wordpress\/2013\/10\/changes-in-database-security-patching-with-12c\/","title":{"rendered":"Changes in database security patching with 12c"},"content":{"rendered":"<p>During my preparation for the tests of October Critical Patch Updates (CPU), I stumbled over an interesting Oracle Support Document. I this document Oracle announced that there will nolonger be seperate SPU (Security Patch Update) respectively CPU (Critical Patch Update) for 12.1.0.1 and newer.<\/p>\n<p>Excerpt from Oracle support document <a href=\"https:\/\/support.oracle.com\/epmos\/faces\/DocumentDisplay?id=1581950.1\" title=\"1581950.1\" target=\"_blank\">1581950.1<\/a> Database Security Patching from 12.1.0.1 onwards:<\/p>\n<blockquote><p>Starting with Oracle Database version 12.1.0.1, Oracle will only provide Patch Set Update (PSU) patches to meet the Critical Patch Update (CPU) program requirements for security patching. SPU (Security Patch Update) patches will no longer be available. Oracle has moved to this simplified model due to the popularity of the PSU patches. PSUs are Oracle&#8217;s preferred proactive patching vehicle since their inception in 2009 [1].<\/p><\/blockquote>\n<p>In future it will be much easier to decide on CPU or PSU patches. \ud83d\ude42 The downside is that testing becomes more complicated, since the PSU (Patch Set Updates) include security patches as well functional bug fixes. <\/p>\n<h3>References<\/h3>\n<p>Some links related CPU, SPU and PSU<\/p>\n<ul>\n<li><a href=\"https:\/\/www.oradba.ch\/wordpress\/2013\/10\/oracle-cpu-psu-pre-release-announcement-october-2013\/\" title=\"Oracle CPU \/ PSU Pre-Release Announcement October 2013\" target=\"_blank\">Oracle CPU \/ PSU Pre-Release Announcement October 2013<\/a><\/li>\n<li><a href=\"https:\/\/www.oradba.ch\/wordpress\/2013\/08\/how-to-find-latest-oracle-database-patchset\/\" title=\"How to find latest oracle database patchset\" target=\"_blank\">How to find latest oracle database patchset<\/a><\/li>\n<li>Database Security Patching from 12.1.0.1 onwards [<em><a href=\"https:\/\/support.oracle.com\/epmos\/faces\/DocumentDisplay?id=1581950.1\" target=\"_blank\">1581950.1<\/a><\/em>]<\/li>\n<li>New Patch Nomenclature for Oracle Products [<em><a href=\"https:\/\/support.oracle.com\/epmos\/faces\/DocumentDisplay?id=1430923.1\" target=\"_blank\">1430923.1<\/a><\/em>]<\/li>\n<li>Patch Set Updates for Oracle Products [<em><a href=\"https:\/\/support.oracle.com\/epmos\/faces\/DocumentDisplay?id=854428.1\" target=\"_blank\">854428.1<\/a><\/em>]<\/li>\n<li>Introduction to Oracle Recommended Patches [<em><a href=\"https:\/\/support.oracle.com\/epmos\/faces\/DocumentDisplay?id=756388.1\" target=\"_blank\">756388.1<\/a><\/em>]<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>During my preparation for the tests of October Critical Patch Updates (CPU), I stumbled over an interesting Oracle Support Document. I this document Oracle announced that there will nolonger be seperate SPU (Security Patch Update) respectively CPU (Critical Patch Update) for 12.1.0.1 and newer. Excerpt from Oracle support document 1581950.1 Database Security Patching from 12.1.0.1 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"Changes in database security patching with 12c http:\/\/wp.me\/p1aErb-oh #trivadis","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[83,46,114,11,116],"tags":[111],"class_list":["post-1505","post","type-post","status-publish","format-standard","hentry","category-12cr1","category-cpu","category-psu-2","category-security","category-spu","tag-tvdsecexpert"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p1aErb-oh","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":1523,"url":"https:\/\/www.oradba.ch\/wordpress\/2013\/10\/oracle-released-cpu-psu-october-2013\/","url_meta":{"origin":1505,"position":0},"title":"Oracle released CPU \/ PSU October 2013","author":"Stefan","date":"16. October 2013","format":false,"excerpt":"As announced yesterday in my post Oracle CPU \/ PSU Pre-Release Announcement October 2013, Oracle has now released the last Critical Patch Updates for 2013. Overall this CPU contains 126 new security fixes across several Oracle products like Database Server, MySQL Server, Sun Product Suite, WebLogic Server etc. For Oracle\u2026","rel":"","context":"In &quot;10gR2&quot;","block_context":{"text":"10gR2","link":"https:\/\/www.oradba.ch\/wordpress\/category\/oracle-database\/10gr2\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":689,"url":"https:\/\/www.oradba.ch\/wordpress\/2011\/10\/update-oracle-released-cpu-psu-october-2011\/","url_meta":{"origin":1505,"position":1},"title":"Update: Oracle released CPU \/ PSU October 2011","author":"Stefan","date":"19. October 2011","format":false,"excerpt":"Oracle has just officially released the CPU \/ PSU Patches for october 2011. In contrast to the previously announced 56 bug fixes, there are now 57 bugfix. It looks like another bug fix for databases has been added to the CPU \/ PSU bundle.","rel":"","context":"In &quot;10gR2&quot;","block_context":{"text":"10gR2","link":"https:\/\/www.oradba.ch\/wordpress\/category\/oracle-database\/10gr2\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":757,"url":"https:\/\/www.oradba.ch\/wordpress\/2012\/01\/update-oracle-released-cpu-psu-january-2012\/","url_meta":{"origin":1505,"position":2},"title":"Update: Oracle released CPU \/ PSU January 2012","author":"Stefan","date":"24. January 2012","format":false,"excerpt":"Oracle has officially released the CPU \/ PSU Patches for january 2012. The Critical Patch Updates contains 78 security fixes across all products. But only two out of this 78 fixes are for Oracle databases.","rel":"","context":"In &quot;11gR1&quot;","block_context":{"text":"11gR1","link":"https:\/\/www.oradba.ch\/wordpress\/category\/oracle-database\/11gr1\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":2243,"url":"https:\/\/www.oradba.ch\/wordpress\/2017\/01\/oracle-cpu-psu-announcement-january-2017\/","url_meta":{"origin":1505,"position":3},"title":"Oracle CPU \/ PSU Announcement January 2017","author":"Stefan","date":"18. January 2017","format":false,"excerpt":"Oracle has published the first Critical Patch Update in 2017. It's quite a huge update with not less than 270 new security vulnerability fixes across the Oracle products. For the Oracle Database itself are 5 security fixes available respectively 2 security fixes for the Oracle Database Server and 3 security\u2026","rel":"","context":"In &quot;11gR2&quot;","block_context":{"text":"11gR2","link":"https:\/\/www.oradba.ch\/wordpress\/category\/oracle-database\/11gr2\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":14216,"url":"https:\/\/www.oradba.ch\/wordpress\/2023\/10\/latest-critical-patch-updates-from-oracle-october-2023\/","url_meta":{"origin":1505,"position":4},"title":"Latest Critical Patch Updates from Oracle &#8211; October 2023","author":"Stefan","date":"18. October 2023","format":false,"excerpt":"On October 17, Oracle released its quarterly Critical Patch Update Advisory. This comprehensive advisory contains details about 387 new security patches for various Oracle product families. Among them are some serious vulnerabilities that can be exploited remotely over the network, i.e. with a CVSS rating of 9 or more. The\u2026","rel":"","context":"In &quot;Critical Patch Update&quot;","block_context":{"text":"Critical Patch Update","link":"https:\/\/www.oradba.ch\/wordpress\/category\/patches\/cpu\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.oradba.ch\/wordpress\/wp-content\/uploads\/DBPatch.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.oradba.ch\/wordpress\/wp-content\/uploads\/DBPatch.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.oradba.ch\/wordpress\/wp-content\/uploads\/DBPatch.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.oradba.ch\/wordpress\/wp-content\/uploads\/DBPatch.png?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/www.oradba.ch\/wordpress\/wp-content\/uploads\/DBPatch.png?resize=1050%2C600&ssl=1 3x"},"classes":[]},{"id":788,"url":"https:\/\/www.oradba.ch\/wordpress\/2012\/05\/important-links-around-the-oracle-cpu-psu-april-2012\/","url_meta":{"origin":1505,"position":5},"title":"Important links around the Oracle CPU \/ PSU April 2012","author":"Stefan","date":"8. May 2012","format":false,"excerpt":"A few weeks ago oracle officially released the CPU \/ PSU Patches for April 2012. The Critical Patch Updates contains 88 security fixes across all products. But only 6 out of this 88 fixes are for Oracle databases. This post will summarize a bit the information and links around this\u2026","rel":"","context":"In &quot;Critical Patch Update&quot;","block_context":{"text":"Critical Patch Update","link":"https:\/\/www.oradba.ch\/wordpress\/category\/patches\/cpu\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"_links":{"self":[{"href":"https:\/\/www.oradba.ch\/wordpress\/wp-json\/wp\/v2\/posts\/1505","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.oradba.ch\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.oradba.ch\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.oradba.ch\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.oradba.ch\/wordpress\/wp-json\/wp\/v2\/comments?post=1505"}],"version-history":[{"count":3,"href":"https:\/\/www.oradba.ch\/wordpress\/wp-json\/wp\/v2\/posts\/1505\/revisions"}],"predecessor-version":[{"id":1509,"href":"https:\/\/www.oradba.ch\/wordpress\/wp-json\/wp\/v2\/posts\/1505\/revisions\/1509"}],"wp:attachment":[{"href":"https:\/\/www.oradba.ch\/wordpress\/wp-json\/wp\/v2\/media?parent=1505"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.oradba.ch\/wordpress\/wp-json\/wp\/v2\/categories?post=1505"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.oradba.ch\/wordpress\/wp-json\/wp\/v2\/tags?post=1505"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}