Step by step to apply Oracle Critical Patch Update for October 2017 (CVE-2017-10151)

The Critical Patch Update for October 2017 was released on October 17th, 2017. Oracle strongly recommends applying the patches as soon as possible. This patch released every quarter.

Step 1: Down the Critical Patch Update (CPU) from Oracle site with valid username and password

Step 2: Stop Listener

Step 3: Shutdown Database

Step 4:  Copy the CPU patch to specific location  and unzip 

[oracle@said CPU_OCT2017]$ unzip p26609445_112040_Linux-x86-64.zip

[oracle@said CPU_OCT2017]$ ls -lrt
total 114196
drwxr-xr-x 17 oracle oinstall      4096 Aug 11 00:59 26609445
-rw-rw-r--  1 oracle oinstall     79653 Aug 15 20:41 PatchSearch.xml
-rwxr-xr-x  1 oracle oinstall 116847735 Oct 18 15:45 p26609445_112040_Linux-x86-64.zip
[oracle@said CPU_OCT2017]$
[oracle@said CPU_OCT2017]$ cd 26609445/
[oracle@said 26609445]$ pwd
/u01/CPU_OCT2017/26609445

Step 5:  Check the ORACLE_HOME and go to ORACLE_HOME/Opatch directory and apply the patch

Note: You must use the OPatch utility version 11.2.0.3.6 or later to apply this patch.

oracle@said 26609445]$ /u01/app/oracle/product/11.2.0.4/db_1/OPatch/opatch apply
Oracle Interim Patch Installer version 11.2.0.3.17
Copyright (c) 2017, Oracle Corporation.  All rights reserved.


Oracle Home       : /u01/app/oracle/product/11.2.0.4/db_1
Central Inventory : /u01/app/oraInventory
   from           : /u01/app/oracle/product/11.2.0.4/db_1/oraInst.loc
OPatch version    : 11.2.0.3.17
OUI version       : 11.2.0.4.0
Log file location : /u01/app/oracle/product/11.2.0.4/db_1/cfgtoollogs/opatch/opatch2017-10-19_10-10-44AM_1.log

Verifying environment and performing prerequisite checks...
OPatch continues with these patches:   17478514  18031668  18522509  19121551  19769489  20299013  20760982  21352635  21948347  22502456  23054359  24006111  24732075  25869727  26609445 

Do you want to proceed? [y|n]
y
User Responded with: Y
All checks passed.
Provide your email address to be informed of security issues, install and
initiate Oracle Configuration Manager. Easier for you if you use your My
Oracle Support Email address/User Name.
Visit http://www.oracle.com/support/policies.html for details.
Email address/User Name:

You have not provided an email address for notification of security issues.
Do you wish to remain uninformed of security issues ([Y]es, [N]o) [N]: 
Email address/User Name:

You have not provided an email address for notification of security issues.
Do you wish to remain uninformed of security issues ([Y]es, [N]o) [N]:  Y



Please shutdown Oracle instances running out of this ORACLE_HOME on the local system.
(Oracle Home = '/u01/app/oracle/product/11.2.0.4/db_1')

Is the local system ready for patching? [y|n]
y
User Responded with: Y
Backing up files...
.
.
.
.


Step 6:. After Apply the Patch execute the following script

cd $ORACLE_HOME/rdbms/admin
sqlplus /nolog
SQL> CONNECT / AS SYSDBA
SQL> STARTUP
SQL> @catbundle.sql psu apply
SQL> QUIT

Step 7: Check and verify that opatch is successfully applied or not

go to ORACLE_HOME/Opatch directory and execute the following command

[oracle@said OPatch]$ ./opatch lsinventory Oracle Interim Patch Installer version 11.2.0.3.17 Copyright (c) 2017, Oracle Corporation. All rights reserved. Oracle Home : /u01/app/oracle/product/11.2.0.4/db_1 Central Inventory : /u01/app/oraInventory from : /u01/app/oracle/product/11.2.0.4/db_1/oraInst.loc OPatch version : 11.2.0.3.17 OUI version : 11.2.0.4.0 Log file location : /u01/app/oracle/product/11.2.0.4/db_1/cfgtoollogs/opatch/opatch2017-10-19_11-20-20AM_1.log Lsinventory Output file location : /u01/app/oracle/product/11.2.0.4/db_1/cfgtoollogs/opatch/lsinv/lsinventory2017-10-19_11-20-20AM.txt -------------------------------------------------------------------------------- Local Machine Information:: Hostname: said.localdomain ARU platform id: 226 ARU platform description:: Linux x86-64 Installed Top-level Products (1): Oracle Database 11g 11.2.0.4.0 There are 1 products installed in this Oracle Home. Interim patches (1) : Patch 26609445 : applied on Thu Oct 19 11:13:54 BDT 2017 Unique Patch ID: 21482382 Patch description: "Database Patch Set Update : 11.2.0.4.170814 (26609445)" Created on 10 Aug 2017, 11:59:55 hrs PST8PDT Sub-patch 25869727; "Database Patch Set Update : 11.2.0.4.170718 (25869727)" Sub-patch 24732075; "Database Patch Set Update : 11.2.0.4.170418 (24732075)" Sub-patch 24006111; "Database Patch Set Update : 11.2.0.4.161018 (24006111)" Sub-patch 23054359; "Database Patch Set Update : 11.2.0.4.160719 (23054359)" Sub-patch 22502456; "Database Patch Set Update : 11.2.0.4.160419 (22502456)" Sub-patch 21948347; "Database Patch Set Update : 11.2.0.4.160119 (21948347)" Sub-patch 21352635; "Database Patch Set Update : 11.2.0.4.8 (21352635)" Sub-patch 20760982; "Database Patch Set Update : 11.2.0.4.7 (20760982)" Sub-patch 20299013; "Database Patch Set Update : 11.2.0.4.6 (20299013)" Sub-patch 19769489; "Database Patch Set Update : 11.2.0.4.5 (19769489)" Sub-patch 19121551; "Database Patch Set Update : 11.2.0.4.4 (19121551)" Sub-patch 18522509; "Database Patch Set Update : 11.2.0.4.3 (18522509)" Sub-patch 18031668; "Database Patch Set Update : 11.2.0.4.2 (18031668)" Sub-patch 17478514; "Database Patch Set Update : 11.2.0.4.1 (17478514)" Relevance to the Issue --------------------------- Patch 26609445 applied

-------------------For RAC Environment-----------------

-------------Rolling patch (no downtime)-----------

1. Stop Listener Node1

2. Apply Patch
[oracle@said CPU_OCT2017]$ unzip p26609445_112040_Linux-x86-64.zip

[oracle@said CPU_OCT2017]$ ls -lrt
total 114196
drwxr-xr-x 17 oracle oinstall      4096 Aug 11 00:59 26609445
-rw-rw-r--  1 oracle oinstall     79653 Aug 15 20:41 PatchSearch.xml
-rwxr-xr-x  1 oracle oinstall 116847735 Oct 18 15:45 p26609445_112040_Linux-x86-64.zip

Patching Oracle RAC Database Homes and GI Together

As root user, execute the following command on each node of the cluster:

./opatch auto /orasoft/soft/Patch/Patch/26609445 -ocmrf /export/home/grid/ocm.rsp

--Do the same for all other nodes