{"id":2414,"date":"2017-01-19T11:19:41","date_gmt":"2017-01-19T13:19:41","guid":{"rendered":"http:\/\/www.dbarj.com.br\/?p=2414\/"},"modified":"2017-01-23T11:02:39","modified_gmt":"2017-01-23T13:02:39","slug":"11-2-0-4-170117-db-psu-dbbp","status":"publish","type":"post","link":"https:\/\/www.dbarj.com.br\/en\/2017\/01\/11-2-0-4-170117-db-psu-dbbp\/","title":{"rendered":"Where are 11.2.0.4.170117 DB PSU and DBBP ?"},"content":{"rendered":"

On this January 17th Oracle released its quarterly PSU as we expected.<\/p>\n

The 12.1.0.2 version was OK regarding DB PSU, GI PSU, DBBP and OJVM PSU.<\/p>\n

However, for the 11.2.0.4<\/strong> version, only the OJVM PSU of Jan 2017 was provided<\/strong><\/span>. All the combos came with Oct 2016<\/strong> version of DB\/GI fixes + Jan 2017<\/strong> OJVM as you can see below:<\/p>\n

\"\"<\/p>\n

Source:\u00a0Oracle Support Document 756671.1 (Oracle Recommended Patches — Oracle Database) – https:\/\/support.oracle.com\/epmos\/faces\/DocumentDisplay?id=756671.1<\/a><\/span><\/p>\n

 <\/p>\n

Why this behavior only for 11.2.0.4<\/strong> version? Note that 12.1.0.1<\/strong> stopped at “Jul 2016” and 11.2.0.3<\/strong> at “Jul 2015”. So why this early behavior with 11.2.0.4?<\/p>\n

Checking the Risk Matrix for “Oracle Critical Patch Update Advisory – January 2017”:<\/p>\n

 <\/p>\n\n\n\n\n\n\n\n
CVE#<\/th>\nComponent<\/th>\nPackage and\/or Privilege Required<\/th>\nProtocol<\/th>\nRemote
\nExploit
\nwithout
\nAuth.?<\/th>\n		CVSS VERSION 3.0 RISK (see Risk Matrix Definitions<\/a>)<\/th>\nSupported Versions Affected<\/th>\nNotes<\/th>\n<\/tr>\n
Base
\nScore<\/th>\n		Attack
\nVector<\/th>\n		Attack
\nComplex<\/th>\n		Privs
\nReq’d<\/th>\n		User
\nInteract<\/th>\n		Scope<\/th>\nConfid-
\nentiality<\/th>\n		Inte-
\ngrity<\/th>\n		Avail-
\nability<\/th>\n<\/tr>\n<\/thead>\n
CVE-2017-3310<\/td>\nOJVM<\/td>\nCreate Session, Create Procedure<\/td>\nMultiple<\/td>\nNo<\/td>\n9.0<\/td>\nNetwork<\/td>\nLow<\/td>\nLow<\/td>\nRequired<\/td>\nChanged<\/td>\nHigh<\/td>\nHigh<\/td>\nHigh<\/td>\n11.2.0.4, 12.1.0.2<\/td>\n<\/td>\n<\/tr>\n
CVE-2017-3240<\/td>\nRDBMS Security<\/td>\nLocal Logon<\/td>\nOracle Net<\/td>\nNo<\/td>\n3.3<\/td>\nLocal<\/td>\nLow<\/td>\nLow<\/td>\nNone<\/td>\nUn-
\nchanged<\/td>\n		Low<\/td>\nNone<\/td>\nNone<\/td>\n12.1.0.2<\/td>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Source:\u00a0http:\/\/www.oracle.com\/technetwork\/security-advisory\/cpujan2017-2881727.html<\/span><\/a><\/p>\n

 <\/p>\n

The table above shows that Security fixes for 11.2.0.4 were only related with OJVM, while for 12.1.0.2 there was also a security fix for the Database. This could be one reason, but CPU is only a fraction of a PSU package. Let’s dig further.<\/p>\n

Checking the official MOS Doc 2203916.1\u00a0in item\u00a03.1.4.3<\/span>\u00a0– Oracle Database 11.2.0.4<\/strong>, we have:<\/p>\n

\"\"<\/p>\n

Source: Oracle Support Document 2203916.1 (Patch Set Update and Critical Patch Update January 2017 Availability Document) –\u00a0https:\/\/support.oracle.com\/epmos\/faces\/DocumentDisplay?id=2203916.1<\/a><\/span><\/p>\n

 <\/p>\n

There are no Database SPU or PSU or Exadata BP for 11.2.0.4 for Jan 2017 cycle as there are no new CPU security vulnerabilities applicable. Future patches are planned until end of Error Correction listed in the table above.<\/p><\/blockquote>\n

 <\/p>\n

So the answer is there. Oracle decided to skip the PSU and DBBP for Jan 2017 as there was no CPU related with the RDBMS for this period. Problem is that, by definition,\u00a0“Patch Set Updates (PSU) are the same cumulative patches that include both the security fixes and priority fixes.<\/strong>“. So what about all the bug fixes for that period?<\/p>\n

I’ve opened a “Contact Us SR” asking about this issue.\u00a0The answer was that my understandings were right and unfortunately they will not provide a PSU for 11.2.0.4 on January. Thanks Oracle for forgetting the past versions, forcing one-off patches. By the way, support for 11.2 ends on Dec 2020<\/strong>.\u00a0However, until then, it seems that only drastic corrections will be provided quarterly.<\/p>\nHave you enjoyed? Please leave a comment or give a \ud83d\udc4d!<\/b>\n

Continue reading<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[38],"tags":[],"class_list":["post-2414","post","type-post","status-publish","format-standard","hentry","category-oracle-news-en","item-wrap"],"yoast_head":"\nWhere are 11.2.0.4.170117 DB PSU and DBBP ? - DBA - Rodrigo Jorge - Oracle Tips and Guides<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dbarj.com.br\/en\/2017\/01\/11-2-0-4-170117-db-psu-dbbp\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"DBA RJ\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/en\\\/2017\\\/01\\\/11-2-0-4-170117-db-psu-dbbp\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/en\\\/2017\\\/01\\\/11-2-0-4-170117-db-psu-dbbp\\\/\"},\"author\":{\"name\":\"DBA RJ\",\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/en\\\/#\\\/schema\\\/person\\\/28a44ca3a6633fe4156ad1ea209d40a9\"},\"headline\":\"Where are 11.2.0.4.170117 DB PSU and DBBP ?\",\"datePublished\":\"2017-01-19T13:19:41+00:00\",\"dateModified\":\"2017-01-23T13:02:39+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/en\\\/2017\\\/01\\\/11-2-0-4-170117-db-psu-dbbp\\\/\"},\"wordCount\":443,\"commentCount\":1,\"publisher\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/en\\\/#\\\/schema\\\/person\\\/28a44ca3a6633fe4156ad1ea209d40a9\"},\"image\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/en\\\/2017\\\/01\\\/11-2-0-4-170117-db-psu-dbbp\\\/#primaryimage\"},\"thumbnailUrl\":\"http:\\\/\\\/www.dbarj.com.br\\\/wp-content\\\/uploads\\\/2017\\\/01\\\/img_5880aa6934a6c.png\",\"articleSection\":[\"Oracle News\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.dbarj.com.br\\\/en\\\/2017\\\/01\\\/11-2-0-4-170117-db-psu-dbbp\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/en\\\/2017\\\/01\\\/11-2-0-4-170117-db-psu-dbbp\\\/\",\"url\":\"https:\\\/\\\/www.dbarj.com.br\\\/en\\\/2017\\\/01\\\/11-2-0-4-170117-db-psu-dbbp\\\/\",\"name\":\"Where are 11.2.0.4.170117 DB PSU and DBBP ? - DBA - Rodrigo Jorge - Oracle Tips and Guides\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/en\\\/2017\\\/01\\\/11-2-0-4-170117-db-psu-dbbp\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/en\\\/2017\\\/01\\\/11-2-0-4-170117-db-psu-dbbp\\\/#primaryimage\"},\"thumbnailUrl\":\"http:\\\/\\\/www.dbarj.com.br\\\/wp-content\\\/uploads\\\/2017\\\/01\\\/img_5880aa6934a6c.png\",\"datePublished\":\"2017-01-19T13:19:41+00:00\",\"dateModified\":\"2017-01-23T13:02:39+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/en\\\/2017\\\/01\\\/11-2-0-4-170117-db-psu-dbbp\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.dbarj.com.br\\\/en\\\/2017\\\/01\\\/11-2-0-4-170117-db-psu-dbbp\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/en\\\/2017\\\/01\\\/11-2-0-4-170117-db-psu-dbbp\\\/#primaryimage\",\"url\":\"http:\\\/\\\/www.dbarj.com.br\\\/wp-content\\\/uploads\\\/2017\\\/01\\\/img_5880aa6934a6c.png\",\"contentUrl\":\"http:\\\/\\\/www.dbarj.com.br\\\/wp-content\\\/uploads\\\/2017\\\/01\\\/img_5880aa6934a6c.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/en\\\/2017\\\/01\\\/11-2-0-4-170117-db-psu-dbbp\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.dbarj.com.br\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Where are 11.2.0.4.170117 DB PSU and DBBP ?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.dbarj.com.br\\\/en\\\/\",\"name\":\"DBA - Rodrigo Jorge - Oracle Tips and Guides\",\"description\":\"Blog about Databases, Security and High Availability\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/en\\\/#\\\/schema\\\/person\\\/28a44ca3a6633fe4156ad1ea209d40a9\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.dbarj.com.br\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/en\\\/#\\\/schema\\\/person\\\/28a44ca3a6633fe4156ad1ea209d40a9\",\"name\":\"DBA RJ\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/wp-content\\\/uploads\\\/2019\\\/09\\\/RodrigoJorgePOUG19.png\",\"url\":\"https:\\\/\\\/www.dbarj.com.br\\\/wp-content\\\/uploads\\\/2019\\\/09\\\/RodrigoJorgePOUG19.png\",\"contentUrl\":\"https:\\\/\\\/www.dbarj.com.br\\\/wp-content\\\/uploads\\\/2019\\\/09\\\/RodrigoJorgePOUG19.png\",\"width\":712,\"height\":712,\"caption\":\"DBA RJ\"},\"logo\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/wp-content\\\/uploads\\\/2019\\\/09\\\/RodrigoJorgePOUG19.png\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Where are 11.2.0.4.170117 DB PSU and DBBP ? - DBA - Rodrigo Jorge - Oracle Tips and Guides","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dbarj.com.br\/en\/2017\/01\/11-2-0-4-170117-db-psu-dbbp\/","twitter_misc":{"Written by":"DBA RJ","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dbarj.com.br\/en\/2017\/01\/11-2-0-4-170117-db-psu-dbbp\/#article","isPartOf":{"@id":"https:\/\/www.dbarj.com.br\/en\/2017\/01\/11-2-0-4-170117-db-psu-dbbp\/"},"author":{"name":"DBA RJ","@id":"https:\/\/www.dbarj.com.br\/en\/#\/schema\/person\/28a44ca3a6633fe4156ad1ea209d40a9"},"headline":"Where are 11.2.0.4.170117 DB PSU and DBBP ?","datePublished":"2017-01-19T13:19:41+00:00","dateModified":"2017-01-23T13:02:39+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dbarj.com.br\/en\/2017\/01\/11-2-0-4-170117-db-psu-dbbp\/"},"wordCount":443,"commentCount":1,"publisher":{"@id":"https:\/\/www.dbarj.com.br\/en\/#\/schema\/person\/28a44ca3a6633fe4156ad1ea209d40a9"},"image":{"@id":"https:\/\/www.dbarj.com.br\/en\/2017\/01\/11-2-0-4-170117-db-psu-dbbp\/#primaryimage"},"thumbnailUrl":"http:\/\/www.dbarj.com.br\/wp-content\/uploads\/2017\/01\/img_5880aa6934a6c.png","articleSection":["Oracle News"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.dbarj.com.br\/en\/2017\/01\/11-2-0-4-170117-db-psu-dbbp\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.dbarj.com.br\/en\/2017\/01\/11-2-0-4-170117-db-psu-dbbp\/","url":"https:\/\/www.dbarj.com.br\/en\/2017\/01\/11-2-0-4-170117-db-psu-dbbp\/","name":"Where are 11.2.0.4.170117 DB PSU and DBBP ? - DBA - Rodrigo Jorge - Oracle Tips and Guides","isPartOf":{"@id":"https:\/\/www.dbarj.com.br\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.dbarj.com.br\/en\/2017\/01\/11-2-0-4-170117-db-psu-dbbp\/#primaryimage"},"image":{"@id":"https:\/\/www.dbarj.com.br\/en\/2017\/01\/11-2-0-4-170117-db-psu-dbbp\/#primaryimage"},"thumbnailUrl":"http:\/\/www.dbarj.com.br\/wp-content\/uploads\/2017\/01\/img_5880aa6934a6c.png","datePublished":"2017-01-19T13:19:41+00:00","dateModified":"2017-01-23T13:02:39+00:00","breadcrumb":{"@id":"https:\/\/www.dbarj.com.br\/en\/2017\/01\/11-2-0-4-170117-db-psu-dbbp\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dbarj.com.br\/en\/2017\/01\/11-2-0-4-170117-db-psu-dbbp\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.dbarj.com.br\/en\/2017\/01\/11-2-0-4-170117-db-psu-dbbp\/#primaryimage","url":"http:\/\/www.dbarj.com.br\/wp-content\/uploads\/2017\/01\/img_5880aa6934a6c.png","contentUrl":"http:\/\/www.dbarj.com.br\/wp-content\/uploads\/2017\/01\/img_5880aa6934a6c.png"},{"@type":"BreadcrumbList","@id":"https:\/\/www.dbarj.com.br\/en\/2017\/01\/11-2-0-4-170117-db-psu-dbbp\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.dbarj.com.br\/en\/"},{"@type":"ListItem","position":2,"name":"Where are 11.2.0.4.170117 DB PSU and DBBP ?"}]},{"@type":"WebSite","@id":"https:\/\/www.dbarj.com.br\/en\/#website","url":"https:\/\/www.dbarj.com.br\/en\/","name":"DBA - Rodrigo Jorge - Oracle Tips and Guides","description":"Blog about Databases, Security and High Availability","publisher":{"@id":"https:\/\/www.dbarj.com.br\/en\/#\/schema\/person\/28a44ca3a6633fe4156ad1ea209d40a9"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dbarj.com.br\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/www.dbarj.com.br\/en\/#\/schema\/person\/28a44ca3a6633fe4156ad1ea209d40a9","name":"DBA RJ","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.dbarj.com.br\/wp-content\/uploads\/2019\/09\/RodrigoJorgePOUG19.png","url":"https:\/\/www.dbarj.com.br\/wp-content\/uploads\/2019\/09\/RodrigoJorgePOUG19.png","contentUrl":"https:\/\/www.dbarj.com.br\/wp-content\/uploads\/2019\/09\/RodrigoJorgePOUG19.png","width":712,"height":712,"caption":"DBA RJ"},"logo":{"@id":"https:\/\/www.dbarj.com.br\/wp-content\/uploads\/2019\/09\/RodrigoJorgePOUG19.png"}}]}},"_links":{"self":[{"href":"https:\/\/www.dbarj.com.br\/en\/wp-json\/wp\/v2\/posts\/2414","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dbarj.com.br\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dbarj.com.br\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dbarj.com.br\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dbarj.com.br\/en\/wp-json\/wp\/v2\/comments?post=2414"}],"version-history":[{"count":0,"href":"https:\/\/www.dbarj.com.br\/en\/wp-json\/wp\/v2\/posts\/2414\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.dbarj.com.br\/en\/wp-json\/wp\/v2\/media?parent=2414"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dbarj.com.br\/en\/wp-json\/wp\/v2\/categories?post=2414"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dbarj.com.br\/en\/wp-json\/wp\/v2\/tags?post=2414"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}