Pete Finnigan's Oracle Security Forum (http://www.petefinnigan.com/forum/yabb/YaBB.cgi)
Oracle Security >> Oracle Security >> Critical Patch Update on 8.1.7.4
(Message started by: Pete Finnigan on Sep 27th, 2005, 8:29pm)

Title: Critical Patch Update on 8.1.7.4
Post by Pete Finnigan on Sep 27th, 2005, 8:29pm
Hi all,

     Someone knows how to identify if the Database has any CPU applied on Oracle DB 8.1.7.4 ???


Regards,

Robson Freitas
Brazil.

Title: Re: Critical Patch Update on 8.1.7.4
Post by Pete Finnigan on Nov 17th, 2005, 7:54pm
I posted a paper on patch verification on Oracle. Essentially you take snapshots of objects in the database at each patch level. When you want to find out if a given CPU has been installed you check the objects in the database against your list. For full details see "Patch Verification of Oracle Database Servers" at www.databasesecurity.com/oracle-securing.htm - (broken link)
Cheers,
David Litchfield

Title: Re: Critical Patch Update on 8.1.7.4
Post by Pete Finnigan on Nov 18th, 2005, 9:22am
Thanks for the paper David. I was aware of this technique to check patch levels. You can also use OPatch.pl for much more recent patches but it is not reliable. The only reliable method as you have found is to checksum packages and even then Oracle re-release CPU's often the checksums need to be current.

cheers

Pete

Title: Re: Critical Patch Update on 8.1.7.4
Post by Pete Finnigan on Nov 18th, 2005, 12:19pm
Thanks for all about the solutions. Thank you David 'Master' Litchfield for the paper...
I'll have a hard work making a automated script to check the CPU over 300  Databases (version 8.1.7.4) or more... The big problem is update this script on every 3 months...

Title: Re: Critical Patch Update on 8.1.7.4
Post by Pete Finnigan on Nov 18th, 2005, 12:22pm
A final question .. Does 'NGSSquirrel for Oracle' check this Patch level ??

Title: Re: Critical Patch Update on 8.1.7.4
Post by Pete Finnigan on Nov 18th, 2005, 12:24pm
Hi Pete,
8.1.7.4 doesn't use opatch.
Cheers,
David

Title: Re: Critical Patch Update on 8.1.7.4
Post by Pete Finnigan on Nov 18th, 2005, 12:25pm
Hi Robson,
Yes, NGSSSQuirreL does.
HTH,
David

Title: Re: Critical Patch Update on 8.1.7.4
Post by Pete Finnigan on Nov 18th, 2005, 2:03pm
dooohhh, I should have read the version in the question better!

cheers

Pete



Powered by YaBB 1 Gold - SP 1.4!
Forum software copyright 2000-2004 Yet another Bulletin Board