Scribd
Upload
75 views

How To Install Oracle Critical Patch Update Advisory - April 2021

1. The document provides instructions for preparing to install a WebLogic Server Security Patch Bundle (SPB), installing the SPB, and post-installation steps. 2. Key preparation steps include downloading necessary patch packages, checking the Java and OPatch versions, backing up the Oracle home directory, and stopping all WebLogic Server processes. 3. The installation uses OPatch commands like "opatch napply" to apply multiple patches listed in a patchlist file. An optional pre-installation report identifies any potential issues. 4. Post-installation steps include verifying applied patches and starting WebLogic servers. The document references additional resources for security advice and rollback instructions.

Uploaded by

jan king
Copyright
© © All Rights Reserved
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
75 views

How To Install Oracle Critical Patch Update Advisory - April 2021

1. The document provides instructions for preparing to install a WebLogic Server Security Patch Bundle (SPB), installing the SPB, and post-installation steps. 2. Key preparation steps include downloading necessary patch packages, checking the Java and OPatch versions, backing up the Oracle home directory, and stopping all WebLogic Server processes. 3. The installation uses OPatch commands like "opatch napply" to apply multiple patches listed in a patchlist file. An optional pre-installation report identifies any potential issues. 4. Post-installation steps include verifying applied patches and starting WebLogic servers. The document references additional resources for security advice and rollback instructions.

Uploaded by

jan king
Copyright
© © All Rights Reserved
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
You are on page 1/ 7

Preparation

1. Oralce account
You can register a new one with your own email.
Or, utilize below

Account [email protected]
Password iMAN@0611

2. Oralce patch packages


2.1 You can find all necessary packages from my Onedrive,
url: https:\\inforonline-my.sharepoint.com\:f:\g\personal\gank_lu_infor_com\
EiuwMzWVomFFjcSDIsD860EBotA-woB5V6pRMD9MSzRt4g?e=BVYMBF

Find the folder matching your Weblogic Server version, and download.

2.2 If you have Oralce account,


you can download all the necessary patch packages from https:\\www.oracle.com\security-
alerts\cpuapr2021.html.
Open this site, scroll downwards, and find below part, the click “Fusion Middleware”, as below
Go to the detailed page, and download the folder matching your Weblogic Server version.

Prerequisites
1. Minimum Java Version Check
There is an expected minimum version of Java SE (JDK\JRE) before installing the WLS SPB.
In order to maintain security, it is strongly encouraged to upgrade to the Java SE released with the
Critical Patch Update program:
Doc ID 2762944.1 Oracle Critical Patch Update (CPU) April 2021 for Oracle Java SE
Refer to the following table for minimum and recommended Java SE versions:
Platform JDK Vendor Major JDK Expected Minimum Version
Version

Windows 64 Oracle 1.8.0 1.8.0_181+

Linux x86-64 Oracle 1.8.0 1.8.0_181+

Solaris x86-64 Oracle 1.8.0 1.8.0_181+

Solaris Sparc Oracle 1.8.0 1.8.0_181+

IBM AIX 64 IBM 1.8.0 1.8.0 SR4 FP2+

IBM Linux on System Z IBM 1.8.0 1.8.0 SR4 FP2+

HPUX-IA64 HP 1.8.0 1.8.0.9+

Refer the following document to verify and upgrade to relevant JDK:

Doc ID 1492980.1 on How to Install and Maintain the Java SE Installed or Used with FMW 11g\
12c\14.1.1 Products
https:\\support.oracle.com\epmos\faces\DocumentDisplay?id=1492980.1

2. Backup
IMPORTANT: Create a complete backup of ORACLE_HOME and CENTRAL INVENTORY
Refer the following Backing Up Your Environment for Oracle recommended backup strategies.
Restoring from backup is the only way to rollback the SPB.

Sample step: https://orahow.com/backup-oracle-home-and-inventory/

3. OPatch Version Check


Ensure that ORACLE_HOME has minimum required OPatch version, i.e. 13.9.4.2.5 or higher.
OPatch 13.9.4.2.5 is included in the SPB but needs to be installed separately.
To verify the OPatch version, run the following command:

%ORACLE_HOME%\OPatch\opatch version

To upgrade OPatch, follow the below steps:


a. Unzip OPatch (bundled as part of WLS SPB) to a temporary location
Example for Unix:
unzip WLS_SPB_<RELEASE>.<VERSION>\tools\opatch\generic\
p28186730_139425_Generic.zip -d <tmp_path_of_OPatch_packages>
b. After unzipping, refer to this OPatch README.txt for most up to date instructions on upgrading
OPatch in the ORACLE_HOME.
In general the command is:
java -jar opatch_generic.jar -silent oracle_home=<ORACLE_HOME>
4. Environment Settings
a. Log in and run commands as the OS user that installed Oracle WebLogic Server.
b. Set the ORACLE_HOME environment variable to the directory where you have installed Oracle
WebLogic Server.
c. Set the JAVA_HOME environment variable to the directory where you have installed the Java
in use with Oracle WebLogic Server.

5. Stop All Services for WLS


Stop all WebLogic Server processes before proceeding with the patch installation.

Install
The SPB makes use of two OPatch features:

a. The patch installation is performed by the "opatch napply" command, where the napply can install multiple
patches using the list configured in the <platform>_patchlist.txt.

b. OPatch gives you an option to run with the flag -report. This option will not install the patches but will show
you the result of what would happen if you did apply the patches.

Note: This report may be useful to run if you are unsure of any conflicts or issues applying the SPB may have.
Running the OPatch with -report is not required, it is optional and meant to provide meaningful information
before actually applying the patches.
The report does not have to be submitted to Support when no conflicts or issues are found. If no conflicts are
found in the report, you may proceed to apply the SPB.

Windows Platform Steps


Open the Command Prompt as Administrator to exercise the following steps:

1. This step is optional to perform a report of what would happen when applying the SPB. Run the
following commands with the -report flag to produce a log to review:

cd <tmp_path_of_OPatch_packages>\WLS_SPB_12.2.1.3.<VERSION>\binary_patches
%ORACLE_HOME%\OPatch\opatch napply -report -oh %ORACLE_HOME% -
phBaseFile windows64_patchlist.txt

(Note: The windows64_patchlist.txt file is bundled into the SPB and you do not need to provide a path to
the file)

Once the opatch napply -report command is executed, review the output of the command and the logs it
produces to be aware of any possible issues.
No changes have been made to your Oracle home even though the command output may say that
patches were successfully applied.

2. This step will apply the SPB.

Run the following commands to apply SPB:

cd <tmp_path_of_OPatch_packages>\WLS_SPB_12.2.1.3.<VERSION>\binary_patches

%ORACLE_HOME%\OPatch\opatch napply -oh %ORACLE_HOME% -phBaseFile


windows64_patchlist.txt

Patch installation done:


(Note the windows64_patchlist.txt file is bundled into the SPB and you do not need to provide a path to the
file)

Once the opatch napply command is executed, review the output of the command and the logs it produces
to be aware of any possible issues.
Changes have been made to your Oracle home if this command was successful.

Post Installation Steps


1. Verify SPB Patches in ORACLE_HOME inventory.

Refer to the SPB Patch list under Section 2 above to understand the list of expected patches in the lspatches
output.

%ORACLE_HOME%\OPatch\opatch lspatches

Note: For example the most popular Generic installation will have a minimum of the WLS PSU, Coherence
and ADR patches. Other patches are optional.
2. Refer the following document for Post-Install advice:

Doc ID 2764668.1 for Security Advice and Post-Install Information for Oracle WebLogic Server
PSUs
https:\\support.oracle.com\epmos\faces\DocumentDisplay?id=2764668.1

3. Start all WebLogic servers.

Rollback Steps
For complete rollback, use the backups (created before the application of SPB) to restore the
ORACLE_HOME and CENTRAL INVENTORY.

You might also like