针对Oracle11g补丁修补说明.docx

内部资料注意保密针对Oracle11g补丁修补说明深圳市优讯信息技术有限公司2015年4月 修订记录修订时间修订说明作者审核2015-04-10新建杨亮2015-04-15修改 验证oracle .0 补丁更新杜江目 录修订记录2目 录31.概述41.1.概要说明41.2.阅读对象41.3.注意42.ORACLE补丁基础知识52.1.Oracle软件版本命名52.2.补丁分类62.3.补丁的获取73.ORACLE补丁安装83.1.Opatch版本检查83.2.Opatch版本更新93.3.PUS补丁安装.0补丁修补.0补丁修补164.拓展：ORACLE升级至（未验证）214.1.升级前准备：214.2.开始安装264.3.完善操作351. 概述1.1. 概要说明此文档用于指导Oracle11g补丁修补步骤说明。1.2. 阅读对象我司相关技术研发、开发人员及银行相关科技、运维人员。1.3. 注意Oracle补丁服务为收费服务，请正式实施时，从官方渠道获取对应补丁。其他渠道获取的补丁包皆无法保证系统的稳定性。2. Oracle补丁基础知识2.1. Oracle软件版本命名官方文档介绍内容在：HOME Administrators Guide - 1 Overview of Administering an Oracle Database - Identifying Your Oracle Database Software Release。 我们拿.0 这个版本举例，从中我们看到五个被句号所分开的数字，它们的含义如下： 主数据库发布号 Major Database Release Number 数据库维护发布号 Database Maintenance Release Number 应用服务器发布号 Application Server Release Number 组件相关发布号 Component Specific Release Number 平台相关发布号 Platform Specific Release Number 但事实上，经过我们补丁包升级之后，Oracle数据库软件版本中的第4位或第5位将进行变化，其中第4位是补丁集(Patch Set)号，第5位则是补丁集更新(Patch Set Update, PSU)号，比如，我有一个初始化安装之后的Oracle数据库，其版本如下： SQL SELECT * FROM PRODUCT_COMPONENT_VERSION; PRODUCT VERSION STATUS - - - NLSRTL .0 Production Oracle Database 10g Enterprise Edition .0 64bi PL/SQL .0 Production TNS for Linux: .0 Production经过我补丁包升级之后如下： SQL SELECT * FROM PRODUCT_COMPONENT_VERSION; PRODUCT VERSION STATUS - - -NLSRTL .0 Production Oracle Database 10g Enterprise Edition .0 64bi PL/SQL .0 Production TNS for Linux: .0 ProductionSQL select action,comments from registry$history; ACTION COMMENTS- -UPGRADE Upgraded from .0 APPLY PSU .4 APPLY PSU .12可见我这套数据库当前版本为.12。 2.2. 补丁分类O记罗敏的品悟性能优化中有介绍： 1) Version/版本 针对前一个版本的所有补丁进行整理，增加新的功能或对软件有较大的改动，进行整体测试，得到一个软件版本包，称为版本Version。比如 11.2。 2) Patch Set/补丁集 在两次产品版本之间发布的一组经过全面测试的累计整体修复程序(一般每年发布一两次)，如 。 3) Critical Patch Update(CPU)/关键补丁更新 指每季度提供一次的一组高优先级修复程序（往往针对安全性问题）。对于以前的安全性修复程序而言，这些CPU是累积的，但也可包含其他修复程序，目的是解决与非安全性补丁之间的补丁冲突问题（即降低合并请求的必要性）。目前已经更名为Security Patch Update (SPU)。 4) Patch Set Update(PSU)/补丁集更新 从起，在两个补丁集之间发布，每年发布4次； 每个补丁集更新包含50100个修复，经测试和集成后发布。如.1,.2。 5) CRS Bundle Patch/集群软件补丁集 专门修复Oracle Clusterware的补丁，以累计补丁的方式发布。 6）Composite Patch 从2012年4月份的Database PSU .2开始，推出一种新的概念叫Composite Patches。 这是一种新型的补丁包，它不同于其他的累积型补丁包。如果是第一次安装Composite Patches，那么该Composite Patches所包括的全部补丁都会被安装，后续安装的Composite Patches，只会安装对比前一次Composite Patches有变化的部分和新增加的补丁。 关于Composite Patch更多详细内容，请阅读Composite Patches for Oracle Products Video ID 1376691.1。 其他： Diagnostic patch 诊断补丁 Patch Set Exception 个别补丁集(PSE) Interim patch 临时补丁 Merged patch 合并补丁 Patch bundle 补丁包 对于Oracle DBA来说，一般只要了解PSU(Patch Set Update)和CPU(Critical Patch Update)现更名为SPU就行。CPU是Oracle每个季度发布的安全补丁包，而PSU则是Oracle每个季度发布的包含Bug修复的补丁包，它也包含了最新的CPU。一般情况下，我们可能仅应用PSU即可。2.3. 补丁的获取Oracle Support站点中有个文档专门更新PSU的内容，其文档ID位756671.1，Oracle Recommended Patches Oracle Database。/epmos/faces/ui/km/DocumentDisplay.jspx?id=756671.1类似如下：此服务地址的访问需要oracle服务码及oracle注册用户。3. Oracle补丁安装3.1. Opatch版本检查进入到OPatch目录:oraclelocalhost OPatch$ cd $ORACLE_HOME/OPatch/查看Oracle系统信息:oraclelocalhost OPatch$ ./opatch lsinventoryOracle Interim Patch Installer version .4Copyright (c) 2012, Oracle Corporation. All rights reserved.Oracle Home : /opt/oracle/productCentral Inventory : /opt/oracle/oraInventory from : /opt/oracle/product/oraInst.locOPatch version : .4OUI version : .0Log file location : /opt/oracle/product/cfgtoollogs/opatch/opatch2015-04-10_23-43-17PM_1.logLsinventory Output file location : /opt/oracle/product/cfgtoollogs/opatch/lsinv/lsinventory2015-04-10_23-43-17PM.txt-Installed Top-level Products (1): Oracle Database 11g .0There are 1 products installed in this Oracle Home.There are no Interim patches installed in this Oracle Home.-OPatch succeeded.OPatch version : .4 OPatch 版本OUI version : .0OUI版本Oracle Database 11g .0 数据库版本3.2. Opatch版本更新现阶段OPatch最新版本为.5，默认的Opatch版本过低导致无法Apply 最新PSU，需要进行Opatch更新。当低于此版本时进行更新。文件准备 p6880880_112000_Linux-x86-64.zip 备份原Opatchoraclelocalhost OPatch$ mv $ORACLE_HOME/OPatch/ $ORACLE_HOME/OPatch.old/ 上传并解压文件oraclelocalhost OPatch$ unzip /p6880880_112000_Linux-x86-64.zip -d $ORACLE_HOME/ 赋予用户及执行权限oraclelocalhost OPatch$ chown -R oracle:oinstall $ORACLE_HOME/OPatch/oraclelocalhost OPatch$ chmod -R 775 $ORACLE_HOME/OPatch/ 核对OPath 版本oraclelocalhost OPatch$ ./opatch versionOPatch Version: .5OPatch succeeded.3.3. PUS补丁安装文件准备： p14727310_112030_Linux-x86-64.zipp17478514_112040_Linux-x86-64.zip3.3.1. .0补丁修补. 上传并解压文件:oraclelocalhost OPatch$ unzip /p17478514_112040_Linux-x86-64.zip. 赋予用户及执行权限:oraclelocalhost OPatch$ chown -R oracle:oinstall 17478514/oraclelocalhost OPatch$ chmod -R 775 17478514/. 关闭监听:oraclelocalhost OPatch$ lsnrctl stopLSNRCTL for Linux: Version .0 - Production on 15-APR-2015 11:27:57Copyright (c) 1991, 2011, Oracle. All rights reserved.Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC1521). 关闭数据库：oraclelocalhost OPatch$ sqlplus / as sysdbaSQL*Plus: Release .0 Production on 星期六 4月 11 00:46:14 2015Copyright (c) 1982, 2013, Oracle. All rights reserved.连接到: Oracle Database 11g Enterprise Edition Release .0 - 64bit ProductionWith the Partitioning, OLAP, Data Mining and Real Application Testing optionsSQL shutdown immediate数据库已经关闭。已经卸载数据库。ORACLE 例程已经关闭。SQL exit从 Oracle Database 11g Enterprise Edition Release .0 - 64bit ProductionWith the Partitioning, OLAP, Data Mining and Real Application Testing options 断开. 修补补丁:oraclelocalhost $ cd $ORACLE_HOME/OPatchoraclelocalhost OPatch$ ./opatch napply -oh $ORACLE_HOME -local 17478514/Oracle Interim Patch Installer version .5Copyright (c) 2013, Oracle Corporation. All rights reserved.Oracle Home : /u01/app/oracle/product/11.2.0/db_1Central Inventory : /u01/app/oraInventory from : /u01/app/oracle/product/11.2.0/db_1/oraInst.locOPatch version : .5OUI version : .0Log file location : /u01/app/oracle/product/11.2.0/db_1/cfgtoollogs/opatch/opatch2015-04-15_11-43-12AM_1.logVerifying environment and performing prerequisite checks.OPatch continues with these patches: 13343438 13696216 13923374 14275605 14727310 Do you want to proceed? y|nyUser Responded with: YAll checks passed.Provide your email address to be informed of security issues, install andinitiate Oracle Configuration Manager. Easier for you if you use your MyOracle Support Email address/User Name.Visit /support/policies.html for details.Email address/User Name: You have not provided an email address for notification of security issues.Do you wish to remain uninformed of security issues (Yes, No) N: nEmail address/User Name: You have not provided an email address for notification of security issues.Do you wish to remain uninformed of security issues (Yes, No) N: yPlease shutdown Oracle instances running out of this ORACLE_HOME on the local system.(Oracle Home = /u01/app/oracle/product/11.2.0/db_1)Is the local system ready for patching? y|nyUser Responded with: YBacking up files.Applying sub-patch 13343438 to OH /u01/app/oracle/product/11.2.0/db_1Patching component oracle.rdbms.rsf, .0.Patching component oracle.rdbms, .0.Patching component oracle.rdbms.dbscripts, .0.Verifying the update.Applying sub-patch 13696216 to OH /u01/app/oracle/product/11.2.0/db_1Patching component oracle.rdbms.rsf, .0.Patching component oracle.rdbms, .0.Patching component oracle.sdo.locator, .0.Patching component oracle.sysman.console.db, .0.Patching component oracle.sysman.oms.core, .4.Verifying the update.Applying sub-patch 13923374 to OH /u01/app/oracle/product/11.2.0/db_1ApplySession: Optional component(s) work.cman, .0 not present in the Oracle Home or a higher version is found.Patching component oracle.rdbms.rsf, .0.Patching component oracle.rdbms, .0.Patching component oracle.rdbms.dbscripts, .0.Patching component work.rsf, .0.Patching component work.listener, .0.Patching component oracle.sysman.console.db, .0.Verifying the update.Applying sub-patch 14275605 to OH /u01/app/oracle/product/11.2.0/db_1ApplySession: Optional component(s) oracle.precomp.lang, .0 not present in the Oracle Home or a higher version is found.Patching component work.client, .0.Patching component work.rsf, .0.Patching component mon, .0.Patching component oracle.rdbms, .0.Patching component oracle.rdbms.dbscripts, .0.Patching component oracle.rdbms.rman, .0.Patching component oracle.rdbms.rsf, .0.Patching component oracle.rdbms.util, .0.Verifying the update.Applying sub-patch 14727310 to OH /u01/app/oracle/product/11.2.0/db_1Patching component oracle.rdbms, .0.Patching component oracle.rdbms.dbscripts, .0.Patching component oracle.rdbms.deconfig, .0.Patching component oracle.rdbms.rsf, .0.Patching component oracle.sdo.locator, .0.Patching component oracle.sysman.console.db, .0.Patching component oracle.sysman.oms.core, .4.Verifying the update.OPatch found the word warning in the stderr of the make command.Please look at this stderr. You can re-run this make command.Stderr output:ins_precomp.mk:19: warning: overriding recipe for target pcscfg.cfg/u01/app/oracle/product/11.2.0/db_1/precomp/lib/env_precomp.mk:2160: warning: ignoring old recipe for target pcscfg.cfg/u01/app/oracle/product/11.2.0/db_1/precomp/lib/ins_precomp.mk:19: warning: overriding recipe for target pcscfg.cfg/u01/app/oracle/product/11.2.0/db_1/precomp/lib/env_precomp.mk:2160: warning: ignoring old recipe for target pcscfg.cfgComposite patch 14727310 successfully applied.OPatch Session completed with warnings.Log file location: /u01/app/oracle/product/11.2.0/db_1/cfgtoollogs/opatch/opatch2015-04-15_11-43-12AM_1.logOPatch completed with warnings.. 检查补丁结果:oraclelocalhost OPatch$ ./opatch lsinventoryOracle Interim Patch Installer version .5Copyright (c) 2013, Oracle Corporation. All rights reserved.Oracle Home : /u01/app/oracle/product/11.2.0/db_1Central Inventory : /u01/app/oraInventory from : /u01/app/oracle/product/11.2.0/db_1/oraInst.locOPatch version : .5OUI version : .0Log file location : /u01/app/oracle/product/11.2.0/db_1/cfgtoollogs/opatch/opatch2015-04-15_11-55-10AM_1.logLsinventory Output file location : /u01/app/oracle/product/11.2.0/db_1/cfgtoollogs/opatch/lsinv/lsinventory2015-04-15_11-55-10AM.txt-Installed Top-level Products (1): Oracle Database 11g .0There are 1 products installed in this Oracle Home.Interim patches (1) :Patch 14727310 : applied on Wed Apr 15 11:49:25 CST 2015Unique Patch ID: 15663328Patch description: Database Patch Set Update : .5 (14727310) Created on 27 Dec 2012, 00:06:30 hrs PST8PDTSub-patch 14275605; Database Patch Set Update : .4 (14275605)Sub-patch 13923374; Database Patch Set Update : .3 (13923374)Sub-patch 13696216; Database Patch Set Update : .2 (13696216)Sub-patch 13343438; Database Patch Set Update : .1 (13343438) Bugs fixed: 13566938, 13593999, 10350832, 14138130, 12919564, 13624984, 13588248 13080778, 13804294, 14258925, 12873183, 13645875, 12880299, 14664355 14409183, 12998795, 14469008, 13719081, 13492735, 12857027, 14263036 14263073, 13742433, 13732226, 12905058, 13742434, 12849688, 12950644 13742435, 13464002, 12879027, 13534412, 14613900, 12585543, 12535346 12588744, 11877623, 12847466, 13649031, 13981051, 12582664, 12797765 14262913, 12923168, 13612575, 13384182, 13466801, 13484963, 11063191 13772618, 13070939, 12797420, 13041324, 12976376, 11708510, 13742437 13026410, 13737746, 13742438, 13326736, 13001379, 13099577, 14275605 13742436, 9873405, 9858539, 14040433, 12662040, 9703627, 12617123 12845115, 12764337, 13354082, 13397104, 12964067, 13550185, 12780983 12583611, 14546575, 13476583, 15862016, 11840910, 13903046, 15862017 13572659, 13718279, 13657605, 13448206, 13419660, 14480676, 13632717 14063281, 13430938, 13467683, 13420224, 14548763, 12646784, 14035825 12861463, 12834027, 15862021, 13377816, 13036331, 14727310, 13685544 13499128, 15862018, 12829021, 15862019, 12794305, 14546673, 12791981 13503598, 13787482, 10133521, 12718090, 13399435, 14023636, 12401111 13257247, 13362079, 12917230, 13923374, 14480675, 13524899, 13559697 14480674, 13916709, 14076523, 13773133, 13340388, 13366202, 13528551 12894807, 13343438, 13454210, 12748240, 14205448, 13385346, 15853081 12971775, 13035804, 13544396, 13035360, 14062795, 12693626, 13332439 14038787, 14062796, 12913474, 14841409, 14390252, 13370330, 14062797 13059165, 14062794, 12959852, 13358781, 12345082, 12960925, 9659614 13699124, 14546638, 13936424, 13338048, 12938841, 12658411, 12620823 12656535, 14062793, 12678920, 13038684, 14062792, 13807411, 12594032 13250244, 15862022, 9761357, 12612118, 13742464, 14052474, 13457582 13527323, 15862020, 12780098, 13502183, 13705338, 13696216, 10263668 15862023, 13554409, 15862024, 13103913, 13645917, 14063280, 13011409-OPatch succeeded.. NOTE：oracle 安装版本的补丁会提示不需要更新。oraclelocalhost OPatch$ ./opatch napply -oh $ORACLE_HOME -local 17478514/Oracle Interim Patch Installer version .5Copyright (c) 2013, Oracle Corporation. All rights reserved.Oracle Home : /u01/app/oracle/product/11.2.0/db_1Central Inventory : /u01/app/oraInventory from : /u01/app/oracle/product/11.2.0/db_1/oraInst.locOPatch version : .5OUI version : .0Log file location : /u01/app/oracle/product/11.2.0/db_1/cfgtoollogs/opatch/opatch2015-04-15_14-27-55PM_1.logVerifying environment and performing prerequisite checks.Skip patch 17478514 from list of patches to apply: This patch is not needed.After skipping patches with missing components, there are no patches to apply.OPatch Session completed with warnings.Log file location: /u01/app/oracle/product/11.2.0/db_1/cfgtoollogs/opatch/opatch2015-04-15_14-27-55PM_1.logOPatch completed with warnings.oraclelocalhost OPatch$所以，应该首先升级至版本后，再进行的补丁安装。3.3.2. .0补丁修补补丁包选择p17478514_112040_Linux-x86-64.zip. 上传并解压文件:oraclelocalhost OPatch$ unzip /p17478514_112040_Linux-x86-64.zip. 赋予用户及执行权限:oraclelocalhost OPatch$ chown -R oracle:oinstall 17478514/oraclelocalhost OPatch$ chmod -R 775 17478514/. 关闭监听:oraclelocalhost OPatch$ lsnrctl stopLSNRCTL for Linux: Version .0 - Production on 11-4月 -2015 00:47:39Copyright (c) 1991, 2013, Oracle. All rights reserved.正在连接到 (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=extproc)命令执行成功. 关闭数据库oraclelocalhost OPatch$ sqlplus / as sysdbaSQL*Plus: Release .0 Production on 星期六 4月 11 00:46:14 2015Copyright (c) 1982, 2013, Oracle. All rights reserved.连接到: Oracle Database 11g Enterprise Edition Release .0 - 64bit ProductionWith the Partitioning, OLAP, Data Mining and Real Application Testing optionsSQL shutdown immediate数据库已经关闭。已经卸载数据库。ORACLE 例程已经关闭。SQL exit从 Oracle Database 11g Enterprise Edition Release .0 - 64bit ProductionWith the Partitioning, OLAP, Data Mining and Real Application Testing options 断开. 修补补丁:oraclelocalhost $ cd $ORACLE_HOME/OPatchoraclelocalhost OPatch$ ./opatch napply -oh $ORACLE_HOME -local 17478514/Oracle Interim Patch Installer version .5Copyright (c) 2013, Oracle Corporation. All rights reserved.Oracle Home : /opt/oracle/productCentral Inventory : /opt/oracle/oraInventory from : /opt/oracle/product/oraInst.locOPatch version : .5OUI version :