RE: security alerts #48, 49, 50, 51 - patchsets, 9i

[Boivin, Patrice J]

Title: RE: security alerts #48, 49, 50, 51 - patchsets, 9i

I applied the patchsets, still waiting for 8i on win32 patchset 8.1.7.4.8 though.

 

For bug fixes I wouldn't push installation of patches strongly, but for vulnerabilities... it's up to you to take that risk.

 

I applied the patches for 48 through 51 on Tru64, even though we had three one-off patches already installed.  Verified with Metalink techs, they said go ahead, so I installed.  No problems.

 

Apply to your least-important servers first.

 

Regards,

Patrice Boivin
Systems Analyst (Oracle Certified DBA)

Systems Admin & Operations | Admin. et Exploit. des syst�mes
Technology Services        | Services technologiques
Informatics Branch         | Direction de l'informatique
Maritimes Region, DFO      | R�gion des Maritimes, MPO

E-Mail: [EMAIL PROTECTED]

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Monday, February 24, 2003 2:45 PM
To: Multiple recipients of list ORACLE-L
Subject: RE: security alerts #48, 49, 50, 51 - patchsets, 9i

Guys,

Have some complicated 3rd party software and a number of databases all within firewalls.  I am considering (since plans in w9orks for migration to 9i latest release) to wait on applying the patches until after the 9i migration.  Especially, since these patches are not part of a comprehensive patchset thus not integrated testing.  Also, the doc. for the patchsets says don't install any other patchset - geez!!!  Should I apply these patches in 8.1.7.4 just to turn around and apply them again after a migration to 9i?  Seems like a waste.  Any ideas?