OJVM补丁说明
OJVM PSU主要是针对oracle java VM。从2014年10月开始Oracle JavaVM组件作为一个单独的部分来进行安装。之前是包含在oracle rdbms psu中。
只要oracle db中安装jvm组件，就需要安装对应版本的oracle JavaVM PSU。如果只是打了rdbms的PSU，安全漏洞检查就会检查出jvm的安全漏洞。
本文对Patch 28790660 升级过程进行说明
在oracle mos下载p28980134 patch包，包含28790660 ojvm psu包，上传并解压补丁包：
unzip -d /tmp p28980134_112040_Linux-x86-64.zip
检查验证补丁
cd /tmp/28980134/28790660
[oracle@DB1 28790660]$ /oracle/app/oracle/product/11.2.0/db_1/OPatch/opatch prereq CheckConflictAgainstOHWithDetail -ph ./
Oracle 中间补丁程序安装程序版本 11.2.0.3.6
版权所有 (c) 2013, Oracle Corporation。保留所有权利。
PREREQ session
Oracle Home : /oracle/app/oracle/product/11.2.0/db_1
Central Inventory : /oracle/app/oraInventory
from : /oracle/app/oracle/product/11.2.0/db_1/oraInst.loc
OPatch version : 11.2.0.3.6
OUI version : 11.2.0.4.0
Log file location : /oracle/app/oracle/product/11.2.0/db_1/cfgtoollogs/opatch/opatch2020-03-05_22-24-27下午_1.log
Invoking prereq "checkconflictagainstohwithdetail"
Prereq "checkConflictAgainstOHWithDetail" passed.
OPatch succeeded.
停止数据库服务
srvctl stop database -d racdb
安装补丁
$ /oracle/app/oracle/product/11.2.0/db_1/OPatch/opatch apply -ocmrf /tmp/ocm.rsp
Oracle 中间补丁程序安装程序版本 11.2.0.3.6
版权所有 (c) 2013, Oracle Corporation。保留所有权利。
Oracle Home : /oracle/app/oracle/product/11.2.0/db_1
Central Inventory : /oracle/app/oraInventory
from : /oracle/app/oracle/product/11.2.0/db_1/oraInst.loc
OPatch version : 11.2.0.3.6
OUI version : 11.2.0.4.0
Log file location : /oracle/app/oracle/product/11.2.0/db_1/cfgtoollogs/opatch/28790660_Mar_05_2020_22_42_52/apply2020-03-05_22-42-52下午_1.log
Applying interim patch '28790660' to OH '/oracle/app/oracle/product/11.2.0/db_1'
Verifying environment and performing prerequisite checks…
Patch 28790660: Optional component(s) missing : [ oracle.sqlj, 11.2.0.4.0 ] , [ oracle.sqlj.companion, 11.2.0.4.0 ]
All checks passed.
此节点是 Oracle Real Application Cluster 的一部分。
远程节点: 'db2'
本地节点: 'db1'
请关闭所有节点上在此 ORACLE_HOME 之外运行的 Oracle 实例。
(Oracle 主目录 = '/oracle/app/oracle/product/11.2.0/db_1')
所有节点是否都已准备打补丁? [y|n]
y
User Responded with: Y
Backing up files…
正在为组件 oracle.javavm.server, 11.2.0.4.0 打补丁…
正在为组件 oracle.precomp.common, 11.2.0.4.0 打补丁…
正在为组件 oracle.rdbms, 11.2.0.4.0 打补丁…
正在为组件 oracle.rdbms.dbscripts, 11.2.0.4.0 打补丁…
正在为组件 oracle.javavm.client, 11.2.0.4.0 打补丁…
正在为组件 oracle.dbjava.jdbc, 11.2.0.4.0 打补丁…
正在为组件 oracle.dbjava.ic, 11.2.0.4.0 打补丁…
Verifying the update…
在所有节点模式下打补丁。
Updating nodes 'db2'
Apply-related files are:
FP = "/oracle/app/oracle/product/11.2.0/db_1/.patch_storage/28790660_Jan_24_2019_12_31_00/rac/copy_files.txt"
DP = "/oracle/app/oracle/product/11.2.0/db_1/.patch_storage/28790660_Jan_24_2019_12_31_00/rac/copy_dirs.txt"
MP = "/oracle/app/oracle/product/11.2.0/db_1/.patch_storage/28790660_Jan_24_2019_12_31_00/rac/make_cmds.txt"
RC = "/oracle/app/oracle/product/11.2.0/db_1/.patch_storage/28790660_Jan_24_2019_12_31_00/rac/remote_cmds.txt"
Instantiating the file "/oracle/app/oracle/product/11.2.0/db_1/.patch_storage/28790660_Jan_24_2019_12_31_00/rac/copy_files.txt.instantiated" by replacing $ORACLE_HOME in "/oracle/app/oracle/product/11.2.0/db_1/.patch_storage/28790660_Jan_24_2019_12_31_00/rac/copy_files.txt" with actual path.
Propagating files to remote nodes…
Instantiating the file "/oracle/app/oracle/product/11.2.0/db_1/.patch_storage/28790660_Jan_24_2019_12_31_00/rac/copy_dirs.txt.instantiated" by replacing $ORACLE_HOME in "/oracle/app/oracle/product/11.2.0/db_1/.patch_storage/28790660_Jan_24_2019_12_31_00/rac/copy_dirs.txt" with actual path.
Propagating directories to remote nodes…
Instantiating the file "/oracle/app/oracle/product/11.2.0/db_1/.patch_storage/28790660_Jan_24_2019_12_31_00/rac/make_cmds.txt.instantiated" by replacing $ORACLE_HOME in "/oracle/app/oracle/product/11.2.0/db_1/.patch_storage/28790660_Jan_24_2019_12_31_00/rac/make_cmds.txt" with actual path.
Running command on remote node 'db2':
cd /oracle/app/oracle/product/11.2.0/db_1/rdbms/lib; /usr/bin/make -f ins_rdbms.mk jox_refresh_knlopt ORACLE_HOME=/oracle/app/oracle/product/11.2.0/db_1 || echo REMOTE_MAKE_FAILED::>&2
Running command on remote node 'db2':
cd /oracle/app/oracle/product/11.2.0/db_1/rdbms/lib; /usr/bin/make -f ins_rdbms.mk ioracle ORACLE_HOME=/oracle/app/oracle/product/11.2.0/db_1 || echo REMOTE_MAKE_FAILED::>&2
所有节点都已打补丁。您可以在本地系统和节点 'db2' 上启动 Oracle 实例
远程节点上存在重链接。一定要检查节点 'db2' 上的二进制文件的大小和时间戳。
已在远程节点上调用以下 make 命令:
'cd /oracle/app/oracle/product/11.2.0/db_1/rdbms/lib; /usr/bin/make -f ins_rdbms.mk jox_refresh_knlopt ORACLE_HOME=/oracle/app/oracle/product/11.2.0/db_1
cd /oracle/app/oracle/product/11.2.0/db_1/rdbms/lib; /usr/bin/make -f ins_rdbms.mk ioracle ORACLE_HOME=/oracle/app/oracle/product/11.2.0/db_1
'
Patch 28790660 successfully applied
Log file location: /oracle/app/oracle/product/11.2.0/db_1/cfgtoollogs/opatch/28790660_Mar_05_2020_22_42_52/apply2020-03-05_22-42-52下午_1.log
OPatch succeeded.
检查补丁
/oracle/app/oracle/product/11.2.0/db_1/OPatch/opatch lsinventory
出现
中间补丁程序 (3) :
Patch 28790660 : applied on Sun Mar 01 14:58:16 CST 2020
Unique Patch ID: 22678133
Patch description: "OJVM PATCH SET UPDATE 11.2.0.4.190115"
Created on 24 Jan 2019, 12:31:00 hrs PST8PDT
Bugs fixed:
23727132, 19554117, 19006757, 14774730, 18933818, 18458318, 18166577
19231857, 19153980, 19058059, 19007266, 17285560, 17201047, 17056813
19223010, 19852360, 19909862, 19895326, 19374518, 20408829, 21047766
21566944, 19176885, 17804361, 17528315, 21811517, 22253904, 19187988
21911849, 22118835, 22670385, 23265914, 22675136, 24448240, 25067795
24534298, 25076732, 25494379, 26023002, 19699946, 26637592, 27000663
25649873, 27461842, 27952577, 27642235, 28502128, 28915933
查看并修改oracle的属组，如果变为oracle oinstall 要进行修改，否则会出错
$ ls -l $ORACLE_HOME/bin/oracle
-rwsr-s--x 1 oracle oinstall 242784201 3月 1 14:58 /oracle/app/oracle/product/11.2.0/db_1/bin/oracle
通过在grid用户下修改
/oracle/app/11.2.0/grid/bin/
$ setasmgidwrap o=/oracle/app/oracle/product/11.2.0/db_1/bin/oracle
$ ll /oracle/app/oracle/product/11.2.0/db_1/bin/oracle
-rwsr-s--x 1 oracle asmadmin 242784201 3月 1 14:58 /oracle/app/oracle/product/11.2.0/db_1/bin/oracle
setasmgidwrap o=/oracle/app/oracle/11.2.0/bin/oracle
出现oracle asmadmin说明正常
ls -l $ORACLE_HOME/bin/oracle
-rwsr-s--x 1 oracle asmadmin 239945816 2月 19 22:56 /oracle/app/oracle/product/11.2.0/db_1/bin/oracle
RAC环境操作升级补丁sql
sqlplus /nolog
SQL> CONNECT / AS SYSDBA
SQL> STARTUP
SQL> alter system set cluster_database=false scope=spfile;
SQL> SHUTDOWN
SQL> STARTUP UPGRADE
SQL> @postinstall.sql ##时间较长
SQL> alter system set cluster_database=true scope=spfile;
SQL> SHUTDOWN
SQL> STARTUP
编译失效对象
cd $ORACLE_HOME/rdbms/admin
sqlplus /nolog
SQL> CONNECT / AS SYSDBA
SQL> @utlrp.sql
原文链接：Patch 28790660 - Oracle JavaVM Component 11.2.0.4.190115 Database PSU 在oracle rac环境补丁升级操作过程说明，转载请注明来源！