Impact of Patch updates on Oracle/SQL

[Rajesh Parappil]

I have a query related to Oracle. It is related to the impacts on applying the Patch updates on the Oracle database.

•I have an application, which uses the Oracle database. I would like to know whether the patch updates will have any impact on the application.Does it effects the SQL, used to access the database?

Some information of the vulnerabilities can be found in the following URL.

• Oracle Critical Patch Update April 2006:
http://www.oracle.com/technology/deploy/security/pdf/cpuapr2006.html
http://www.oracle.com/technology/deploy/security/pdf/cpuapr2006.html#Appendix%20A
・Security Focus 17590:
http://www.securityfocus.com/bid/17590
・red database security
http://www.red-database-security.com/advisory/oracle_cpu_apr_2006.html

I would highly appreciate receiving your comment.

Thanks & Best Regards,
Rajesh P

[TwoProc]

Certainly these patches can, and at times WILL affect your applications. You need to read these notes, and knowing what you know of your applications do testing before moving these patches into production. If you don't have any idea by reading the notes whether or not it will affect your application, then you need to test the whole application.

[Rajesh Parappil]

Hi John,

Thanks for the reply. I don't understand much from the notes provided. And I think, the person who is an expert in DBA can understand those terms, right? The most of the updates goes for fixing the security vulnerabilities with SQL. But what i thought was SQL is a globally recognised standerd, and patch updates won't change the basic charactristics of the SQL. John, could you correct me in this regard? Testing that application is more time consuming, hence i thought of getting an alternative solution.

Thanks and Best regards,
Rajesh P