Home » RDBMS Server » Server Administration » SCN max value (was: Oracle flaw revealed ?)
SCN max value (was: Oracle flaw revealed ?) [message #539682] Tue, 17 January 2012 19:54 Go to next message
ramoradba
Messages: 2457
Registered: January 2009
Location: AndhraPradesh,Hyderabad,I...
Senior Member
http://www.infoworld.com/d/security/fundamental-oracle-flaw-revealed-184163

http://www.infoworld.com/t/data-management/calling-all-oracle-customers-184103?source=fssr

The 6 page article about Oracle SCN and Critical patch update.Anyone read this before ?if so ..what is your opinion?comments please !

Sriram




[Edit MC: Modified title to make it easier to find]

[Updated on: Fri, 20 January 2012 00:53] by Moderator

Report message to a moderator

Re: Oracle flaw revealed ? [message #539714 is a reply to message #539682] Wed, 18 January 2012 03:59 Go to previous messageGo to next message
ThomasG
Messages: 3212
Registered: April 2005
Location: Heilbronn, Germany
Senior Member
Read it yesterday evening and of course checked the SCN of our Database immediately. Wink

The threat scenario of my installation of two instances pretty much isolated from the rest of the world looks pretty unlikely to run into the problem.

But especially users with massive grid installations might have pretty serious problems if one unpatched and forgotten database that links to one instance brings the entire grid down one day. Even when I had applied the patches, I would probably put some monitoring in place that checks for spikes in SCN increase and warn me well before the soft limit is reached.

Especially the fact that backups and all the redundancy in the world don't reduce the risk of the problem occurring makes it pretty serious in my opinion.
Re: Oracle flaw revealed ? [message #539731 is a reply to message #539714] Wed, 18 January 2012 05:23 Go to previous messageGo to next message
Flyby
Messages: 188
Registered: March 2011
Location: Belgium
Senior Member
Thanks for posting
Re: Oracle flaw revealed ? [message #539951 is a reply to message #539731] Thu, 19 January 2012 08:33 Go to previous messageGo to next message
Michel Cadot
Messages: 68716
Registered: March 2007
Location: Saint-Maur, France, https...
Senior Member
Account Moderator
For information, Oracle published an article on MOS yesterday: note 1376995.1 with an associated script "scnhealthcheck.sql" you can find and download in note 1393363.1.

Regards
Michel

[Updated on: Thu, 19 January 2012 08:34]

Report message to a moderator

Re: Oracle flaw revealed ? [message #539969 is a reply to message #539951] Thu, 19 January 2012 10:09 Go to previous messageGo to next message
ramoradba
Messages: 2457
Registered: January 2009
Location: AndhraPradesh,Hyderabad,I...
Senior Member
Thanks for the Information Michel.

Sriram Sanka
Re: Oracle flaw revealed ? [message #540041 is a reply to message #539969] Thu, 19 January 2012 20:23 Go to previous messageGo to next message
ramoradba
Messages: 2457
Registered: January 2009
Location: AndhraPradesh,Hyderabad,I...
Senior Member
Here is a Beautiful article Posted by Riyaj Shamsudeen on January 19, 2012
scn-what-why-and-how

This article includes the current SCN Issues...too

Sriram Sanka

Re: Oracle flaw revealed ? [message #540042 is a reply to message #540041] Thu, 19 January 2012 20:40 Go to previous message
himabija
Messages: 33
Registered: December 2011
Location: San Francisco
Member
@Sriram : I hardly understand what is actually meant by first link. But the next link is really awesome.
Previous Topic: CPU patch issue
Next Topic: db_link limit access
Goto Forum:
  


Current Time: Fri Nov 29 04:27:02 CST 2024