How To Perform Yum Package Update In Production OCOM (Doc ID 2715513.1)

Last updated on NOVEMBER 16, 2023

Applies to:

Goal

Yum update whilst OCOM is running

We have scanners that constantly scan our OCOM servers for vulnerabilities on all packages/apps that are running on the system.

We are aware that MySQL has to be a required dedicated version as we upgrade OCOM, so that one is fine, but we want to see if there are any other packages we need to worry about.

For example we have vulns on the following:

bind
python
UEK
curl
sudo
tcpdump
microcode_ctl
nss
kernel
libssh2
httpd

Do we need to worry about upgrading any other packages like these mentioned and it causing a break in OCOM? Also, can we just yum update and have it run or do we need to worry about stopping the OCSM app before we go ahead?

Obviously the main one to worry about on that list would be the Kernel, shouldn't be any worries upgrading that and rebooting? 

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.