Configuration Change Summary

Oracle January 2017 Critical Patch Update and Red Hat Linux Patch Schedule 

February 25, 2017 8AM – 12AM

The PSTECH, Unix and DBA teams in UCF IT will be applying the Oracle January 2017 Critical Patch Update (CPU) and Red Hat Linux patches to our PeopleSoft Applications through February 2017.  This document summarizes the purpose for the CPU, and details the security concerns addressed by this update.

When will the CPU be applied?

PSTECH is currently applying the patch to some internal environments to get an understanding of scope and steps needed to complete.  Below are the dates and times for each tier.

·       DMO/PLAY/DEV/TEST – downtime Friday 2/3/17 3:00PM-12:00AM
·       QA – downtime Friday 2/17/17 3:00PM-12:00AM
·       Production – downtime Saturday 2/25/17 8:00AM-12:00AM

What is a Critical Patch Update?

A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are usually cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory.

The next three dates for Oracle to release their Quarterly Critical Patch Updates are:

  • 18 April 2017
  • 18 July 2017
  • 17 October 2017

 

Why apply this CPU?

Oracle and Red Hat continue to periodically receive reports of attempts to maliciously exploit vulnerabilities for which they have already released fixes. In some instances, it has been reported that attackers have been successful because targeted customers had failed to apply available patches. Oracle and Red Hat therefore strongly recommend that customers remain on actively-supported versions and apply updates without delay.

How does this affect you?

By applying this CPU and Red Hat patches, operating systems, PeopleSoft application Java and WebLogic components will have the latest security fixes and non-security critical fixes.

Who is affected by this?

For non-production work, this CPU primarily affects the following teams within UCF IT:  Enterprise Application Development (EAD), Functional users and PeopleSoft (PSTECH).

For production work scheduled for Saturday February 25th this CPU affects students, faculty and staff as well.  Because we are patching databases and the operating systems running PeopleSoft downtime is to be expected and will be communicated. Users are advised to either put their jobs on hold or cancel and reschedule jobs that will run during the downtime window.   The following is a listing of SOME of the services that will be impacted during the production window.

UNAVAILABLE DURING PRODUCTION MAINTENANCE:

  • Student Self Service
  • Employee Self Service
  • Manager Self Service
  • Faculty/Advisor Self Service
  • Staff Applications – Campus Solutions
  • Staff Applications – Human Capital Management
  • Staff Applications – PeopleSoft Financials
  • Staff Applications – CRM
  • myUCF Mobile
  • NID password resets

 

AVAILABLE DURING PRODUCTION MAINTENANCE:

  • my.ucf.edu portal for access to:
  • Knightsmail account management
  • Webcourses@UCF
  • Online Course Tools
  • Library Online Services

Scheduled Start: 02/25/2017 08:00 AM
Scheduled End: 02/26/2017 12:00AM
Contact: Karl Johnson