Oracle Cloud Infrastructure Documentation

Managing Packages and Updates

OS Management Hub allows you to create one-time or recurring update jobs to update instances.

See also: Understanding Jobs.

How does OS Management Hub provide updates?

Oracle Linux

For content based on vendor software sources, OS Management Hub provides package updates from the OCI regional yum server. For content from third-party and private software sources, package updates are provided from the repository URL you define for the source (see Repository URL and GPG Key).

Windows

OS Management Hub identifies available updates on the Windows instance and then the instance receives updates from Microsoft or an internal source such as a Windows Server Update Service (WSUS).

Updating Instances and Groups

OS Management Hub provides updates as they're made available by OS vendors or third-party and private repository owners. OS vendor updates are subject to the vendor's OS lifecycle programs. Use custom software sources to control when updates are made to instances. Configure update jobs for individual instances, a group, or all standalone instances in a compartment.

Tip

Need to update instances in a lifecycle stage? Create and promote a new versioned custom software source to a stage. Any updates within the promoted source are installed on the instances in the stage.

Viewing Updates
Installing updates
Best Practices
Important

If you have enabled active hours on your Windows instances, don't schedule updates during active hours. OS Management Hub doesn't install updates that are scheduled during active hours.

Update Types

OS Management Hub categorizes updates into several types. The updates applied to the instance depend on the OS.

For more details on Windows update types, see Update Types Available for Windows Instances.

OS Management Hub Category Description
Security

An update that addresses security vulnerabilities found during development, testing, or reported by users.

For Linux, security fixes usually have one or more associated CVE (Common Vulnerabilities and Exposure) names to identify the vulnerabilities.

For Windows, this includes Definition and Security types.

Ksplice (Oracle Linux only)

An update used by Ksplice for installing zero-downtime security patches. Ksplice patches can include kernel updates, only userspace updates, or both.

See Using Ksplice for Oracle Linux for how to configure an instance to receive Ksplice updates.
Bug Fix

An update that fixes non-security-related issues reported by users or discovered during development or testing.

For Windows, this includes Critical, Drivers, and Updates types.
Enhancement

An update that introduces new features, improved functionality, or enhanced performance in the software.

For Windows, this includes Feature Packs and Tools types.
Other

An update that's not associated with any security, bug, or enhancement update.

For Windows, this includes Service packs, Update Rollups, and Microsoft types.