Oracle to roll out huge patch update

Powered by SC Magazine
 

38 fixes across hundreds of products.

After Microsoft and Adobe both released their largest ever slew of patches last week, Oracle users will be bracing themselves for similar from their vendor, as the business software giant prepares a whopping 38 security vulnerability fixes this week.

The firm’s quarterly Critical Patch Update, set for 20 October, will contain fixes for problems across “hundreds of products”, according to a pre-release announcement.

The product which gets the most attention, as usual, is the Oracle Database, which has 16 new fixes, including six for vulnerabilities which could be remotely exploited without the need for authentication.

The Critical Patch Update will also feature eight fixes for the Oracle Applications Suite, including five which could be remotely exploited without the need for username and password.

The PeopleSoft and JD Edwards suite also features, with four new security fixes, while the update contains six fixes for the BEA Products Suite – the Oracle JRockit product receiving the maximum CVSS base score of 10.0.

“This Critical Patch Update contains 38 security vulnerability fixes across hundreds of Oracle products. Some of the vulnerabilities addressed in this Critical Patch Update affect multiple products,” read an Oracle statement.

“Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply Critical Patch Update fixes as soon as possible. Vulnerabilities fixed by Critical Patch Updates are scored using the standard CVSS 2.0 scoring.

The security update has been delayed for a week due to the Oracle OpenWorld conference last week.

Copyright ©v3.co.uk


Oracle to roll out huge patch update
 
 
 
Top Stories
Photos: iTnews Benchmark Awards countdown begins
Just a few days left until entries close for 2014.
 
Australian Govt to rethink cyber security strategy
Six-year old policy to be refreshed.
 
The failure of the antivirus industry
[Blog post] Insights from AVAR 2014.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Who do you trust most to protect your private data?







   |   View results
Your bank
  38%
 
Your insurance company
  3%
 
A technology company (Google, Facebook et al)
  8%
 
Your telco, ISP or utility
  7%
 
A retailer (Coles, Woolworths et al)
  2%
 
A Federal Government agency (ATO, Centrelink etc)
  20%
 
An Australian law enforcement agency (AFP, ASIO et al)
  15%
 
A State Government agency (Health dept, etc)
  5%
TOTAL VOTES: 1037

Vote