Oracle to roll out huge patch update

Powered by SC Magazine
 

38 fixes across hundreds of products.

After Microsoft and Adobe both released their largest ever slew of patches last week, Oracle users will be bracing themselves for similar from their vendor, as the business software giant prepares a whopping 38 security vulnerability fixes this week.

The firm’s quarterly Critical Patch Update, set for 20 October, will contain fixes for problems across “hundreds of products”, according to a pre-release announcement.

The product which gets the most attention, as usual, is the Oracle Database, which has 16 new fixes, including six for vulnerabilities which could be remotely exploited without the need for authentication.

The Critical Patch Update will also feature eight fixes for the Oracle Applications Suite, including five which could be remotely exploited without the need for username and password.

The PeopleSoft and JD Edwards suite also features, with four new security fixes, while the update contains six fixes for the BEA Products Suite – the Oracle JRockit product receiving the maximum CVSS base score of 10.0.

“This Critical Patch Update contains 38 security vulnerability fixes across hundreds of Oracle products. Some of the vulnerabilities addressed in this Critical Patch Update affect multiple products,” read an Oracle statement.

“Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply Critical Patch Update fixes as soon as possible. Vulnerabilities fixed by Critical Patch Updates are scored using the standard CVSS 2.0 scoring.

The security update has been delayed for a week due to the Oracle OpenWorld conference last week.

Copyright ©v3.co.uk


Oracle to roll out huge patch update
 
 
 
Top Stories
The True Cost of BYOD - 2014 survey
Twelve months on from our first study, is BYOD a better proposition?
 
ANZ looks to life beyond the transaction
If digital disruptors think an online payments startup could rock the big four, they’ve missed the point of why people use banks, says Patrick Maes.
 
What InfoSec can learn from the insurance industry
[Blog post] Another way data breach laws could help manage risk.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
What is delaying adoption of public cloud in your organisation?







   |   View results
Lock-in concerns
  29%
 
Application integration concerns
  3%
 
Security and compliance concerns
  27%
 
Unreliable network infrastructure
  9%
 
Data sovereignty concerns
  21%
 
Lack of stakeholder support
  3%
 
Protecting on-premise IT jobs
  4%
 
Difficulty transitioning CapEx budget into OpEx
  3%
TOTAL VOTES: 1052

Vote