Oracle to roll out huge patch update

Powered by SC Magazine
 

38 fixes across hundreds of products.

After Microsoft and Adobe both released their largest ever slew of patches last week, Oracle users will be bracing themselves for similar from their vendor, as the business software giant prepares a whopping 38 security vulnerability fixes this week.

The firm’s quarterly Critical Patch Update, set for 20 October, will contain fixes for problems across “hundreds of products”, according to a pre-release announcement.

The product which gets the most attention, as usual, is the Oracle Database, which has 16 new fixes, including six for vulnerabilities which could be remotely exploited without the need for authentication.

The Critical Patch Update will also feature eight fixes for the Oracle Applications Suite, including five which could be remotely exploited without the need for username and password.

The PeopleSoft and JD Edwards suite also features, with four new security fixes, while the update contains six fixes for the BEA Products Suite – the Oracle JRockit product receiving the maximum CVSS base score of 10.0.

“This Critical Patch Update contains 38 security vulnerability fixes across hundreds of Oracle products. Some of the vulnerabilities addressed in this Critical Patch Update affect multiple products,” read an Oracle statement.

“Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply Critical Patch Update fixes as soon as possible. Vulnerabilities fixed by Critical Patch Updates are scored using the standard CVSS 2.0 scoring.

The security update has been delayed for a week due to the Oracle OpenWorld conference last week.

Copyright ©v3.co.uk


Oracle to roll out huge patch update
 
 
 
Top Stories
Making a case for collaboration
[Blog post] Tap into your company’s people power.
 
Five zero-cost ways to improve MySQL performance
How to easily boost MySQL throughput by up to 5x.
 
Tracking the year of CIO churn
[Blog post] Who shone through in 12 months of disruption?
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Which is the most prevalent cyber attack method your organisation faces?




   |   View results
Phishing and social engineering
  68%
 
Advanced persistent threats
  3%
 
Unpatched or unsupported software vulnerabilities
  11%
 
Denial of service attacks
  6%
 
Insider threats
  12%
TOTAL VOTES: 1064

Vote