Thursday February 09 , 2012

Posts Tagged ‘Patches’

Oracle to release ‘Monster Critical Patch Update’ today

Oracle is releasing a huge number of security patches to its customers today, addressing flaws in hundreds of its products.

The 59 patches in the “critical patch update” fall across products ranges from the Oracle Database – 13 fixes – Fusion Middleware – seven fixes – Applications – 16 fixes – and Enterprise Manager Grid Control – one fix.

However, the most fixes are for the Solaris product suite, acquired by Oracle when it bought out Sun Microsystems in January this year.

“Seven of these vulnerabilities may be remotely exploitable without authentication, i.e. may be exploited over a network without the need for a username and password,” warned a security advisory from the company.

“Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply Critical Patch Update fixes as soon as possible.”

The large patch by Oracle has filled the whole left by Adobe which would have normally conducted its quarterly patch today. However it had to bring the patch forward to the end of June after critical flaws were found in its Acrobat and Reader products.

 
 

38 Oracle Patches

After a record-setting week of Microsoft and Adobe security patches, Oracle is gearing up for a major update of its own next week.

Next Tuesday, the database vendor will release its quarterly Critical Patch Update, which “contains 38 security vulnerability fixes across hundreds of Oracle products,” according to an advance notification posted to Oracle’s Web site.

As usual, Oracle’s most-patched product next week will be its flagship database, which will get 16 bug fixes. Six of these flaws may be exploitable over a network without any type of authentication, Oracle said.

Also in the mix are eight fixes for the company’s E-Business Suite, three for Oracle Application Server and one for the Industry Applications Products Suite.

Patches are also planned for Oracle’s BEA, PeopleSoft and JD Edwards software.

The security updates will come a week later than originally planned, as Oracle decided to give administrators attending its annual user conference in San Francisco this week a break and not force them to update their systems while attending the show.

If you have any questions regarding the above please contact Patech
T:: 01543 444 707