[ISN] Oracle spoils your day with NEARLY 150 patches

http://www.theregister.co.uk/2014/01/16/blackberry_oracle_ship_vuln_patches/ By Richard Chirgwin The Register 16th January 2014 Systems administrators who decided it would be a quiet week were wrong: Oracle has flicked out more than a hundred security patches, and when you’re finished, it’ll be time to round up any Blackberry users in the company and apply some patches for them. Let’s start with Oracle, which among other things is taking another stab at securing Java, fixing 36 vulnerabilities of which 34 are “remotely exploitable without authentication”. All but one are client-side vulnerabilities, and ten of them are rated by Oracle at 9.3 or 10 on its vuln scale. Once they’ve finished dealing with the Java fixes, weary sysadmins can then work on five database server patches (only one remote-without-authentication); 22 Fusion Middleware patches (19 remotely exploitable); two for Hyperion; four for the E-Business Suite (one remotely exploitable); 16 for the Supply Chain suite (six remotely exploitable); 17 for PeopleSoft (ten remotely exploitable); two for Siebel (one remotely exploitable); one each for iLearning and Financial Services (both remotely exploitable). There are also eleven Solaris operating system patches, nine virtualisation patches, and 18 MySQL server patches. […]




Facebooktwittergoogle_plusredditpinterestlinkedinmail