Call: +44 (0)7759 277220 Call

Pete Finnigan's Oracle Security Weblog

This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.

[Previous entry: "A new Oracle default password checking tool is available"] [Next entry: "Small update to the default password check scripts"]

Patch set for Win32 is causing debate

I came across an interesting thread on the ORACLE-L mailing list this morning again related to the new patch set. The first post to the thread by Patrice updates us that the OTN patch page still says the latest patch set is for Win32 but metalink has released on 31 Oct. Patrice also updates us that there are still no patch sets for Linux or tru64.

Paul Drake makes a very interesting comment further down the thread where he says:

“Please be aware, that the patchset for win32 is not in itself
a solution for Oracle Security Alert #68, as described in the FAQ and
patch set matrix notes on Metalink. Other one-off patch sets may also need to be applied.”