[Previous entry: "What is amazing is that a lot of CPU patches are not available until May!!"] [Next entry: "CERT Issues Alert for Oracle"]
Alex has released an advisory for his bug in CPU April 2006
April 19th, 2006 by Pete
Post to del.icio.us
Post to Furl
Alex let me know that he has released an advisory for the security bug that he found in CPU April 2006. This is a SQL Injection bug in the package SYS.DBMS_LOGMNR_SESSION. The advisory is called "SQL Injection in package SYS.DBMS_LOGMNR_SESSION" and the bug is in the function DELETE_FROM_TABLE. The fix was applied using the package DBMS_ASSERT.
