I saw yesterday that Steve Kost had put up a pre-analysis of the October CPU. This is a useful read and the page is titled "Critical Patch Update October 2007 Pre-Release Analysis". The most interesting thing to watch for are the 5 database remotely exploitable without authentication bugs / fixes. These should make the patch be mandatory to apply quickly.
Oracle October CPU pre-release analysis
There has been 4 Comments posted on this article
October 15th, 2007 at 11:19 am
Pete Finnigan says:
Thanks for your comment, I am very sorry but i don't understand your point?
cheers
Pete
October 16th, 2007 at 07:40 am
Pete Finnigan says:
:-)))
Bad, bad English... sorry.
I mean, in CPU July 2007 was a bug, that was describing in your blog “07/24/2007: "First exploit released for CPU July 2007". End my question is: in October CPU this bug is fixed, or not?
I have not test environment and can’t test it. In product environment CPU may be applied for month or later.
October 16th, 2007 at 09:35 am
Pete Finnigan says:
Hi,
Thanks for your further reply, i now understand your question. The short answer is that i don't know as I don't work in Oracle so don't have the inside track on whats exactly fixed. I would hope that the fix is included though.
cheers
Pete
October 15th, 2007 at 10:22 am
Pete Finnigan says:
Hello
Do You know (testing), is patched bug, describing in Your blog "07/24/2007: "First exploit released for CPU July 2007""??