[Previous entry: "Pete Finnigan will be teaching Oracle Security in Tallinn, Estonia and speaking at UKOUG Unix SIG at TVP"] [Next entry: "The second IOUG / Oracle Security Assurance Survey"]
59 Security bugs fixed, 28 remotely expolitable, 13 in the database
July 14th, 2010 by Pete
Post to del.icio.us
Post to Furl
Oracle yesterday released the latest in its series of quarterly security patches known as CPU's Critical Patch Updates. Oracle released an advisory detailing the fixes. The patch set contains 59 new security fixes. For me the interesting part are the fixes for the database; 13 in all, 6 of which are for the database server itself and 4 of which may be expolited remotely without authentication. The other interesting thing is the amount of names credited on the advisory. i have not counted but its probably the most i can remember. what does this actually mean?, on the simplest level it means many more people are now interested in and doing someting about database security which has to be a good thing. As always Oracle recommend that you apply this as soon as you can. With remotely exploitable bugs / vulnerabilities this should be obvious.
July 15th, 2010 at 02:04 am
Slavik Markovich says:
Hi Pete,
I believe that the number of names credited is directly related to the fact that the security advisory includes a whole new family of Sun products.