Oracle preps July patch blitz

46 fixes coming at ya

By John Leyden, 13th July 2007

Oracle plans to release 46 security patches next week as part of its quarterly update cycle.

The updates cover unspecified flaws in products including Oracle Database, Application Server, and E-Business Suite, among others. Some of the patches due to be released on Tuesday, 17 July, cover bugs in multiple products.

Twenty of the planned security updates include fixes for versions of Oracle's database, two of which might be remotely exploited without requiring login credentials.

Six of the 14 flaws in Oracle's E-Business Suite might also be remotely exploited by hackers. Three of four bugs in Oracle's Application Server carry the same risk, Oracle warns in its pre-release announcement here.

Last year, Oracle began rating the severity of bugs in its applications according to the Common Vulnerability Scoring System (CVSS), an industry-wide initiative designed to standardise vulnerability ratings.

Oracle rates the worst of this quarter's patch batch (two bugs affecting Oracle PeopleSoft Enterprise) at 4.8. The last edition of Oracle's quarterly patch release featured 36 security fixes compared to the 51 security updates Oracle issued in January. ®

5 ways to reduce advertising network latency

Microsoft’s Cloud OS

System Center Virtual Machine manager and how this product allows the level of virtualization abstraction to move from individual physical computers and clusters to unifying the whole Data Centre as an abstraction layer.

5 ways to prepare your advertising infrastructure for disaster

Being prepared allows your brand to greatly improve your advertising infrastructure performance and reliability that, in the end, will boost confidence in your brand.

Reg Reader Research: SaaS based Email and Office Productivity Tools

Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.

Email delivery: Hate phishing emails? You'll love DMARC

DMARC has been created as a standard to help properly authenticate your sends and monitor and report phishers that are trying to send from your name..