Oracle readies mega-update patching 51 security holes
Print storyFixes span hundreds of products
Posted in Enterprise Security, 13th October 2007 00:07 GMT
Free whitepaper – Securing your online data transfer with SSL
Oracle is to release updates on Tuesday that patches 51 security vulnerabilities across hundreds of products.
The update will fix 27 bugs in the Oracle database, the company's flagship product. Five of them can be exploited over a network without the need for a username and password. None of the fixes are applicable to client-only installations of the program.
Tuesday's patch will plug 11 holes in the Oracle Application Server, seven of which are remotely exploitable. Other products being fixed include Oracle E-Business Suite and Applications, Oracle Enterprise Manager and Oracle PeopleSoft Enterprise PeopleTools and JD Edwards EnterpriseOne.
The maximum severity of the of the flaws is 6.8, as measured on version 2 of the Common Vulnerability Scoring System, which uses a scale of 1 to 10.
Oracle generally issues patches every quarter. In July, it issued updates fixing 45 vulnerabilities. ®
The future of SaaS and IT infrastructure management
The mandate for application security
Extended Validation SSL Certificates
Avoiding 7 common mistakes of IT security compliance
The best practices guide for application security
Google cloud told to encrypt itself
Buggy 'smart meters' open door to power-grid botnet
Chinese firm hits back at cyberspy claims
BlockMaster SafeStick hardware-encrypted USB drive