Feeds

Oracle discharges monster bug fix

Three dozen bulletins - multiple critical vulns

Top 5 reasons to deploy VMware with Tegile

It's no-questions-asked overtime for data centre staffers again, after Oracle published its latest monster update batch on Wednesday night.

The October update covers vulnerabilities across Oracle's full software product range which is, of course, extensive. There are 36 bulletins in total. Among them are 15 updates for Oracle Database Suite, six involving Oracle Application Server and four involving E-Business Suite applications. There are a quintet of updates for Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne and six involving BEA application server tech.

The impact of the vulnerabilities addressed by the update varies, but the majority pose a critical risk.

One of the database vulnerabilities lends itself to remote exploitation without authentication. Two of the six Application Server flaws pose a similar risk of allowing hackers to launch attacks across the net, without the need to know either user names or passwords. A brace of Oracle E-Business server security bugs, addressed by the patch batch, also pose a critical danger. Five of the BEA bugs are also remotely exploitable.

Oracle's risk and patching matrix provides a comprehensive overview of the three dozen updates. Although none have been tied to specific hacking attacks or script-kiddie friendly exploit packages, according to security clearing houses such as US CERT and Secunia at least, early patching is still advisable. ®

Providing a secure and efficient Helpdesk

More from The Register

next story
Preview redux: Microsoft ships new Windows 10 build with 7,000 changes
Latest bleeding-edge bits borrow Action Center from Windows Phone
Google opens Inbox – email for people too thick to handle email
Print this article out and give it to someone tech-y if you get stuck
Microsoft promises Windows 10 will mean two-factor auth for all
Sneak peek at security features Redmond's baking into new OS
UNIX greybeards threaten Debian fork over systemd plan
'Veteran Unix Admins' fear desktop emphasis is betraying open source
Google+ goes TITSUP. But WHO knew? How long? Anyone ... Hello ...
Wobbly Gmail, Contacts, Calendar on the other hand ...
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
Redmond top man Satya Nadella: 'Microsoft LOVES Linux'
Open-source 'love' fairly runneth over at cloud event
prev story

Whitepapers

Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Three 1TB solid state scorchers up for grabs
Big SSDs can be expensive but think big and think free because you could be the lucky winner of one of three 1TB Samsung SSD 840 EVO drives that we’re giving away worth over £300 apiece.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.