Oracle patch batch eclipses Microsoft Patch Tuesday
41 to one
Next Tuesday (13 January) promises to be a busy day for hard-pressed sys admins.
Although Microsoft's regular monthly Patch Tuesday update promises only one bulletin, a critical fix for Windows1, Oracle's quarterly batch weighs in at 41 fixes.
The updates fix vulnerabilities across "hundreds of Oracle products", an alert from Oracle warns.
Highlights include nine critical bug fixes for Oracle Secure Backup, all of which might lend themselves to remote exploitation, and two critical fixes for Oracle Application Server. There's also five critical updates for Oracle BEA WebLogic server software packages.
Ten of the remaining (less critical) bulletins address lower-risk flaws in various versions of Oracle's database server software.
Oracle's pre-alert, which explains the planned patches in much greater depth, can be found here.
1 Microsoft light sprinkle of patches means that a flaw in SQL Server, which became the target of exploit code soon after the December 2008 patch Tuesday update, will remain unaddressed for at least another month. ®
Monthly vs Quarterly
So whats the actual quarterly vs quarterly score then??
When comparing things it is commonplace to compare apples with apples as they say....
1 M$ flaw posibly not patched for another month.
Wonder how many months / Years have the Oracle flaws existed? But no doubt the fanbouys wil jump on the M$ bashing bandwagon.