Feeds

Oracle patch batch to fix 59 flaws

TimesTen, Secure Backup and Solaris

Intelligent flash storage arrays

Oracle plans to release 59 vulnerability fixes, including 21 for Solaris products, as part of its quarterly patch update later on Tuesday.

The highest severity flaws involve bugs in TimesTen In-Memory Database and Oracle Secure Backup. However a big chunk of Oracle's enterprise software product line will need patching for one reason or another. The updates include security fixes for Oracle Database 11g (and earlier versions of the flagship software), Oracle Application Server, Oracle WebLogic Server, Oracle E-Business Suite as well as enterprise software technology acquired from PeopleSoft, among other packages.

The two new security fixes for the TimesTen In-Memory Database address vulnerabilities that might be remotely exploitable without authentication. Three of the five security fixes for Oracle Secure Backup carry the same critical vulnerability risk. Four of the six Oracle Database Server vulnerabilities might also be exploited without the need to log into vulnerable systems but are accessed as a slight lower risk of 7.8 on the CVSS 2.0 scoring system used by Oracle. The Secure Backup and TimesTen security bugs both hit the maximum security (brown alert) rating of 10.0.

Seven of the 21 Oracle Solaris Products Suite flaws are capable of exploitation without authentication. Affected products in this range include Access Manager / OpenSSO, Solaris, Sun Convergence, Sun Java System Application Server and Sun Java System Web Proxy Server, among others.

Altogether the chance of an Oracle admin escaping patching duties are about as good as running through the Dutch defence in last Sunday's World Cup match without a kick in the shins, as can be verified from the detailed list in Oracle's pre-alert notice here. Tuesday's update from Oracle comes at the same time as the expected publication by Microsoft of four bulletins covering three critical flaws including a Windows Help zero-day vulnerability. ®

Top 5 reasons to deploy VMware with Tegile

More from The Register

next story
PEAK APPLE: iOS 8 is least popular Cupertino mobile OS in all of HUMAN HISTORY
'Nerd release' finally staggers past 50 per cent adoption
Microsoft to bake Skype into IE, without plugins
Redmond thinks the Object Real-Time Communications API for WebRTC is ready to roll
Microsoft promises Windows 10 will mean two-factor auth for all
Sneak peek at security features Redmond's baking into new OS
Mozilla: Spidermonkey ATE Apple's JavaScriptCore, THRASHED Google V8
Moz man claims the win on rivals' own benchmarks
Yes, Virginia, there IS a W3C HTML5 standard – as of now, that is
You asked for it! You begged for it! Then you gave up! And now it's HERE!
FTDI yanks chip-bricking driver from Windows Update, vows to fight on
Next driver to battle fake chips with 'non-invasive' methods
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
Ubuntu 14.10 tries pulling a Steve Ballmer on cloudy offerings
Oi, Windows, centOS and openSUSE – behave, we're all friends here
prev story

Whitepapers

Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.