Oracle management tools top critical list in quarterly patch party
No sign of a Java fix however
Regcast training : Hyper-V 3.0, VM high availability and disaster recovery
As part of its quarterly patch release cycle, Oracle will be unleashing 86 of the things on Tuesday, January 15, over half of them critical enough to allow full remote code execution without piffling details like a password.
Roll 'em out
"Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply Critical Patch Update fixes as soon as possible," reads the security advisory.
Top of the busy list come Tuesday will be those running Oracle's Application Performance Management and Enterprise Manager tools, since these two share an unlucky 13 critical patches between them. MySQL topped the patch list in numeric terms, although all but two patches aren't too serious.
Managers using Oracle's E-Business Suite and PeopleSoft are also doing to have a fair amount of critical fixing and the Seibel and Sun packages share 18 patches between them. Virtualization, supply chain, and JD Edwards users can pretty much put their feet up.
There's no sign of a fix for the latest zero-day flaw to bedevil Java, although it's a bit early and the eventual patch will probably be released out-of-cycle. ®
COMMENTS
Re: Need a decent SDL
@AC You want Oracle to learn from Microsoft about security? Next you will be recommending learning about virtue and purity from a harlot.
Re: Need a decent SDL
Actually, a good point. I've worked for both Oracle and Microsoft, and Oracle in general have pretty poor product management and development process. However the area where they do well is in the RDBMS. But that's not a surprise as it is their core business. Microsoft isn't exactly the perfect company, far from it. But when it comes to having well defined process for the development and production of secure software, they excel.
@tim 68
This Reader X you talk of - not available for Linux I see, as my copy of Adobe's bloat (used for cases when Evince is not OK) seems to be stuck on bug-riddled version 9.
So yes, they have learned from Microsoft by taking a cross-platform product and dropping support for all but Windows and (no doubt reluctantly) MacOS.
IT infrastructure monitoring strategies
Agentless Backup is Not a Myth
Top 10 SIEM implementer’s checklist
Steps to Take Before Choosing a Business Continuity Partner
Requirements Checklist for Choosing a Cloud Backup and Recovery Service Provider
