April 21, 2014

Oracle to patch 88 new security vulnerabilities

(LiveHacking.Com) – Oracle has published a pre-release announcement for a Critical Patch Update that the company intends to make public on Tuesday, July 17, 2012. Oracle’s Critical Patch Updates are a collection of patches designed to address security vulnerabilities in the Oracle product range. July’s Critical Patch Update contains 88 security vulnerabilities.

The most significant products to be patched include Oracle Database 11g, Oracle Database 10g, GlassFish Enterprise Server, Solaris and MySQL. This Critical Patch Update contains four security fixes for the Oracle Database Server. Three of these vulnerabilities may be remotely exploitable without authentication, however none of these fixes are applicable to client-only installations, i.e., installations that do not have the Oracle Database Server installed.

25 vulnerabilities will also be patched in the Oracle Sun Products Suite (which includes the GlassFish Enterprise Server and Solaris). 17 of these vulnerabilities may be remotely exploitable without authentication. Oracle will also fix 6 security problems in MySQL, however none of these vulnerabilities may be remotely exploitable without authentication.

The full list of affected products is:

  • Oracle Database 11g Release 2, versions 11.2.0.2, 11.2.0.3
  • Oracle Database 11g Release 1, version 11.1.0.7
  • Oracle Database 10g Release 2, versions 10.2.0.3, 10.2.0.4, 10.2.0.5
  • Oracle Secure Backup, version 10.3.0.3, 10.4.0.1
  • Oracle Fusion Middleware 11g Release 2, version 11.1.2.0
  • Oracle Fusion Middleware 11g Release 1, versions 11.1.1.5, 11.1.1.6
  • Oracle Application Server 10g Release 3, version 10.1.3.5
  • Oracle Identity Management 10g, version 10.1.4.3
  • Hyperion BI+, version 11.1.1.x
  • Oracle JRockit versions, R28.2.3 and earlier, R27.7.2 and earlier
  • Oracle Map Viewer, versions 10.1.3.1, 11.1.1.5, 11.1.1.6
  • Oracle Outside In Technology, versions 8.3.5, 8.3.7
  • Enterprise Manager Plugin for Database 12c Release 1, versions 12.1.0.1, 12.1.0.2
  • Enterprise Manager Grid Control 11g Release 1, version 11.1.0.1
  • Enterprise Manager Grid Control 10g Release 1, version 10.2.0.5
  • Oracle E-Business Suite Release 12, versions 12.0.4, 12.0.6, 12.1.1, 12.1.2, 12.1.3
  • Oracle E-Business Suite Release 11i, version 11.5.10.2
  • Oracle Transportation Management, versions 5.5.06, 6.0, 6.1, 6.2
  • Oracle AutoVue, versions 20.0.2, 20.1
  • Oracle PeopleSoft Enterprise HRMS, versions 9.0, 9.1
  • Oracle PeopleSoft Enterprise PeopleTools, versions 8.50, 8.51, 8.52
  • Oracle Siebel CRM, versions 8.1.1, 8.2.2
  • Oracle Clinical Remote Data Capture Option, versions 4.6, 4.6.2, 4.6.3
  • Oracle Sun Product Suite
  • Oracle MySQL Server, versions 5.1, 5.5
Share and Enjoy:
  • Print
  • Digg
  • StumbleUpon
  • del.icio.us
  • Facebook
  • Yahoo! Buzz
  • Twitter
  • Google Bookmarks