Commentary

George Hulme
 

Microsoft's Light Patch Tuesday Offset By Oracle

While Microsoft is slated to issue one patch next week, Oracle announced it will release an eye-popping 41 security vulnerability fixes that touch hundreds of applications. Oh joy.

While Microsoft is slated to issue one patch next week, Oracle announced it will release an eye-popping 41 security vulnerability fixes that touch hundreds of applications. Oh joy.Not that Microsoft's patch will necessarily be a smooth spring drive. It's issuing a single security patch on Tuesday that will affect all versions of Windows: from Windows 2000 through Vista and Windows Server 2008. In older versions of Windows the flaw is ranked as critical by Microsoft, while in the more recent Vista and Server 2008 software it's moderate.

However, many operation teams and an awful lot of database admins will be focused not on the single OS patch shipping from Redmond on Tuesday, but the 41 patches that will be fired from Redwood Shores that same day:


More Security Insights

White Papers

More >>

Reports

More >>

Webcasts

More >>

This Critical Patch Update contains 41 security fixes across hundreds of Oracle products. Some of the vulnerabilities addressed in this Critical Patch Update affect multiple products. Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply Critical Patch Update fixes as soon as possible. Oracle Database software will be the recipient of 10 of the new vulnerabilities. Fortunately, none of these are remotely exploitable by parties unauthorized to the system.

This Critical Patch Update contains 10 new security vulnerability fixes for the Oracle Database. None of these vulnerabilities may be remotely exploited without authentication. Unfortunately, the same can't be said for the nine vulnerability patches slated for Oracle Secure Backup -- all these vulnerabilities may be remotely exploited without authentication

There are simply too many applications and vulnerabilities to look at individually here. But if I were an Oracle user, I'd take a hard look at this advisory and see what applications of mine are affected -- and get ready to patch.


Related Reading




Currently we allow the following HTML tags in comments:

Single tags

These tags can be used alone and don't need an ending tag.

<br> Defines a single line break

<hr> Defines a horizontal line

Matching tags

These require an ending tag - e.g. <i>italic text</i>

<a> Defines an anchor

<b> Defines bold text

<big> Defines big text

<blockquote> Defines a long quotation

<caption> Defines a table caption

<cite> Defines a citation

<code> Defines computer code text

<em> Defines emphasized text

<fieldset> Defines a border around elements in a form

<h1> This is heading 1

<h2> This is heading 2

<h3> This is heading 3

<h4> This is heading 4

<h5> This is heading 5

<h6> This is heading 6

<i> Defines italic text

<p> Defines a paragraph

<pre> Defines preformatted text

<q> Defines a short quotation

<samp> Defines sample computer code text

<small> Defines small text

<span> Defines a section in a document

<s> Defines strikethrough text

<strike> Defines strikethrough text

<strong> Defines strong text

<sub> Defines subscripted text

<sup> Defines superscripted text

<u> Defines underlined text

InformationWeek encourages readers to engage in spirited, healthy debate, including taking us to task. However, InformationWeek moderates all comments posted to our site, and reserves the right to modify or remove any content that it determines to be derogatory, offensive, inflammatory, vulgar, irrelevant/off-topic, racist or obvious marketing/SPAM. InformationWeek further reserves the right to disable the profile of any commenter participating in said activities.

Disqus Tips To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy.
T-Shirt Giveaway T-Shirt Giveaway: Each week we're selecting one great comment from our readers. The author of the comment will receive an InformaitonWeek Community t-shirt. So get posting!
Subscribe to RSS

Resource Links