OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
[ISN] Oracle Patches 45 Security Holes in Database, App Server and More

From: InfoSec News (alertsinfosecnews.org)
Date: Wed Jul 16 2008 - 03:11:08 CDT


http://www.eweek.com/c/a/Security/Oracle-Ships-45-Security-Fixes-in-Latest-Update/

By Brian Prince
eWEEK.com
2008-07-15

The Oracle Patch Update includes 45 security fixes, including 11 for the
Oracle Database. Also included are nine security fixes for Oracle
Application Server, seven for Oracle WebLogic Server, two for Oracle
Enterprise Manager, six for Oracle E-Business Suite and Applications,
and seven for Oracle PeopleSoft Enterprise products.

Oracle released 45 security fixes July 15 as part of its latest Critical
Patch Update [1].

The patches bring the total for the year to 112 vulnerabilities patched.
The Oracle Database has the most fixes—a total of 11, none of which can
be exploited remotely without authentication. The vulnerabilities affect
a number of components, including Advanced Querying, Advanced
Replication and the core RDBMS (relational DBMS). There are also three
fixes affecting the Oracle TimesTen In-Memory Database. All three
address vulnerabilities that can be fixed by upgrading to Version
7.0.4.0.0 or a later edition of the product.

[...]

[1] http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujul2008.html

_______________________________________________
Attend Black Hat USA, August 2-7 in Las Vegas,
the world's premier technical event for ICT security experts.
Featuring 40 hands-on training courses and 80 Briefings
presentations with lots of new content and new tools.
Network with 4,000 delegates from 50 nations.
Visit product displays by 30 top sponsors in
a relaxed setting. http://www.blackhat.com