Oracle plans massive update for Tuesday
Next Tuesday could be quite a busy day for administrators if they are responsible for Oracle products and run Windows servers. Oracle are planning to release a "Critical Patch Update" (CPU) on that day, which updates "hundreds of Oracle products" with 41 security fixes. Among the products to be updated are Oracle Database 11g, 10g and 9i, Oracle Secure Backup, Oracle TimesTen, Oracle Application Server, Oracle Collaboration Suite and Oracle Weblogic Server. This on the same day that Microsoft have promised patches for Windows Server 2003 and 2008.
The most critical vulnerabilities exist in Oracle Secure Backup which is receiving 9 security fixes, all for problems which could be remotely exploited without authentication. Oracle strongly recommends that all customers apply the fixes when they are published. Further details on the vulnerabilities will usually appear once the fixes are available.
- Only one patch planned for upcoming Microsoft Patchday, heise Security report