14 DAY TRIAL // Oracle has just released its quarterly security update addressing 78 vulnerabilities across its entire range of products, many of which are rated critical.
"Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply CPU [Critical Patch Update] fixes as soon as possible," the company says.
Some vulnerabilities can be mitigated by blocking the network protocols required for their exploitation. Other risks can be reduced by lowering the privileges of the attacked components.
A list of products affected by vulnerabilities patched in this release is as follows:
· Oracle Database 11g Release 2, versions 11.2.0.1, 11.2.0.2 · Oracle Database 11g Release 1, version 11.1.0.7 · Oracle Database 10g Release 2, versions 10.2.0.3, 10.2.0.4, 10.2.0.5 · Oracle Database 10g Release 1, version 10.1.0.5 · Oracle Secure Backup, version 10.3.0.3 · Oracle Fusion Middleware 11g Release 1, versions 11.1.1.3.0, 11.1.1.4.0, 11.1.1.5.0 · Oracle Application Server 10g Release 3, version 10.1.3.5.0 · Oracle Application Server 10g Release 2, version 10.1.2.3.0 · Oracle Business Intelligence Enterprise Edition, versions 10.1.3.4.1, 11.1.1.3 · Oracle Identity Management 10g, versions 10.1.4.0.1, 10.1.4.3 · Oracle JRockit, versions R27.6.9 and earlier (JDK/JRE 1.4.2, 5, 6), R28.1.3 and earlier (JDK/JRE 5, 6) · Oracle Outside In Technology, versions 8.3.2.0, 8.3.5.0 · Oracle Enterprise Manager 10g Grid Control Release 1, version 10.1.0.6 · Oracle Enterprise Manager 10g Grid Control Release 2, version 10.2.0.5 · Oracle Enterprise Manager 11g Grid Control Release 1, version 11.1.0.1 · Oracle E-Business Suite Release 12, versions 12.0.4, 12.0.6, 12.1.1, 12.1.2, 12.1.3 · Oracle E-Business Suite Release 11i, version 11.5.10.2 · Oracle Agile Technology Platform, versions 9.3.0.3, 9.3.1.1 · Oracle PeopleSoft Enterprise FIN, version 9.0, 9.1 · Oracle PeopleSoft Enterprise FMS, versions 9.0, 9.1 · Oracle PeopleSoft Enterprise FSCM, versions 9.0, 9.1 · Oracle PeopleSoft Enterprise HRMS, versions 8.9, 9.0, 9.1 · Oracle PeopleSoft Enterprise SCM, versions 9.0, 9.1 · Oracle PeopleSoft Enterprise PeopleTools, versions 8.49, 8.50, 8.51 · Oracle Sun Product Suite
Oracle releases patches on a quarterly basis, in the Tuesday that is closest to the 17th. The next patch is scheduled for October 2011 and it will be the last for this year.