http://www.theregister.co.uk/2014/01/16/blackberry_oracle_ship_vuln_patches/
By Richard Chirgwin
The Register
16th January 2014
Systems administrators who decided it would be a quiet week were wrong:
Oracle has flicked out more than a hundred security patches, and when
you're finished, it'll be time to round up any Blackberry users in the
company and apply some patches for them.
Let's start with Oracle, which among other things is taking another stab
at securing Java, fixing 36 vulnerabilities of which 34 are “remotely
exploitable without authentication”. All but one are client-side
vulnerabilities, and ten of them are rated by Oracle at 9.3 or 10 on its
vuln scale.
Once they've finished dealing with the Java fixes, weary sysadmins can
then work on five database server patches (only one
remote-without-authentication); 22 Fusion Middleware patches (19 remotely
exploitable); two for Hyperion; four for the E-Business Suite (one
remotely exploitable); 16 for the Supply Chain suite (six remotely
exploitable); 17 for PeopleSoft (ten remotely exploitable); two for Siebel
(one remotely exploitable); one each for iLearning and Financial Services
(both remotely exploitable).
There are also eleven Solaris operating system patches, nine
virtualisation patches, and 18 MySQL server patches.
[...]
--
Subscribe to InfoSec News
http://www.infosecnews.org/subscribe-to-infosec-news/
