Oracle preps summer patch cluster

45 updates equal overtime for sysadmins

By John Leyden • Get more from this author

Posted in Software & Security, 11th July 2008 11:03 GMT

Free whitepaper – Essential archive requirements for eDiscovery

Oracle is preparing to release 45 security patches on Tuesday 15 July as part of its quarterly update cycle.

The updates cover unspecified security bugs across multiple Oracle products including its Oracle Database, Application Server, E-Business Suite and PeopleSoft business applications. Some of the updates address vulnerabilities in multiple products.

Eleven of the planned security updates include patches for versions of Oracle's database. Fortunately none of the flaws lend themselves to remote exploitation without requiring login credentials.

The same can't be said for the nine new security fixes for Oracle Application Server. All nine are capable of being exploited by hackers without login credentials, Oracle warns. Three of the seven updates for Oracle WebLogic Server carry the same risk.

Oracle rates the most severe of this quarter's patch batch (involving the flaws in Application Servers and WebLogic Server) at 6.8 out of 10 - pretty critical - according to the Common Vulnerability Scoring System (CVSS), a cross-industry initiative designed to standardise vulnerability ratings. More details can be found in Oracle's pre-release announcement here. ®

Free whitepaper – Five essential considerations for Exchange 2007 implementations