Oracle spoils your day with NEARLY 150 patches

[InfoSec News <alerts () infosecnews org>]

http://www.theregister.co.uk/2014/01/16/blackberry_oracle_ship_vuln_patches/

By Richard Chirgwin
The Register
16th January 2014

Systems administrators who decided it would be a quiet week were wrong: 
Oracle has flicked out more than a hundred security patches, and when 
you're finished, it'll be time to round up any Blackberry users in the 
company and apply some patches for them.

Let's start with Oracle, which among other things is taking another stab 
at securing Java, fixing 36 vulnerabilities of which 34 are “remotely 
exploitable without authentication”. All but one are client-side 
vulnerabilities, and ten of them are rated by Oracle at 9.3 or 10 on its 
vuln scale.

Once they've finished dealing with the Java fixes, weary sysadmins can 
then work on five database server patches (only one 
remote-without-authentication); 22 Fusion Middleware patches (19 remotely 
exploitable); two for Hyperion; four for the E-Business Suite (one 
remotely exploitable); 16 for the Supply Chain suite (six remotely 
exploitable); 17 for PeopleSoft (ten remotely exploitable); two for Siebel 
(one remotely exploitable); one each for iLearning and Financial Services 
(both remotely exploitable).

There are also eleven Solaris operating system patches, nine 
virtualisation patches, and 18 MySQL server patches.

[...]

--
Subscribe to InfoSec News
http://www.infosecnews.org/subscribe-to-infosec-news/