Thursday, January 17, 2008

Oracle fixes critical flaws in quarterly update

Oracle has released 26 fixes across its product line in its latest critical patch update, nine of which repair flaws that are remotely exploitable.
In an advisory listing the problems, Oracle advised administrators to patch their machines as quickly as possible.

Five of the six vulnerabilities in Oracle's Application Server can be exploited over a network without the need for a username or password, the company said.

The same danger applies to three of seven vulnerabilities in the E-Business Suite and Applications and one of four problems in PeopleSoft Enterprise PeopleTools, Oracle said.

In other products, the update includes one patch for Oracle's Collaboration Suite and eight for various Database products.

Oracle fixed a total of 51 vulnerabilities in its last critical patch update in October.

No comments: