FYI...

- http://isc.sans.org/diary.html?storyid=3164
Last Updated: 2007-07-18 05:57:36 UTC - "Oracle released its quarterly Critical Patch Update today. This quarterly update contains 45 new security fixes that range across many of their products. The ISC strongly recommends that these updates be applied in a timely manner as the risks posed by attackers compromising sensitive data contained in your database products. For more information on the products and versions affected, please see the Oracle Critical Patch Update* website."

* http://www.oracle.com/technology/deploy/se...cpujul2007.html

> http://blogs.oracle.com/security/2007/07/17#a62

.

This post has been edited by AplusWebMaster: Jul 18 2007, 06:35 AM

FYI...

Oracle Critical Patch Update (CPU) - October 2009
- http://isc.sans.org/diary.html?storyid=7408
Last Updated: 2009-10-20 09:25:51 UTC - "Today, October 20, Oracle releases its quarterly CPU. There are lots of vulnerabilities DBAs must act upon ASAP. I specially want to point out that, although it "only" addresses 38 vulnerabilities...
• 16 fixes address flaws in the Oracle database (six can be exploited remotely without user interaction)
• 3 fixes address flaws in the Oracle Application Server (two can be exploited remotely without user interaction)
• 8 fixes address flaws in the Oracle Applications Suite (five can be exploited remotely without user interaction)

More information...:
http://www.oracle.com/technology/deploy/se...cpuoct2009.html "