FYI...
Oracle Jan 2017 Critical Patch Update released
- https://blogs.oracle...al_patch_update
Jan 17, 2017 - "... This Critical Patch Update provides fixes for a wide range of product families including: Oracle Database Server, Oracle Enterprise Manager Grid Control, Oracle E-Business Suite, Oracle Industry Applications, Oracle Fusion Middleware, Oracle Sun Products, Oracle Java SE, and Oracle MySQL. Oracle recommends this Critical Patch Update be applied as soon as possible..."
- http://www.oracle.co...17-2881727.html
"... This Critical Patch Update contains -270- new security fixes across the product families listed..."
Text Form: Oracle Critical Patch Update - Jan 2017 Risk Matrices
> http://www.oracle.co...se-2881728.html
___
Oracle Database Server
- http://www.oracle.co...html#AppendixDB
Oracle Secure Backup, version(s) prior to 12.1.0.3
- http://www.oracle.co...tml#AppendixOSB
Spatial, version(s) prior to 1.2
- http://www.oracle.co...ml#AppendixBGDG
Oracle Fusion Middleware, version(s) 11.1.1.7, 11.1.1.9, 11.1.2.3, 11.1.2.4, 12.1.3.0, 12.2.1.0, 12.2.1.1
Oracle GlassFish Server, version(s) 2.1.1, 3.0.1, 3.1.2
Oracle JDeveloper, version(s) 11.1.1.7.0, 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0
Oracle Outside In Technology, version(s) 8.5.2, 8.5.3
Oracle Tuxedo, version(s) 12.1.1
Oracle WebLogic Server, version(s) 10.3.6.0, 12.1.3.0, 12.2.1.0, 12.2.1.1
- http://www.oracle.co...tml#AppendixFMW
Application Testing Suite, version(s) 12.4.0.2, 12.5.0.2, 12.5.0.3
Enterprise Manager Base Platform, version(s) 12.1.0.5, 13.1, 13.2
Enterprise Manager Ops Center, version(s) 12.1.4, 12.2.2, 12.3.2
- http://www.oracle.co...html#AppendixEM
Oracle E-Business Suite, version(s) 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6
- http://www.oracle.co...tml#AppendixEBS
PeolpeSoft Enterprise HCM ePerformance, version(s) 9.2
PeopleSoft Enterprise PeopleTools, version(s) 8.54, 8.55
- http://www.oracle.co...html#AppendixPS
JD Edwards EnterpriseOne Tools, version(s) 9.2.1.1
- http://www.oracle.co...tml#AppendixJDE
Siebel Applications, version(s) 16.1
- http://www.oracle.co...ml#AppendixSECR
Oracle Commerce Platform, version(s) 10.0.3.5, 10.2.0.5, 11.2.0.2
- http://www.oracle.co...ml#AppendixOCOM
Oracle Fusion Applications, version(s) 11.1.2 through 11.1.9
- http://www.oracle.co...tml#AppendixFMW
Oracle Communications Indexing and Search Service, version(s) prior to 1.0.5.28.0
Oracle Communications Network Charging and Control, version(s) 4.4.1.5, 5.0.0.1, 5.0.0.2, 5.0.1.0, 5.0.2.0
Oracle Communications Network Intelligence, version(s) 7.3.0.0
- http://www.oracle.co...ml#AppendixCGBU
Oracle FLEXCUBE Core Banking, version(s) 5.1.0, 5.2.0, 11.5.0
Oracle FLEXCUBE Direct Banking, version(s) 12.0.0, 12.0.1, 12.0.2, 12.0.3
Oracle FLEXCUBE Enterprise Limits and Collateral Management, version(s) 12.0.0, 12.0.2
Oracle FLEXCUBE Investor Servicing, version(s) 12.0.1, 12.0.2, 12.0.4, 12.1.0, 12.3.0
Oracle FLEXCUBE Private Banking, version(s) 2.0.1, 2.2.0, 12.0.1
Oracle FLEXCUBE Universal Banking, version(s) 11.3.0, 11.4.0, 12.0.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0
- http://www.oracle.co...ml#AppendixIFLX
MICROS Lucas, version(s) 2.9.1, 2.9.2, 2.9.3, 2.9.4, 2.9.5
Oracle Retail Allocation, version(s) 12.0, 13.0, 13.1, 13.2, 13.3, 14.0, 14.1
Oracle Retail Assortment Planning, version(s) 14.1, 15.0
Oracle Retail Order Broker, version(s) 4.1, 5.1, 5.2, 15.0, 16.0
Oracle Retail Predictive Application Server, version(s) 13.1, 13.2, 13.3, 13.4, 14.0, 14.1, 15.0
Oracle Retail Price Management, version(s) 13.1, 13.2, 14.0, 14.1
- http://www.oracle.co...ml#AppendixRAPP
Primavera P6 Enterprise Project Portfolio Management, version(s) 8.2, 8.3, 8.4, 15.1, 15.2, 16.1, 16.2
- http://www.oracle.co...tml#AppendixPVA
Oracle Java SE, version(s) 6u131, 7u121, 8u112
Oracle Java SE Embedded, version(s) 8u111
Oracle JRockit, version(s) R28.3.12
- http://www.oracle.co...ml#AppendixJAVA
Oracle VM Server for Sparc, version(s) 3.2, 3.4
Solaris, version(s) 11.3
- http://www.oracle.co...ml#AppendixSUNS
Oracle VM VirtualBox, version(s) prior to 5.0.32, prior to 5.1.14
- http://www.oracle.co...ml#AppendixOVIR
MySQL Cluster, version(s) 7.2.26 and prior, 7.3.14 and prior, 7.4.12 and prior
MySQL Enterprise Monitor, version(s) 3.1.3.7856 and prior, 3.1.4.7895 and prior, 3.1.5.7958 and prior, 3.2.1.1049 and prior, 3.2.4.1102 and prior, 3.3.0.1098 and prior
MySQL Server, version(s) 5.5.53 and prior, 5.6.34 and prior, 5.7.16 and prior
- http://www.oracle.co...ml#AppendixMSQL
___
- https://blog.qualys....vulnerabilities
Jan 17, 2017 - "... More than 100 vulnerabilities that were fixed could be compromised by a remote attacker without requiring any credentials. Most remote vulnerabilities could be exploited over the HTTP protocol..."
> https://blog.qualys....U-1-660x496.png
Edited by AplusWebMaster, 18 January 2017 - 03:07 PM.