Pete Finnigan's Oracle Security Forum


    
      
        Pete Finnigan's Oracle Security Forum
        (http://www.petefinnigan.com/forum/yabb/YaBB.cgi)
      

        Oracle Security >> Oracle Security >> CPU October 18 is out
        
(Message started by: Pete Finnigan on Oct 19^th, 2005, 6:28pm)

Title: CPU October 18 is out
Post by Pete Finnigan on Oct 19^th, 2005, 6:28pm

Hi everyone,

The CPU October 18 patch is out. It seems to cover a lot more fixes than last time. My biggest comment is the lack of information to allow anyone to assess the priorities in applying the patch due to each bug apart from the database ones not really showing any details as to the component affected. I would always say to apply the patch as patching the bugs even if you do not know what they are or how they can be exploited is better than not patching.

What about everyone else, are you going to patch quickly, slowly or not at all?

cheers

Pete

Title: Re: CPU October 18 is out
Post by Pete Finnigan on Oct 20^th, 2005, 7:38am

Pete,

I just published 2 advisories for Cross-Site-Scripting vulnerabilities in Oracle Workflow (part of the database and/or application server)

Regards

Alexander Kornbrust

---
Red-Database-Security GmbH

Title: Re: CPU October 18 is out
Post by Pete Finnigan on Oct 20^th, 2005, 5:39pm

Thanks for the links Alex.

cheers

Pete

Title: Re: CPU October 18 is out
Post by Pete Finnigan on Oct 20^th, 2005, 9:45pm

Pete

today I posted an analysis of the database patches on my website

Alex