Oracle patches 88 holes with quarterly security update

[Vadik]

OCTOBER 19, 2005 (IDG NEWS SERVICE) - Oracle Corp. yesterday released a bundle of critical security patches for its software, fixing 88 vulnerabilities in products including its database and application servers and in some PeopleSoft and J.D. Edwards applications. A work-around exists for just one of the vulnerabilties, according to Oracle, which recommends applying the patches as soon as possible.

The patches are part of Oracle's quarterly security update program and affect versions of its database software from 8i onward. Customers covered by Oracle's Extended Maintenance Support or Extended Support plans can download the patches.

The company supplied fixes for 33 vulnerabilities in its database server software, many of them easy to exploit and with wide impact on the confidentiality, integrity or availability of information stored in databases. That is as bad as it gets in Oracle's security rating system.

Oracle patched 14 flaws in its application server software (four of them fixed by the database server patches and 10 requiring further patches), 13 flaws in its Collaboration Suite, 22 in its E-Business Suite and one in its Enterprise Manager software.

Six of the patches are for PeopleSoft or J.D. Edwards EnterpriseOne software.

http://www.computerworld.com/securitytopic...,105538,00.html