October 18, 2005 6:10 PM PDT

Oracle fixes bugs with mega patch

Oracle on Tuesday released fixes for a laundry list of security vulnerabilities in many of its software products.

The "Critical Patch Update," part of Oracle's quarterly patch release cycle, delivers fixes for 33 flaws in Oracle's Database products, 14 in its Application Server, 13 in the Collaboration Suite, 22 in E-Business Suite and Applications, four in PeopleSoft's PeopleTools, and two in JD Edwards software.

Several of the flaws carry Oracle's most serious rating, which means they are easy to exploit and an attack can have a wide impact, according to the alert. "The most severe of the vulnerabilities could possibly expose affected computers to complete compromise," Symantec said in an alert to users of its DeepSight intelligence service.

Oracle doesn't provide many details in its advisory, which could be a challenge for users when prioritizing patches, Pete Finnigan, a security specialist in York, England, wrote on his Weblog. "The descriptions for all the bugs except for the database section give nothing away whatsoever," he said.

Oracle has been criticized for dragging its heels on fixing security flaws and being unresponsive to researchers who find bugs. Oracle's Chief Security Officer, Mary Ann Davidson, in response said security researchers can be a problem when it comes to product security.

18 comments

Join the conversation!
Add your comment
I thought oracle was unbreakable?
I think that speaks for itself.
Posted by nTier (2 comments )
Reply Link Flag
Nope
The only thing they have that's unbreakable is their founder's head, it appears to be solid bone.
Posted by aabcdefghij987654321 (1721 comments )
Link Flag
I thought oracle was unbreakable?
I think that speaks for itself.
Posted by nTier (2 comments )
Reply Link Flag
Nope
The only thing they have that's unbreakable is their founder's head, it appears to be solid bone.
Posted by aabcdefghij987654321 (1721 comments )
Link Flag
Unbreakable my a$$
So much for Crazy Larry's claims of "can't break in", and "can't break it".

I suggest Mary Ann Davidson should stop mouthing off about security researchers being a problem, and spend her time securing her employer's products. Maybe if Oracle's software is really as secure as Larry boy claimed them to be then security researchers won't find that many bugs, then there's no reason for her to open her mouth and criticize them.

Like it or not Mary baby, security researchers are here to stay whether you like it or not. If you're so bothered by these people, maybe you should get out of the software market and do something else.
Posted by (7 comments )
Reply Link Flag
Unbreakable my a$$
So much for Crazy Larry's claims of "can't break in", and "can't break it".

I suggest Mary Ann Davidson should stop mouthing off about security researchers being a problem, and spend her time securing her employer's products. Maybe if Oracle's software is really as secure as Larry boy claimed them to be then security researchers won't find that many bugs, then there's no reason for her to open her mouth and criticize them.

Like it or not Mary baby, security researchers are here to stay whether you like it or not. If you're so bothered by these people, maybe you should get out of the software market and do something else.
Posted by (7 comments )
Reply Link Flag
Spelling may help your brief descriptions...
In the days of actually proof reading your news articles, a mistake like spell [which] wrong would have never taken place. A few years back newspapers actually employed people to review articles before being "printed" but like all things, news transforms.. we should just call this website one big BLOG without a spell checker.

ORIGINAL POST BELOW:
--------------------------
Oracle fixes bugs with mega patch
Quarterly update includes fixes for a slew of security vulnerabilities in many Oracle products--many of wich carry Oracle's most serious rating.

11 hours, 43 minutes ago
Posted by dotNetDeveloperSeanHogg (7 comments )
Reply Link Flag
That's fixed, thanks!
Okay, I can come up will a list of excuses for that spelling error, but I won't. Thanks for pointing it out, we've fixed it.

We're lucky that on the Internet we can correct mistakes like that and it won't be an eye sore for readers any longer.

Joris Evers, staff writer, CNET News.com
Posted by JorisEvers (48 comments )
Link Flag
spelling mistakes
There are many good reasons.. maybe he dropped a cup of hot cofee on his lap and mis-spelled the word by accident.. big deal, one mis-spelled word.. big deal, I'm sure you have made one or two spelling mistakes in your life.
Posted by (75 comments )
Link Flag
Spelling may help your brief descriptions...
In the days of actually proof reading your news articles, a mistake like spell [which] wrong would have never taken place. A few years back newspapers actually employed people to review articles before being "printed" but like all things, news transforms.. we should just call this website one big BLOG without a spell checker.

ORIGINAL POST BELOW:
--------------------------
Oracle fixes bugs with mega patch
Quarterly update includes fixes for a slew of security vulnerabilities in many Oracle products--many of wich carry Oracle's most serious rating.

11 hours, 43 minutes ago
Posted by dotNetDeveloperSeanHogg (7 comments )
Reply Link Flag
That's fixed, thanks!
Okay, I can come up will a list of excuses for that spelling error, but I won't. Thanks for pointing it out, we've fixed it.

We're lucky that on the Internet we can correct mistakes like that and it won't be an eye sore for readers any longer.

Joris Evers, staff writer, CNET News.com
Posted by JorisEvers (48 comments )
Link Flag
spelling mistakes
There are many good reasons.. maybe he dropped a cup of hot cofee on his lap and mis-spelled the word by accident.. big deal, one mis-spelled word.. big deal, I'm sure you have made one or two spelling mistakes in your life.
Posted by (75 comments )
Link Flag
Great Job Oracle
It is alot of fun having to work on an off-day every three months because of these vulnerabilites.

What good are weekends anyway?
Posted by (5 comments )
Reply Link Flag
Great Job Oracle
It is alot of fun having to work on an off-day every three months because of these vulnerabilites.

What good are weekends anyway?
Posted by (5 comments )
Reply Link Flag
 

Join the conversation

Add your comment

The posting of advertisements, profanity, or personal attacks is prohibited. Click here to review our Terms of Use.

What's Hot

Discussions

Shared

RSS Feeds

Add headlines from CNET News to your homepage or feedreader.