Oracle monster patch will fix 73 security vulnerabilities

ENTERPRISE VENDOR of IT hardware and software Oracle will release a huge patch tomorrow that fixes 73 security vulnerabilities, which it strongly recommends should be deployed as soon as possible.

In a Microsoft-style pre-release announcement, Oracle said the 73 security flaw fixes apply across hundreds of its products. The firm said that the threat of an attack means that Oracle software users should apply the critical patch update as soon as possible.

The software fixes include six for the Oracle Database Server, with two serious enough that they could be exploited over a network without the need for a username and password. There are also nine fixes for Oracle Fusion Middleware, again with six exploitable without a username and password.

There is also one fix for Oracle Enterprise Grid Control, four for the Oracle E-Business suite, one for the Oracle Supply Chain Products Suite, 14 for the Oracle Peoplesoft Suite, eight for the JD Edwards Suite, three for the Oracle Siebel CRM product, and one for Oracle Industry applications.

There are also a number of security updates to software Oracle now owns as part of its acquisition of Sun. There are 18 security fixes for the Sun Products Suite and eight for the Open Office Suite, which Oracle has dropped from its commercial portfolio and turned back into a community project. µ