Oracle's quarterly update resolves 59 vulnerabilities

Share this article:

Oracle has released its quarterly security update to plug 59 security holes.

Twenty-one of the vulnerabilities reside in the Solaris product suite, the Unix-based enterprise operating system now produced by Oracle after its acquisition of Sun Microsystems. Tuesday's release also addresses six flaws in the popular Database Server, the most severe of which earned a score of 7.8 (out of 10) on the company's Common Vulnerability Scoring System (CVSS).

But Eric Maurice, software security assurance director at Oracle, said in a blog post that two flaws affecting Secure Backup and one affecting TimesTen In-Memory Database earned the highest-possible CVSS scores, making them high-priority patches because of the vulnerabilities' ease of exploitation and the impact of a successful attack.

In addition, the update covers vulnerabilities in Fusion Middleware, Enterprise Manager, E-Business Suite, Supply Chains Product Suite and PeopleSoft Enterprise.

A security advisory from Oracle lists all of the holes being patched.

Share this article:
You must be a registered member of SC Magazine to post a comment.

Sign up to our newsletters

More in News

Policy violation letters trick SMB workers into downloading malware

Bitdefender researchers detected an uptick in computers infected by Zbot via dozens of ARJ-compressed files.

Researcher hacks iPhone 6 Touch ID sensor

Little progress was made security wise, between the iPhone 5S and iPhone 6 sensor, a researcher found.

Blackphone and Silent Circle announce bug bounty programs

Both programs offer a standard reward of $128 per qualifying vulnerability, although it could change depending on the severity of the bug.