July 14, 2010

Oracle's quarterly update resolves 59 vulnerabilities

Oracle has released its quarterly security update to plug 59 security holes.

Twenty-one of the vulnerabilities reside in the Solaris product suite, the Unix-based enterprise operating system now produced by Oracle after its acquisition of Sun Microsystems. Tuesday's release also addresses six flaws in the popular Database Server, the most severe of which earned a score of 7.8 (out of 10) on the company's Common Vulnerability Scoring System (CVSS).

But Eric Maurice, software security assurance director at Oracle, said in a blog post that two flaws affecting Secure Backup and one affecting TimesTen In-Memory Database earned the highest-possible CVSS scores, making them high-priority patches because of the vulnerabilities' ease of exploitation and the impact of a successful attack.

In addition, the update covers vulnerabilities in Fusion Middleware, Enterprise Manager, E-Business Suite, Supply Chains Product Suite and PeopleSoft Enterprise.

A security advisory from Oracle lists all of the holes being patched.

Related Articles
Related Topics

Sign up to our newsletters

More in News

House Intelligence Committee OKs amended version of controversial CISPA

Despite the 18-to-2 vote in favor of the bill proposal, privacy advocates likely will not be satisfied, considering two key amendments reportedly were shot down.

Judge rules hospital can ask ISP for help in ID'ing alleged hackers

The case stems from two incidents where at least one individual is accused of accessing the hospital's network to spread "defamatory" messages to employees.

Three LulzSec members plead guilty in London

Ryan Ackroyd, 26; Jake Davis, 20; and Mustafa al-Bassam, 18, who was not named until now because of his age, all admitted their involvement in the hacktivist gang's attack spree.