Tuesday, 17 July 2007

Oracle Says Will Release 46 Security Fixes

Oracle has announced that it will deliver 46 patches tomorrow to repair a number of vulnerabilities in its database and allied products...

Oracle has announced that it will deliver 46 patches tomorrow to repair a number of vulnerabilities in its database and allied products.

An Oracle announcement said the quarterly critical patch update would fix some 20 flaws in the Oracle Database, with the most critical vulnerability having a security level of 4.2 out of 10. The company y release also said two of the flaws may be remotely exploited.

The security patches will also patch problems in Application Server, Secure Enterprise Search, Application Express, Collaboration Suite, E-Business Suite and the PeopleSoft Enterprise solutions that include PeopleTools, Human Capital Management and Customer Relationship Management.

This is the third security update since Oracle launched a Common Vulnerability Scoring System (CVSS) to rate bugs, identify those flaws that are critical and remotely exploitable.

The new version features a number of security enhancements, including support for case-sensitive passwords, hot patching, a so-called audit vault to address insider threats and encryption capabilities beyond "column-level encryption.