January 2011 Critical Patch Update Released
Hi, this is Eric Maurice again. Oracle released the January 2011 Critical Patch Update (CPUJan2011) today. With this Critical Patch Update (CPU), Oracle's primary security vulnerability remediation...
View ArticleSecurity Alert For CVE-2010-4476 Released
Hello, this is Eric Maurice again.Oracle just released a Security Alert with a fix for the vulnerability CVE-2010-4476, which affects Oracle Java SE and Oracle Java For Business. This vulnerability is...
View ArticleFebruary 2011 Java SE and Java for Business Critical Patch Update Released
Hello, this is Eric Maurice again.Oracle released the February 2011 Critical Patch Update for Java SE and Java for Business today. As discussed in a previous blog entry, Oracle currently maintains a...
View ArticleTake Advantage of Oracle's Ongoing Assurance Effort!
Hi, this is Eric Maurice again!A few years ago, I posted a blog entry, which discussed the psychology of patching. The point of this blog entry was that a natural tendency existed for systems and...
View ArticleUnderstanding the Common Vulnerability Scoring System (CVSS)
Hi, this is Eric Maurice again!A few years back, I wrote a series of blog entries discussing Oracle's application of the Common Vulnerability Scoring System (CVSS). However, shortly after the...
View ArticleApril 2011 Critical Patch Update Released
Hello, this is Eric Maurice.Oracle released the April 2011 Critical Patch Update (CPUApr2011) today. As a reminder, note that security fixes for Java SE and Java for Business continue to be released on...
View ArticleJune 2011 Java SE Critical Patch Update Released
Hi, this is Eric Maurice.Oracle just released the June 2011 Critical Patch Update for Java SE. Today’s Java Critical Patch Update provides fixes for 17 new security vulnerabilities. Out of these 17...
View ArticleJuly 2011 Critical Patch Update Released
Hi, this is Eric Maurice.Oracle just released the July 2011 Critical Patch Update. This Critical Patch Update provides fixes for 78 new security vulnerabilities in a wide range of product families...
View ArticleSecurity Alert for CVE-2011-3192 Released
Hi, this is Eric Maurice.Oracle just released a Security Alert for CVE-2011-3192, also known as “Apache Killer.” This vulnerability was recently discovered in the Apache HTTP Server and publicly...
View ArticleOctober 2011 Critical Patch Updates Released
Hello, this is Eric Maurice.Oracle just released the October 2011 Critical Patch Update and the Critical Patch Update for Java SE. As explained in previous blogs, because of commitments made before...
View ArticleKeeping Up With Newer Releases is Good Security Practice
Hi, this is Eric Maurice again.On October 18th 2011, Oracle released the October 2011 Critical Patch Update. As usual, this Critical Patch Update included a number of fixes across a wide range of...
View ArticleJanuary 2012 Critical Patch Update Released
Hi, this is Eric Maurice again.Oracle just released the January 2012 Critical Patch Update. This Critical Patch Update provides fixes for 78 new security vulnerabilities affecting a wide range of...
View ArticleLearning More About Oracle Database Systems Change Number (“SCN”)
Hi, this is Eric Maurice again.On January 17th 2012, Oracle released the January 2012 Critical Patch Update. This Critical Patch Update provided two new fixes for the Oracle Database. As usual, Oracle...
View ArticleSecurity Alert for CVE-2011-5035 Released
Hello, this is Eric Maurice.Oracle just released a Security Alert for CVE-2011-5035. In recent weeks, it was widely reported in the security community that a number of programming language...
View ArticleFebruary 2012 Critical Patch Update for Java SE Released
Hello, this is Eric Maurice.Oracle just released the February 2012 Critical Patch Update for Java SE. This Critical patch Update provides fixes for 14 new security vulnerabilities affecting the Java...
View ArticleSecurity Alert for CVE-2011-5035 Updated
Hi, this is Eric Maurice again. Oracle has just updated the Security Alert for CVE-2011-5035 to announce the availability of additional fixes for products that were affected by this vulnerability...
View ArticleApril 2012 Critical Patch Update Released
Hi, this is Eric Maurice.Oracle has just released the April 2012 Critical Patch Update. This Critical Patch Update provides 88 new security fixes across the following product families: Oracle Database...
View ArticleSecurity Alert for CVE-2012-1675 Released
Hi, this is Eric Maurice.Oracle just released Security Alert CVE-2012-1675 to address the “TNS Listener Poison Attack” in the Oracle Database. With a CVSS Base Score of 7.5, this vulnerability is...
View ArticleJune 2012 Critical Patch Update for Java SE Released
Hi, this is Eric Maurice.Oracle just released the June 2012 Critical Patch Update for Java SE. This Critical Patch Update provides 14 new security fixes across Java SE products. As discussed in...
View ArticleJuly 2012 Critical Patch Update Released
Hi, this is Eric Maurice again.Oracle has just released the July 2012 Critical Patch Update. This Critical Patch Update delivers a total of 87 new fixes across a number of product families including:...
View ArticleUse of the Common Vulnerability Reporting Format (CVRF) for Oracle’s Security...
Hi, this is Reshma Banerjee. I am a member of the Security Alerts group within the Global Product Security Team at Oracle.My primary responsibilities include working with security researchers on the...
View ArticleSecurity Alert CVE-2012-3132 Released
Hi, this is Eric Maurice.Oracle today released Security Alert CVE-2012-3132 to address a vulnerability affecting the Oracle Database Server, which was publicly disclosed at BlackHat 2012. With a CVSS...
View ArticleSecurity Alert for CVE-2012-4681 Released
Hi, this is Eric Maurice again!Oracle has just released Security Alert CVE-2012-4681 to address 3 distinct but related vulnerabilities and one security-in-depth issue affecting Java running in desktop...
View ArticleOctober 2012 Critical Patch Update and Critical Patch Update for Java SE...
Hi, this is Eric Maurice.Oracle has just released the October 2012 Critical Patch Update and the October 2012 Critical Patch Update for Java SE. As a reminder, the release of security patches for Java...
View ArticleSecurity Alert for CVE-2013-0422 Released
Hi, this is Eric Maurice again.Oracle has just released Security Alert CVE-2012-0422 to address two vulnerabilities affecting Java in web browsers. These vulnerabilities do not affect Java on servers,...
View ArticleJanuary 2013 Critical Patch Update Released
Hi, this is Eric Maurice.Today, Oracle released the January 2013 Critical Patch Update. This Critical Patch Update provides fixes for 86 vulnerabilities across a number of product families including...
View ArticleFebruary 2013 Critical Patch Update for Java SE Released
Hi, this is Eric Maurice again.Oracle just released the February 2013 Critical Patch Update for Java SE. The original Critical Patch Update for Java SE was scheduled on February 19th, but Oracle...
View ArticleUpdates to February 2013 Critical Patch Update for Java SE
Hello, this is Eric Maurice.On February 1st 2013, Oracle released the February 2013 Critical Patch Update for Java SE. In the blog entry discussing this Critical Patch Update release, I stated that...
View ArticleUpdated February 2013 Critical Patch Update for Java SE Released
Hi, this is Eric Maurice.Oracle today released the updated February 2013 Critical Patch Update for Java SE. As discussed in a previous blog entry, the purpose of this update is to deliver 5 additional...
View ArticleSecurity Alert CVE-2013-1493 Released
Hello, this is Eric Maurice.Today Oracle released Security Alert CVE-2013-1493 to address two vulnerabilities affecting Java running in web browsers (CVE-2013-1493 and CVE-2013-0809). One of these...
View Article