Quantcast
Channel: The Oracle Software Security Assurance Blog
Browsing latest articles
Browse All 30 View Live

January 2011 Critical Patch Update Released

Hi, this is Eric Maurice again. Oracle released the January 2011 Critical Patch Update (CPUJan2011) today. With this Critical Patch Update (CPU), Oracle's primary security vulnerability remediation...

View Article


Security Alert For CVE-2010-4476 Released

Hello, this is Eric Maurice again.Oracle just released a Security Alert with a fix for the vulnerability CVE-2010-4476, which affects Oracle Java SE and Oracle Java For Business. This vulnerability is...

View Article


February 2011 Java SE and Java for Business Critical Patch Update Released

Hello, this is Eric Maurice again.Oracle released the February 2011 Critical Patch Update for Java SE and Java for Business today. As discussed in a previous blog entry, Oracle currently maintains a...

View Article

Take Advantage of Oracle's Ongoing Assurance Effort!

Hi, this is Eric Maurice again!A few years ago, I posted a blog entry, which discussed the psychology of patching. The point of this blog entry was that a natural tendency existed for systems and...

View Article

Understanding the Common Vulnerability Scoring System (CVSS)

Hi, this is Eric Maurice again!A few years back, I wrote a series of blog entries discussing Oracle's application of the Common Vulnerability Scoring System (CVSS). However, shortly after the...

View Article


April 2011 Critical Patch Update Released

Hello, this is Eric Maurice.Oracle released the April 2011 Critical Patch Update (CPUApr2011) today. As a reminder, note that security fixes for Java SE and Java for Business continue to be released on...

View Article

June 2011 Java SE Critical Patch Update Released

Hi, this is Eric Maurice.Oracle just released the June 2011 Critical Patch Update for Java SE. Today’s Java Critical Patch Update provides fixes for 17 new security vulnerabilities.  Out of these 17...

View Article

July 2011 Critical Patch Update Released

Hi, this is Eric Maurice.Oracle just released the July 2011 Critical Patch Update.  This Critical Patch Update provides fixes for 78 new security vulnerabilities in a wide range of product families...

View Article


Security Alert for CVE-2011-3192 Released

Hi, this is Eric Maurice.Oracle just released a Security Alert for CVE-2011-3192, also known as “Apache Killer.”  This vulnerability was recently discovered in the Apache HTTP Server and publicly...

View Article


October 2011 Critical Patch Updates Released

Hello, this is Eric Maurice.Oracle just released the October 2011 Critical Patch Update and the Critical Patch Update for Java SE.  As explained in previous blogs, because of commitments made before...

View Article

Keeping Up With Newer Releases is Good Security Practice

Hi, this is Eric Maurice again.On October 18th 2011, Oracle released the October 2011 Critical Patch Update.  As usual, this Critical Patch Update included a number of fixes across a wide range of...

View Article

January 2012 Critical Patch Update Released

Hi, this is Eric Maurice again.Oracle just released the January 2012 Critical Patch Update.  This Critical Patch Update provides fixes for 78 new security vulnerabilities affecting a wide range of...

View Article

Learning More About Oracle Database Systems Change Number (“SCN”)

Hi, this is Eric Maurice again.On January 17th 2012, Oracle released the January 2012 Critical Patch Update. This Critical Patch Update provided two new fixes for the Oracle Database. As usual, Oracle...

View Article


Security Alert for CVE-2011-5035 Released

Hello, this is Eric Maurice.Oracle just released a Security Alert for CVE-2011-5035.  In recent weeks, it was widely reported in the security community that a number of programming language...

View Article

February 2012 Critical Patch Update for Java SE Released

Hello, this is Eric Maurice.Oracle just released the February 2012 Critical Patch Update for Java SE. This Critical patch Update provides fixes for 14 new security vulnerabilities affecting the Java...

View Article


Security Alert for CVE-2011-5035 Updated

Hi, this is Eric Maurice again.  Oracle has just updated the Security Alert for CVE-2011-5035 to announce the availability of additional fixes for products that were affected by this vulnerability...

View Article

April 2012 Critical Patch Update Released

Hi, this is Eric Maurice.Oracle has just released the April 2012 Critical Patch Update. This Critical Patch Update provides 88 new security fixes across the following product families: Oracle Database...

View Article


Security Alert for CVE-2012-1675 Released

Hi, this is Eric Maurice.Oracle just released Security Alert CVE-2012-1675 to address the “TNS Listener Poison Attack” in the Oracle Database.  With a CVSS Base Score of 7.5, this vulnerability is...

View Article

June 2012 Critical Patch Update for Java SE Released

Hi, this is Eric Maurice.Oracle just released the June 2012 Critical Patch Update for Java SE.  This Critical Patch Update provides 14 new security fixes across Java SE products.  As discussed in...

View Article

July 2012 Critical Patch Update Released

Hi, this is Eric Maurice again.Oracle has just released the July 2012 Critical Patch Update.  This Critical Patch Update delivers a total of 87 new fixes across a number of product families including:...

View Article

Use of the Common Vulnerability Reporting Format (CVRF) for Oracle’s Security...

Hi, this is Reshma Banerjee. I am a member of the Security Alerts group within the Global Product Security Team at Oracle.My primary responsibilities include working with security researchers on the...

View Article


Security Alert CVE-2012-3132 Released

Hi, this is Eric Maurice.Oracle today released Security Alert CVE-2012-3132 to address a vulnerability affecting the Oracle Database Server, which was publicly disclosed at BlackHat 2012.  With a CVSS...

View Article


Security Alert for CVE-2012-4681 Released

Hi, this is Eric Maurice again!Oracle has just released Security Alert CVE-2012-4681 to address 3 distinct but related vulnerabilities and one security-in-depth issue affecting Java running in desktop...

View Article

October 2012 Critical Patch Update and Critical Patch Update for Java SE...

Hi, this is Eric Maurice.Oracle has just released the October 2012 Critical Patch Update and the October 2012 Critical Patch Update for Java SE. As a reminder, the release of security patches for Java...

View Article

Security Alert for CVE-2013-0422 Released

Hi, this is Eric Maurice again.Oracle has just released Security Alert CVE-2012-0422 to address two vulnerabilities affecting Java in web browsers.  These vulnerabilities do not affect Java on servers,...

View Article


January 2013 Critical Patch Update Released

Hi, this is Eric Maurice.Today, Oracle released the January 2013 Critical Patch Update.  This Critical Patch Update provides fixes for 86 vulnerabilities across a number of product families including...

View Article

February 2013 Critical Patch Update for Java SE Released

Hi, this is Eric Maurice again.Oracle just released the February 2013 Critical Patch Update for Java SE.  The original Critical Patch Update for Java SE was scheduled on February 19th, but Oracle...

View Article

Updates to February 2013 Critical Patch Update for Java SE

Hello, this is Eric Maurice.On February 1st 2013, Oracle released the February 2013 Critical Patch Update for Java SE.  In the blog entry discussing this Critical Patch Update release, I stated that...

View Article

Updated February 2013 Critical Patch Update for Java SE Released

Hi, this is Eric Maurice.Oracle today released the updated February 2013 Critical Patch Update for Java SE.  As discussed in a previous blog entry, the purpose of this update is to deliver 5 additional...

View Article



Security Alert CVE-2013-1493 Released

Hello, this is Eric Maurice.Today Oracle released Security Alert CVE-2013-1493 to address two vulnerabilities affecting Java running in web browsers (CVE-2013-1493 and CVE-2013-0809).  One of these...

View Article
Browsing latest articles
Browse All 30 View Live


Latest Images