Oracle regularly releases critical patch updates. These patches are created to resolve a bug or glitch in the system, or to increase the security and effectiveness of the system.
It’s important to take note of these updates because it can have an impact on how the applications and databases will react to different vulnerabilities. If you fail to apply new Oracle patches, your system could be left vulnerable to attacks or threats.
The new critical patch update contains 88 new security fixes across product families such as Oracle Database 11g Release 2, versions 126.96.36.199, 188.8.131.52; Oracle Database 11g Release 1, version 184.108.40.206; Oracle Database 10g Release 2, versions 10.2.0.3, 10.2.0.4, 10.2.0.5; Oracle Application Server 10g Release 3, version 10.1.3.5.0 and Oracle DB UM Connector for Oracle Identity Manager, Version 220.127.116.11, among others.
Why you should apply the critical patch update now
Critical Patch Updates include all fixes for a product from the previous Critical Patch Updates. Patch updates are available for; Oracle Database, Oracle Fusion Middleware, Oracle Enterprise Manager Grid Control, Oracle E-Business Suite Applications, JD Edwards EnterpriseOne, JD Edwards OneWorld Tools, PeopleSoft Enterprise Portal Applications, PeopleSoft Enterprise PeopleTools, Siebel Enterprise, Industry Applications, FLEXCUBE, Primavera and Oracle VM patches in the Critical Patch Updates are cumulative.
Oracle security alert
Oracle released a Security Alert on January 31st, 2012 to address the security issue CVE-2011-5035, a denial of service vulnerability in multiple Oracle products due to hashing collisions. Please see Security Alert (CVE-2011-5035) for the list of affected products and patch availability information.
Whenever a new critical patch update is released, RDB’s database consultants are ready to analyse the client’s current system and to give advice on the best way to implement new updates.
Contact RDB Consulting for database management and maintenance – Jennifer Mbesa, firstname.lastname@example.org or +27 (0)11 807 7663