Oracle Critical Patch Updates, Security Alerts & Third Party Bulletins

ronjor · Jul 8, 2014

Critical Patch Updates

Critical Patch Updates are collections of security fixes for Oracle products. They are available to customers with valid support contracts. They are released on the Tuesday closest to the 17th day of January, April, July and October. The next four dates are:

15 July 2014
14 October 2014
20 January 2015
14 April 2015
Click to expand...

http://www.oracle.com/technetwork/topics/security/alerts-086861.html

ronjor · Jul 11, 2014

Oracle to release 115 security patches

Java SE and Fusion Middleware alone will receive nearly 50 fixes in Tuesday's update
By Chris Kanaracus

July 11, 2014 03:50 PM ET
Click to expand...

http://www.computerworld.com/s/article/9249690/Oracle_to_release_115_security_patches

ronjor · Jul 14, 2014

Oracle Critical Patch Update Pre-Release Announcement - July 2014

Description

This Critical Patch Update Pre-Release Announcement provides advance information about the Oracle Critical Patch Update for July 2014, which will be released on Tuesday, July 15, 2014. While this Pre-Release Announcement is as accurate as possible at the time of publication, the information it contains may change before publication of the Critical Patch Update Advisory.
Click to expand...

http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html

Gullible Jones · Jul 14, 2014

Aaaand the circus continues. It's a shame, because the JVM fills a niche not easily occupied by anything else. (Not just with Java but as the virtual machine for Jython, JRuby, Closure, Scala, Groovy...)

In any case thank you for helping everyone stay on top of this stuff.

ronjor · Aug 5, 2014

Java 7 update 67 patch release
By Erik Costlow-Oracle on Aug 04, 2014

The recent Java 7 update 65 contained an issue that prevents some Applet and Web Start applications from launching. As a result, we have released Java 7 update 67 to restore the functionality for affected users.

This issue only affects some Rich Internet Applications and does not impact client or server-side applications. Java 7 update 67 is a functionality release: it is not a security fix or Critical Patch.
Click to expand...

https://blogs.oracle.com/java-platform-group/entry/java_7_update_67_patch

Rilla927 · Aug 5, 2014

Thanks Ronjor! Just updated both of mine yesterday.

MrBrian · Oct 15, 2014

Oracle Critical Patch Update Advisory - October 2014

ronjor · Jan 16, 2015

Oracle Critical Patch Update Pre-Release Announcement - January 2015

Description
This Critical Patch Update Pre-Release Announcement provides advance information about the Oracle Critical Patch Update for January 2015, which will be released on Tuesday, January 20, 2015. While this Pre-Release Announcement is as accurate as possible at the time of publication, the information it contains may change before publication of the Critical Patch Update Advisory.
Click to expand...

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

ronjor · Jan 20, 2015

Tuesday Jan 20, 2015
January 2015 Critical Patch Update Released
By Eric P. Maurice on Jan 20, 2015

Hi, this is Eric Maurice.

Oracle today released the January 2015 Critical Patch Update. This Critical Patch Update provides 169 new fixes for security issues across a wide range of product families including: Oracle Database, Oracle Fusion Middleware, Oracle Enterprise Manager, Oracle E-Business Suite, Oracle Supply Chain Suite, Oracle PeopleSoft Enterprise, Oracle JDEdwards EnterpriseOne, Oracle Siebel CRM, Oracle iLearning, Oracle Java SE, Oracle Sun Systems Products Suite, Oracle Linux and Virtualization, and Oracle MySQL.
Click to expand...

https://blogs.oracle.com/security/

chachazz · Apr 10, 2015

Oracle Critical Patch Update Pre-Release Announcement - April 2015
This Critical Patch Update Pre-Release Announcement provides advance information about the Oracle Critical Patch Update for April 2015, which will be released on Tuesday, April 14, 2015. While this Pre-Release Announcement is as accurate as possible at the time of publication, the information it contains may change before publication of the Critical Patch Update Advisory.
- http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html

Oracle Java SE
This Critical Patch Update contains 15 new security fixes for Oracle Java SE. All of these vulnerabilities may be remotely exploitable without authentication, i.e., may be exploited over a network without the need for a username and password.

ronjor · Apr 14, 2015

Oracle Critical Patch Update Advisory - April 2015

This Critical Patch Update contains 98 new security fixes across the product families listed below. Please note that a blog entry summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at https://blogs.oracle.com/security.h...twork/topics/security/cpuapr2015-2365600.html
Click to expand...

http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html

ronjor · May 19, 2015

Oracle Security Alert for CVE-2015-3456

Description

This Security Alert addresses security issue CVE-2015-3456 ("VENOM"), a buffer overflow vulnerability in QEMU's virtual Floppy Disk Controller (FDC). The vulnerable FDC code is included in various virtualization platforms and is used in some Oracle products. The vulnerability may be exploitable by an attacker who has access to an account on the guest operating system with privilege to access the FDC. The attacker may be able to send malicious code to the FDC that is executed in the context of the hypervisor process on the host operating system. This vulnerability is not remotely exploitable without authentication, i.e., may not be exploited over a network without the need for a username and password.
Click to expand...

http://www.oracle.com/technetwork/topics/security/alert-cve-2015-3456-2542656.html

ronjor · May 19, 2015

"Venom" Vulnerability - CVE-2015-3456

PURPOSE

The purpose of this document is to list Oracle products that include QEMU in their distribution, either directly or via inclusion of a component that includes QEMU, and to document their current status with respect to the publicly disclosed vulnerability CVE-2015-3456.
Click to expand...

http://www.oracle.com/technetwork/topics/security/venom-cve-2015-3456-2542653.html

ronjor · Jul 15, 2015

July 2015 Critical Patch Update Released
By Eric P. Maurice-Oracle on Jul 14, 2015

Hello, this is Eric Maurice.

The July 2015 Critical Patch Update provides fixes for 193 new security vulnerabilities across a wide range of product families including: Oracle Database, Oracle Fusion Middleware, Oracle Hyperion, Oracle Enterprise Manager, Oracle E-Business Suite, Oracle Supply Chain Suite, Oracle PeopleSoft Enterprise, Oracle Siebel CRM, Oracle Communications Applications, Oracle Java SE, Oracle Sun Systems Products Suite, Oracle Linux and Virtualization, and Oracle MySQL.
Click to expand...

https://blogs.oracle.com/security/entry/july_2015_critical_patch_update

ronjor · Oct 21, 2015

Oracle Critical Patch Update Advisory - October 2015
Affected Products and Components
Security vulnerabilities addressed by this Critical Patch Update affect the products listed in the categories below. The product area of the patches for the listed versions is shown in the Patch Availability column corresponding to the specified Products and Versions column. Please click on the link in the Patch Availability column below or in the Patch Availability Table to access the documentation for those patches.
Click to expand...

http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html

ronjor · Jan 20, 2016

Oracle Critical Patch Update Advisory - January 2016

Description
A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are usually cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update advisories should be reviewed for information regarding earlier published security fixes. Please refer to:
Click to expand...

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

ronjor · Feb 8, 2016

Security Alert CVE-2016-0603 Released
By Eric P. Maurice-Oracle on Feb 05, 2016

Oracle just released Security Alert CVE-2016-0603 to address a vulnerability that can be exploited when installing Java 6, 7 or 8 on the Windows platform. This vulnerability has received a CVSS Base Score of 7.6.
Click to expand...

ronjor · Mar 24, 2016

Oracle Security Alert for CVE-2016-0636

Description

This Security Alert addresses CVE-2016-0636, a vulnerability affecting Java SE running in web browsers on desktops. This vulnerability is not applicable to Java deployments, typically in servers or standalone desktop applications, that load and run only trusted code. It also does not affect Oracle server-based software.
Click to expand...

http://www.oracle.com/technetwork/topics/security/alert-cve-2016-0636-2949497.html

ronjor · Apr 20, 2016

Oracle Critical Patch Update Advisory - April 2016
Description

A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are usually cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update advisories should be reviewed for information regarding earlier published security fixes. Please refer to:
Click to expand...

http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html

ronjor · Jul 20, 2016

Oracle Critical Patch Update Advisory - July 2016
Description

A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are usually cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update advisories should be reviewed for information regarding earlier published security fixes. Please refer to:
Click to expand...

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

ronjor · Oct 18, 2016

October 2016 Critical Patch Update Released

By Eric P. Maurice-Oracle on Oct 18, 2016

Oracle today released the October 2016 Critical Patch Update.

This Critical Patch Update provides fixes for a wide range of product families including: Oracle Database Server, Oracle E-Business Suite, Oracle Industry Applications, Oracle Fusion Middleware, Oracle Sun Products, Oracle Java SE, and Oracle MySQL.
Click to expand...

ronjor · Jan 18, 2017

Oracle Critical Patch Update Advisory - January 2017

Description

A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are usually cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update advisories should be reviewed for information regarding earlier published security fixes. Please refer to:
Click to expand...

ronjor · Apr 18, 2017

Oracle Critical Patch Update Advisory - April 2017

Description
A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are usually cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update advisories should be reviewed for information regarding earlier published security fixes. Please refer to:

Critical Patch Updates and Security Alerts for information about Oracle Security Advisories.
Click to expand...

ronjor · Jul 18, 2017

Oracle Critical Patch Update Advisory - July 2017

Description
A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are usually cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update advisories should be reviewed for information regarding earlier published security fixes. Please refer to:

Critical Patch Updates and Security Alerts for information about Oracle Security Advisories.
Click to expand...

ronjor · Sep 25, 2017

Oracle Security Alert Advisory - CVE-2017-9805

Description
The Apache Foundation’s fixes for CVE-2017-5638, an Apache Struts 2 vulnerability identified by Equifax in relation to Equifax’s recent security incident, were distributed by Oracle to its customers in the April 2017 Critical Patch Update, and should have already been applied to customer systems.
Subsequent to the Equifax breach, the Apache Foundation released fixes for a number of additional Apache Struts 2 vulnerabilities (CVE-2017-9805, CVE-2017-7672, CVE-2017-9787, CVE-2017-9791, CVE-2017-9793, CVE-2017-9804, and CVE-2017-12611). Oracle is distributing these fixes as part of this Security Alert for the benefit of our customers.
Oracle strongly recommends that the fixes contained in this Security Alert be applied without delay.
Click to expand...

Log in or Sign up

Oracle Critical Patch Updates, Security Alerts & Third Party Bulletins

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Gullible Jones Registered Member

ronjor Global Moderator

Rilla927 Registered Member

MrBrian Registered Member

ronjor Global Moderator

ronjor Global Moderator

chachazz Updates Team

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

Oracle Critical Patch Updates, Security Alerts & Third Party Bulletins

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Gullible Jones Registered Member

ronjor Global Moderator

Rilla927 Registered Member

MrBrian Registered Member

ronjor Global Moderator

ronjor Global Moderator

chachazz Updates Team

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches