full-disclosure - Oracle E-Business Suite Vulnerability Information April 2007

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Wed, 18 Apr 2007 11:07:27 -0500
From: "Integrigy Alerts" <alerts@...egrigy.com>
To: <full-disclosure@...ts.grok.org.uk>
Subject: Oracle E-Business Suite Vulnerability Information
	April 2007

Integrigy has released additional information on the Oracle E-Business Suite
11i and R12 security vulnerabilities in the April 2007 Oracle Critical Patch
Update.  This analysis includes details (type, impact, etc.) regarding the
vulnerabilities, a review of the required patches, and advice on applying
the 6-10 required patches in a timely manner.

http://www.integrigy.com/Oracle_CPU_April_2007.pdf

Based on our discussions with clients, there seems to be continuing
confusion regarding the versions (i.e., patch sets) required to apply the
security patches.  Oracle's policy is simple - Oracle only supports the 2
most recent patch sets that have been released in the past 12 months for the
Oracle Database and Oracle Application Server.  There are some exceptions to
policy based on operating system support and other product dependencies.  To
highlight the differences between certified versions and versions supported
in the April 2007 CPU we have released the following -

http://www.integrigy.com/security-resources/analysis/Oracle-CPU-Support-Matr
ix-April-2007.pdf

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/