| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <022501c781d3$a935daf0$fba190d0$@com> Date: Wed, 18 Apr 2007 11:07:27 -0500 From: "Integrigy Alerts" <alerts@...egrigy.com> To: <full-disclosure@...ts.grok.org.uk> Subject: Oracle E-Business Suite Vulnerability Information April 2007 Integrigy has released additional information on the Oracle E-Business Suite 11i and R12 security vulnerabilities in the April 2007 Oracle Critical Patch Update. This analysis includes details (type, impact, etc.) regarding the vulnerabilities, a review of the required patches, and advice on applying the 6-10 required patches in a timely manner. http://www.integrigy.com/Oracle_CPU_April_2007.pdf Based on our discussions with clients, there seems to be continuing confusion regarding the versions (i.e., patch sets) required to apply the security patches. Oracle's policy is simple - Oracle only supports the 2 most recent patch sets that have been released in the past 12 months for the Oracle Database and Oracle Application Server. There are some exceptions to policy based on operating system support and other product dependencies. To highlight the differences between certified versions and versions supported in the April 2007 CPU we have released the following - http://www.integrigy.com/security-resources/analysis/Oracle-CPU-Support-Matr ix-April-2007.pdf _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists