| Oracle - updates e patches críticos |
|
|
| Quarta, 20 Abril 2005 16:42 |
|
-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------------------- UNIRAS (UK Govt CERT) Briefing Notice - 308/05 dated 20.04.05 Time: 16:10 UNIRAS is part of NISCC (National Infrastructure Security Co-ordination Centre) - ---------------------------------------------------------------------------------- UNIRAS material is also available from its website at www.uniras.gov.uk and Information about NISCC is available from www.niscc.gov.uk - ---------------------------------------------------------------------------------- Title ===== Oracle - Critical Patch Update April 2005 Detail ====== Oracle have issued a critical patch update for April 2005. It is a PDF document, and can be found at: http://www.oracle.com/technology/deploy/security/pdf/cpuapr2005.pdf The following information is a small extract from the update: " Description A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required (because of interdependencies) by those security patches. The Oracle Database Server, Enterprise Manager, and the Oracle Application Server patches in the Updates are cumulative; each successive Critical Patch Update contains the fixes from the previous Critical Patch Updates. Supported Products Affected The following supported product releases and versions are affected by the security vulnerabilities addressed by this Critical Patch Update: . Oracle Database 10g Release 1, versions 10.1.0.2, 10.1.0.3, 10.1.0.3.1, 10.1.0.4 (10.1.0.3.1 is supported for Oracle Application Server only) . Oracle9i Database Server Release 2, versions 9.2.0.5, 9.2.0.6 . Oracle9i Database Server Release 1, versions 9.0.1.4, 9.0.1.5, 9.0.4 (9.0.1.5 FIPS) (all of which are supported for Oracle Application Server only) . Oracle8i Database Server Release 3, version 8.1.7.4 . Oracle Application Server 10g Release 2 (10.1.2) . Oracle Application Server 10g (9.0.4), versions 9.0.4.0, 9.0.4.1 . Oracle9i Application Server Release 2, versions 9.0.2.3, 9.0.3.1 . Oracle9i Application Server Release 1, version 1.0.2.2 . Oracle Collaboration Suite Release 2, versions 9.0.4.1, 9.0.4.2 . Oracle E-Business Suite and Applications Release 11i, versions 11.5.0 through 11.5.10 . Oracle E-Business Suite and Applications Release 11.0 . Oracle Enterprise Manager Grid Control 10g, versions 10.1.0.2, 10.1.0.3 . Oracle Enterprise Manager versions 9.0.4.0, 9.0.4.1 . PeopleSoft EnterpriseOne Applications, versions 8.9 SP2 and 8.93 . PeopleSoft OneWorldXe/ERP8 Applications, versions SP22 and higher " - ---------------------------------------------------------------------------------- For additional information or assistance, please contact the HELP Desk by telephone or Not Protectively Marked information may be sent via EMail to: Este endereço de e-mail está protegido de spam bots, pelo que necessita do Javascript activado para o visualizar Office Hours: Mon - Fri: 08:30 - 17:00 Hrs Tel: +44 (0) 870 487 0748 Ext 4511 Fax: +44 (0) 870 487 0749 Outside of Office Hours: On Call Duty Officer: Tel: +44 (0) 870 487 0748 and follow the prompts - ---------------------------------------------------------------------------------- UNIRAS wishes to acknowledge the contributions of Oracle for the information contained in this Briefing. - ---------------------------------------------------------------------------------- This Briefing contains the information released by the original author. Some of the information may have changed since it was released. If the vulnerability affects you, it may be prudent to retrieve the advisory from the canonical site to ensure that you receive the most current information concerning that problem. Reference to any specific commercial product, process, or service by trade name, trademark manufacturer, or otherwise, does not constitute or imply its endorsement, recommendation, or favouring by UNIRAS or NISCC. The views and opinions of authors expressed within this notice shall not be used for advertising or product endorsement purposes. Neither UNIRAS or NISCC shall also accept responsibility for any errors or omissions contained within this briefing notice. In particular, they shall not be liable for any loss or damage whatsoever, arising from or in connection with the usage of information contained within this notice. UNIRAS is a member of the Forum of Incident Response and Security Teams (FIRST) and has contacts with other international Incident Response Teams (IRTs) in order to foster cooperation and coordination in incident prevention, to prompt rapid reaction to incidents, and to promote information sharing amongst its members and the community at large. - ---------------------------------------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: PGP 8.0 iQCVAwUBQmZwLopao72zK539AQGSMwP/aaLoOlidWz2cRTqUm9JFZKIYoVVDW+om r40dGY3M3E5Rl3aJGoKXLzFdnYhDmQHurjFDRBePCHYQsLv+gCBUFwUWGUj6Rzfh Rc5cPEbrfF/KqqZ+SAMHaGtWxd2LjejrhO4c3xppqacHnWW4Vq+Zxqoyt6/JS2AE p71b290gr60= =4buB -----END PGP SIGNATURE----- ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________ ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________ |
O CERT.PT tem como missão contribuir para o esforço de cibersegurança nacional nomeadamente no tratamento e coordenação da resposta a incidentes, na produção de alertas e recomendações de segurança e na promoção de uma cultura de segurança em Portugal.
Av. do Brasil 101
1700-066 Lisboa
Portugal
Tel: +351 218440177 (9h30-12h30, 14h00-17h30; GMT)
Fax: +351 218472167
email:
pgp: 342A 17BA DF71 E193 6871 0357 8BDE A247 C523 AAE7