Two-thirds of Oracle DBAs don't apply security patches
563705
In surprising results, a survey finds that two-thirds of Oracle DBAs appear not to be installing Oracle's security patches.
698256
Company won't release any security bulletins on its monthly patch day,  though there are several zero-day flaws yet to be fixed.
402714
Oracle has released 26 fixes across its product line in its latest critical patch update, nine of which repair flaws that are remotely exploitable.In an advisory listing the problems, Oracle advised administrators to patch their machines as quickly as possible.Five of the six vulnerabilities in Oracle&#39;s Application Server can be exploited over a network without the need for a username or password, the company said.The same danger applies to three of seven vulnerabilities in the E-Business Suite and Applications and one of four problems in PeopleSoft Enterprise PeopleTools, Oracle said.In other products, the update includes one patch for Oracle&#39;s Collaboration Suite and eight for various Database products.Oracle fixed a total of 51 vulnerabilities in its last critical patch update in October.&#160;
449710
A security expert has found programming errors in Oracle 11g that left security vulnerabilities.
317024
Rob Richards mentioned in a previous book review about some of the issues he was having getting the Oracle extension enabled on his Fedora 8 system. Well, he's come back after doing some more testing/compiling and has found some resolution to his issues.   I really didn't need to get it running, but the sheer fact that I tried it and it wouldn't work, pissed me off enough to spend some time getting it resolved. Hopefully this helps anyone else having the same problem. I am currently using instant client 11.1, but I did try the 10.2 version with the same results.   He steps through the process he followed - tracking down the missing libaio files, correcting an issue with SELinux loading the Oracle libraries and his realization: he just needed to allow text relocation. Included in the post are the command line calls that'd need to be made to make it all happen.
372620
Silent modifications to the Windows Update software in Vista and XP have been a long-time practice and are needed to keep users patched, the company said.
275658
It&#39;s not that there aren&#39;t Unix attacks that work. It&#39;s that pretty much everything the security industry does misrepresents the actual balance between attacks on Microsoft&#39;s products and attacks on Unix and open source.
544694
Users of Microsoft&#39;s Windows XP computer operating system should be on the lookout for the latest round of updates and patches, which fix several security problems but lack any real security advancements.
671921
Oracle has fixed 45 security flaws in its database and application products.
298609
One in five applications installed on Windows PCs are missing security patches, a Copenhagen-based vulnerability tracker has reported.According to Secunia APS, more than 20 percent of the applications scanned by its Personal Software Inspector (PSI) utility were open to attack because available fixes for security flaws had not been applied.&quot;More than 20 percent of all applications installed on users&#39; PCs have known security flaws, but the users have yet to install the patch provided by the vendor of [the] product,&quot; said Jakob Balle, Secunia&#39;s development manager, in a post to the company&#39;s blog last week.The 20 percent figure was based on scans of more than 14.5 million applications installed on the Windows PCs operated by users who downloaded and installed Secunia&#39;s PSI. The utility scans for some 4,200 different applications and reports on their patch status.The 1-in-5 ratio, however, is an improvement over earlier PSI scans. Last May, Secunia said that 28 percent of the&#160;applications PSI scanned were missing available security updates.Secunia released the free patch-detection utility a year ago but shifted it to Release Candidate 1 (RC1) stage earlier this month. The company claimed that nearly 191,000 users have downloaded and run the program.PSI, which runs on Windows 2000, XP, Vista and Server 2003, can be downloaded from Secunia&#39;s Web site.Computerworld is an InfoWorld affiliate.
343216
Intuit on Thursday addressed problems with QuickBooks Pro 2006, pushing a new patch to users. However, the patch itself disables the program's upgrade mechanism, which makes some users suspicious of the company's intentions.
26800
Apps upgrades will need policies, even if you don't want them Further indications that the coming upgrades of the major business applications such as SAP and Oracle could cause unsuspecting IT managers more problems than they have planned for, first noted here, have come from SOA Software.â¦
623552
More than half of the latest vulnerabilities to IT systems are commonly identified loopholes that organisations have failed to fix, since discovering them last year.
156569
Worries about how well SP2 will work with existing software, combined with concerns about possible security vulnerabilities, have led many corporates to hold back from installing the security update.
624148
Patching is the top concern of security managers in federal government, who feel that commercial software makers aren&#39;t putting out a good enough product, according to a survey published Monday.
12873
Oracle is warning customers to apply software patches it released in August because of the availability of malicious code that can exploit unpatched vulnerabilities in its software.
707431
Oracle posts its third security update of the year, patching 45 vulnerabilities in its flagship database software and other products.