Oracle Issued Critical Patch Update (CPU) For 78 Security Holes

As expected Oracle today officially released their January security update. In this critical patch update they have closed 78 security holes.  The company says that these patch day updates address vulnerabilities in "hundreds of Oracle products". 16 of the vulnerabilities patched are remotely exploitable without authentication. Affected products include Oracle Database 10g and 11g, Fusion Middleware 11g, Application Server 10g, Outside In Technology, WebLogic Server, versions 11i and 12 of its E-Business Suite, Oracle Transportation Management, JD Edwards, Sun Ray, VM Virtualbox, Virtual Desktop Infrastructure, MySQL Server, and PeopleSoft Enterprise CRM, HCM and PeopleTools,. A vulnerability in Solaris 9, 10 and 11 Express's TCP/IP is the highest rated of these with a CVSS score of 7.8 out of 10.0.

According to Oracle:- 

Affected Products & Components:-

Security vulnerabilities addressed by this Critical Patch Update affect the products listed in the categories below.  The product area of the patches for the listed versions is shown in the Patch Availability column corresponding to the specified Products and Versions column.   Please click on the link in the Patch Availability column below or in the Patch Availability Table to access the documentation for those patches.

The list of affected product releases and versions that are in Premier Support or Extended Support, under the Oracle Lifetime Support Policyis as follows:

AFFECTED PRODUCTS AND VERSIONS	PATCH AVAILABILITY
Oracle Database 11g Release 2, versions 11.2.0.2, 11.2.0.3	Database
Oracle Database 11g Release 1, version 11.1.0.7	Database
Oracle Database 10g Release 2, versions 10.2.0.3, 10.2.0.4, 10.2.0.5	Database
Oracle Database 10g Release 1, version 10.1.0.5	Database
Oracle Fusion Middleware 11g Release 1, versions 11.1.1.3.0, 11.1.1.4.0, 11.1.1.5.0	Fusion Middleware
Oracle Application Server 10g Release 3, version 10.1.3.5.0	Fusion Middleware
Oracle Outside In Technology, versions 8.3.5, 8.3.7	Fusion Middleware
Oracle WebLogic Server, versions 9.2.4, 10.0.2, 11gR1 (10.3.3, 10.3.4, 10.3.5)	Fusion Middleware
Oracle E-Business Suite Release 12, versions 12.1.2, 12.1.3	E-Business Suite
Oracle E-Business Suite Release 11i, version 11.5.10.2	E-Business Suite
Oracle Transportation Management, versions 5.5, 6.0, 6.1, 6.2	Oracle Supply Chain
Oracle PeopleSoft Enterprise CRM, version 8.9	PeopleSoft
Oracle PeopleSoft Enterprise HCM, versions 8.9, 9.0, 9.1	PeopleSoft
Oracle PeopleSoft Enterprise PeopleTools, version 8.52	PeopleSoft
Oracle JDEdwards, version 8.98	JDEdwards
Oracle Sun Product Suite	Oracle Sun Product Suite
Oracle VM VirtualBox, version 4.1	Oracle Virtualization Product Suite
Oracle Virtual Desktop Infrastructure, version 3.2	Oracle Virtualization Product Suite
Oracle MySQL Server, versions 5.0, 5.1, 5.5	Oracle MySQL Product Suite

For More Information Click Here