By Steven Chan on April 19, 2006 11:50 AM
The latest Oracle Critical Update Patch (CPU) for April 2006 has been released. Due to extremely-strict Oracle security policies, I'm not permitted to discuss this in any way, other than reprinting the public notice sent to all Oracle customers yesterday:
The Critical Patch Update for April 2006 is now available. Oracle strongly recommends applying the patches as soon as possible.
The Critical Patch Update Advisory is the starting point for relevant information, and it provides instructions on how to obtain the patches. It contains a summary of the security vulnerabilities and links to other important documents.
It is essential to refer to the Pre-Installation Notes before applying patches, since it is where you can find clarifications and corrections to the installation instructions.
The Critical Patch Update Advisory is available at any of the following locations:
MetaLink as Doc ID 360044.1:
https://metalink.oracle.com/metalink/plsql/showdoc?db=NOT&id=360044.1Oracle Technology Network:
http://www.oracle.com/technology/deploy/security/alerts.htmOracle PeopleSoft Enterprise and JD Edwards EnterpriseOne:
http://www.peoplesoft.com/corp/en/support/security_index.jspThe next four Critical Patch Update release dates are:
- July 18, 2006
- October 17, 2006
- January 16, 2006
- April 17, 2007
Sincerely,
Oracle Security Alerts
By Steven Chan on April 19, 2006 12:02 PM
Here's something for a relatively small but important (and vocal) set of E-Business Suite users: Oracle Applications 11i is now certified for Apple Macintosh OS X (Mac OS X) version 10.3 (also known as Panther) with the Safari browser (version 1.3.2). Previous versions of the Apple Macintosh operating system that were supported and certified were Mac OS 9.0.4, 9.1, 9.2.2, and 10.2.
For details, see:
By Steven Chan on April 19, 2006 12:17 PM
While I'm stepping (very gingerly) through the security minefield, I might as well dust this one off, too:
A number of customers have recently reported security issues which may have been
avoided if they had followed Oracle's published recommendations on securing
E-Business Suite Release 11i environments. All E-Business Suite Release 11i system administrators and security professionals should have the following crucial documents committed to memory:
Even if you've read earlier versions of these documents, I'd strongly recommend taking another look at the latest versions.
Recent Comments