Oracle Patch Task A Bit Heftier This Time Around
That even beats out Microsoft's latest record-setting patch list for 49 security issues. Oracle, in an advisory note, says 31 fixes are needed for its Oracle Sun Products Suite and that 16 flaws would allow hackers remote code execution on an infected machine without needing a password or user authentication name. There are 33 fixes to Oracle applications. The Oracle Database Server has seven vulnerabilities, and Oracle Fusion Middleware is getting 8 patches. While Oracle's doing exactly what it needs to with deploying fixes, that doesn't mean databases will be any more secure. A new survey reveals patch management is not easy for Oracle DBAs, as 37% say it can take one to three months to get the patch in place. Obviously there is some security work to be done when running an Oracle database, just like with any other database solution and IT leaders need to get a strong grip on this given the legal and compliance ramifications of a data breach incident. The survey by the Independent Oracle Group also reports that less than 30% of DBAs are encrypting identifiable data and that 75% can't stop authorized users from accessing data tied to business applications. That's not a good sign given that security reports often cite internal users as the biggest potential security threat. On top of that there is little security tied to DBA database access as nearly 75% report no technology to track, monitor or review DBA activity. |
