Oracle has released Critical Patch Update (CPU) for October 2018 on 16th Oct 2018 with wide-ranging security update.
For Affected Products and Patch Information check here
Now let’s see new security fixes of Oracle Products that comes with CPU October 2018
Oracle E-Business Suite
- 16 new security fixes for the Oracle E-Business Suite. 14 of these vulnerabilities may be remotely exploitable without authentication
- For more details refer to Oracle E-Business Suite Release 12 Critical Patch Update Knowledge Document (October 2018) (Doc ID 2445688.1)
Oracle Database Server
- 7 new security fixes for the Oracle Database Server
- 3 new security fixes for the Oracle Database Server. 2 of these vulnerabilities may be remotely exploitable without authentication
- 1 new security fix for Oracle Big Data Graph. This vulnerability is remotely exploitable without authentication
- 3 new security fixes for Oracle GoldenGate. All of these vulnerabilities may be remotely exploitable without authentication
Oracle Fusion Middleware (Weblogic, SOA, IDM etc)
- 65 new security fixes for Oracle Fusion Middleware (Weblogic, SOA, IDM etc). 56 of these vulnerabilities may be remotely exploitable without authentication.
- For information on what patches need to be applied to your environments, refer to Critical Patch Update (CPU) Program October 2018 Patch Availability Document (PAD) (Doc ID 2433477.1)
Oracle Java SE
- 12 new security fixes for Oracle Java SE. 11 of these vulnerabilities may be remotely exploitable without authentication.
Oracle Enterprise Manager Products Suite
- 4 new security fixes for the Oracle Enterprise Manager Products Suite. 3 of these vulnerabilities may be remotely exploitable without authentication.
Oracle Financial Services Applications
- 2 new security fixes for Oracle Financial Services Applications. Both of these vulnerabilities may be remotely exploitable without authentication
- Check Oracle Fusion Applications Critical Patch Update Knowledge Documents (Doc ID 1967316.1), for information on patches to be applied to Fusion Application environments
Related/Further Readings
- October 2018 Critical Patch Update: Executive Summary and Analysis (Doc ID 2456979.1)
- Oracle Critical Patch Update Advisory – October 2018
- Security Fixing Policies
- Oracle Critical Patch Updates, Security Alerts and Bulletins
- Oracle Critical Patch Updates and Security Alerts – Frequently Asked Questions
- Risk Matrix Definitions
- Use of Common Vulnerability Scoring System (CVSS) by Oracle
- English text version of the risk matrices
- CVRF XML version of the risk matrices
- Map of CVE to Advisory
- Software Error Correction Support Policy
- Oracle Critical Patch Update July 2018: Oracle E-Business Suite Analysis & Impact
- Oracle AppsDBA (R12) Advance: Step By Step Activity Guides
- Oracle AppsDBA (R12) Advance Course
Next task for you
Join FREE Webinar on Get Started With Oracle Apps DBA R12.2 To Stay Ahead In Career & Earn More. Click on the image below to register for FREE.
The post Oracle Critical Patch Update October 2018 Now Available appeared first on Oracle Trainings.