Information Technology Services

Oracle releases patch update for October

ALARM Group ALERT ¿ click for a description of ALARM, The Computing Alert System
Alert Number: 102005-01
Alert Date: 10/20/05
Alert Title: Oracle releases patch update for October
Update-to: none
OS/Platform/Application:
Oracle Database Server 10g Release 1, versions 10.1.0.3, 10.1.0.4
Oracle9i Database Server Release 2, versions 9.2.0.5, 9.2.0.6, 9.2.0.7
Oracle8i Database Server Release 3, version 8.1.7.4
Oracle Enterprise Manager 10g Grid Control, versions 10.1.0.3, 10.1.0.4
Oracle Application Server 10g Release 2, versions 10.1.2.0.0, 10.1.2.0.1, 10.1.2.0.2
Oracle Application Server 10g Release 1 (9.0.4), versions 9.0.4.1, 9.0.4.2
Oracle Collaboration Suite 10g Release 1, version 10.1.1
Oracle9i Collaboration Suite Release 2, version 9.0.4.2
Oracle E-Business Suite Release 11i, versions 11.5.1 through 11.5.10 and 11.5.10 CU2
Oracle E-Business Suite Release 11.0
Oracle Clinical, versions 4.5.0 and 4.5.1
PeopleSoft Enterprise Tools, versions 8.1 through 8.46.03
PeopleSoft CRM, versions 8.81 through 8.9
JD Edwards EnterpriseOne, OneWorld XE, versions 8.95_B1, 8.94_Q1, SP23_K1
Oracle Database Server 10g Release 1, version 10.1.0.4.2
Oracle Developer Suite, versions 9.0.2.1, 9.0.4.1, 9.0.4.2, 10.1.2.0
Oracle Enterprise Manager Application Server Control, versions 9.0.4.1, 9.0.4.2
Oracle Enterprise Manager 10g Database Control, versions 10.1.0.3, 10.1.0.4
Oracle Workflow, versions 11.5.1 through 11.5.9.5
Oracle9i Database Server Release 1, versions 9.0.1.4, 9.0.1.5, 9.0.1.5 FIPS
Oracle8 Database Server Release 8.0.6, version 8.0.6.3
Oracle9i Application Server Release 2, versions 9.0.2.3, 9.0.3.1
Oracle9i Application Server Release 1, version 1.0.2.2
Category: ALERT
Severity: HIGH
Attention: Oracle, PeopleSoft, and JD Edwards EnterpriseOne system administrators

Summary: On October 18 Oracle released a security patch update. The update is deemed "critical" by the vendor because it addresses number of vulnerabilities.

Recommended Actions: System managers that support the above-listed applications are encouraged to read the bulletin (including all potential caveats) and (if appropriate) apply the patch(es) immediately as per the instructions provided by the vendor.

ITS Actions: The University Applications Development Database Administration Team is currently analyzing the impact of this release and will apply the appropriate components upon completion of analysis.

Resources:
Oracle Critical Patch Update - October 2005:
http://www.oracle.com/technology/deploy/security/pdf/cpuoct2005.html

US-CERT Technical Cyber Security Alert TA05-292A (provides detail of vulnerabilities):
http://www.us-cert.gov/cas/techalerts/TA05-292A.html

Information Technology Services University at Albany, SUNY 1400 Washington Avenue Albany, NY 12222 ITS Service Centers: 518-442-4000	University at Albany Home Page Contact UAlbany \| Directories \| Calendars \| Visitors \| Site Index \| Search Admissions \| Academics \| Research \| IT Services \| Libraries \| Athletics
Internet Privacy Policy IT Policies