Alert GCSA-17023 - Oracle Critical Patch Update Advisory April (2017)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ****************************************************************** Alert ID : GCSA-17023 Data : 20 Aprile 2017 Titolo : Oracle Critical Patch Update Advisory April (2017) ****************************************************************** :: Descrizione del problema Oracle ha rilasciato la Critical Patch Update April 2017. L'aggiornamento e' una collezione di patch che risolvono difetti di sicurezza e non, presenti in vari prodotti e componenti Oracle. Oracle raccomanda di applicare gli aggiornamenti appena possibile. :: Software interessato Oracle Database Oracle Secure Backup Oracle Berkley DB Oracle API Gateway Oracle Fusion Middleware Oracle GlassFish Server Oracle Identity Manager Oracle Service Bus Oracle Social Network Oracle WebCenter Oracle WebLogic Server Oracle Hyperion Essbase Enterprise Manager Base Platform Oracle E-Business Suite Oracle Transportation Manager PeopleSoft Enterprise JD Edwards EnterpriseOne Tools Siebel Applications Oracle Commerce Guided Search / Oracle Commerce Experience Manager Oracle Fusion Applications Oracle Communications Oracle Financial Services Oracle FLEXCUBE Oracle Insurance Data Foundation Oracle Healthcare Master Person Index Oracle Hospitality OPERA 5 Property Services Oracle Insurance Istream MICROS Oracle Retail Oracle Real-Time Scheduler Oracle Utilities Primavera Oracle Java SE Oracle JRockit Oracle SuperCluster Specific Software Solaris StorageTek Tape Analytics SW Tool Sun ZFS Storage Appliance Kit (AK) Oracle VM VirtualBox Secure Global Desktop MySQL Automatic Service Request (ASR) Oracle Advanced Support Gateway Oracle Trace File Analyzer (TFA) OSS Support Tools :: Impatto L'impatto di queste vulnerabilita' varia a seconda del prodotto, della componente e della configurazione del sistema. :: Soluzioni Applicare le patch appropriate o procedere all'opportuno aggiornamento secondo le istruzioni rilasciate da Oracle (vedere link nei Riferimenti) :: Riferimenti Oracle Critical Patch Update Advisory - April 2017 http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html Oracle Critical Patch Updates, Security Alerts and Third Party Bulletin http://www.oracle.com/technetwork/topics/security/alerts-086861.html SecurityTracker http://www.securitytracker.com/id/1038284 http://www.securitytracker.com/id/1038286 http://www.securitytracker.com/id/1038287 http://www.securitytracker.com/id/1038288 http://www.securitytracker.com/id/1038289 http://www.securitytracker.com/id/1038291 http://www.securitytracker.com/id/1038292 I riferimenti CVE sono disponibili nell'advisory originale. GARR CERT Newsletter subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEARECAAYFAlj4YcAACgkQwZxMk2USYEJE7ACeNJewt4LC1teV+3rcM4E7Fw/i IWMAniO1iDZ8ubtugzvQxjE5caEWLRx0 =uYVU -----END PGP SIGNATURE-----