Security threats Toolkit

Oracle to release 37 security patches

Joris Evers CNET News

Published: 11 Apr 2007 09:32 BST

Oracle next week plans to release fixes for 37 security flaws across all its products, the company said on Tuesday.

The fixes will be delivered on 17 April as part of Oracle's quarterly patch cycle. Seven of the bugs are serious and could allow a system running the vulnerable Oracle software to be compromised remotely, the company said in a note on its website.

This is the second time Oracle has given advance notification about patches. The first such advance notice was in January. Microsoft has been giving customers a similar early warning since late 2004. Both companies have put their patches on a schedule so customers know when to expect them. The early warning is meant to allow for extra preparedness.

Oracle's advance notification goes further than Microsoft's, which only states the product family for which patches will be released and gives a broad indication of bug severity. Oracle also lists the number of vulnerabilities it plans to patch and gives details of which products and components will get fixes.

Oracle's "Critical Patch Update" is planned to include 13 fixes for Oracle database products, five for Application Server, 11 for E-Business Suite, and four for PeopleSoft and JD Edwards products, according to Oracle's note.

In January, Oracle released fixes for 51 vulnerabilities.