Tuesday, November 15, 2005

October 2005 CPU

Pete Finningan pointed out a post on Bugtraq that documents some problems with the recently released Oct 2005 CPU patch. I was quite concerned when I saw Pete's entry as we have yet to apply the patch and if it causes problems, then we will have to hold off.

A further look into the Bugtraq posting shows that one of the problem identified was the unfixing of an old vulnerbility but that is only applicable to Oracle 8.1.7.4 as per the post, "the October 2005 CPU fails to install the
patched Oracle Text (CTXSYS) components on Oracle 8.1.7.4 on all operating
systems."
. On top of that, it's a simple fix as the "flaw" as in the execution of an incorrect procedure. You can review the details here.

No comments: