Lucene search

K
oracleOracleORACLE:CPUOCT2014-1972960
HistoryOct 14, 2014 - 12:00 a.m.

Oracle Critical Patch Update - October 2014

2014-10-1400:00:00
www.oracle.com
665
oracle
critical patch update
security vulnerabilities
cumulative patches
security fixes
malicious exploitation
active support
cve-2014-7169
gnu bash
cvrf
xml format
security advisory

EPSS

0.974

Percentile

99.9%

A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are usually cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update advisories should be reviewed for information regarding earlier published security fixes. Please refer to:

Critical Patch Updates and Security Alerts for information about Oracle Security Advisories.

Oracle has received specific reports of malicious exploitation of vulnerabilities for which Oracle has already released fixes. In some instances, it has been reported that malicious attackers have been successful because customers had failed to apply these Oracle patches. Oracle therefore strongly recommends that customers remain on actively-supported versions and apply Critical Patch Update fixes without delay.

Oracle acknowledges Dana Taylor of netinfiltration.com for bringing to Oracle’s attention a number of sites that were vulnerable to disclosure of sensitive information because Oracle CPU fixes were not applied to those sites for more than a year.

This Critical Patch Update contains 154 new security fixes across the product families listed below. Please note that a blog entry summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at <https://blogs.oracle.com/security&gt;.

Please note that on September 26, 2014, Oracle released a Security Alert for CVE-2014-7169 “Bash” and other publicly disclosed vulnerabilities affecting GNU Bash. Customers of affected Oracle products are strongly advised to apply the fixes that were announced in the Security Alert for CVE-2014-7169.

This Critical Patch Update advisory is also available in an XML format that conforms to the Common Vulnerability Reporting Format (CVRF) version 1.1. More information about Oracle’s use of CVRF is available at: <http://www.oracle.com/technetwork/topics/security/cpufaq-098434.html#CVRF&gt;.

Affected configurations

Vulners
Node
oracleprimavera_p6_enterprise_project_portfolio_managementRange8.3
OR
oracleprimavera_p6_enterprise_project_portfolio_managementRange7.0
OR
oracletransportation_managementRange6.3.5
OR
-java_vmRange11.2.0.4
OR
-java_vmRange12.1.0.2
OR
-jdbcRange11.2.0.4
OR
-jdbcRange12.1.0.1
OR
oracleidentity_managerRange11.1.2.2
OR
oracleendeca_information_discovery_studioRange2.4
OR
oracleendeca_information_discovery_studioRange3.1
OR
oracleretail_clearance_optimization_engineRange13.4
OR
oracleretail_clearance_optimization_engineRange14.0
OR
oraclepeoplesoft_enterprise_pt_peopletoolsRange8.54
OR
oraclevm_virtualboxRange4.3.14
OR
oraclesecure_global_desktopRange4.71
OR
oraclesecure_global_desktopRange5.1
OR
oracleaccess_managerRange11.1.2.2
OR
oracleapplications_frameworkRange11.5.10.2
OR
oracleapplications_frameworkRange12.2.4
OR
sunjava_seRange8u20
OR
sunjava_seRange5.0u71
OR
sunjava_seRange6u81
OR
sunjava_seRange7u67
OR
oraclejd_edwards_enterpriseone_toolsRange8.98
OR
-sqljRange11.2.0.4
OR
-sqljRange12.1.0.2
OR
oraclehealth_sciences_empirica_inspectionsRange1.0.1.0
OR
oracleretail_allocationRange10.0
OR
oracleretail_allocationRange11.0
OR
oracleretail_allocationRange12.0
OR
oracleretail_allocationRange13.2
OR
oraclehealth_sciences_empirica_inspectionsRange3.1.2.0
OR
oraclepaymentsRange12.2.4
OR
oracleweblogic_serverRange10.3.6.0
OR
oracleweblogic_serverRange12.1.3.0
OR
oracleapplications_managerRange12.2.4
OR
oraclejdeveloperRange10.1.3.5
OR
oraclejdeveloperRange11.1.2.4
OR
oraclejdeveloperRange12.1.3.0
OR
oracleapplication_expressRange4.2.6
OR
oraclepeoplesoft_enterprise_peopletoolsRange8.54
OR
oraclecore_rdbmsRange11.2.0.4
OR
oraclecore_rdbmsRange12.1.0.1
OR
sunjava_seRange8u20
OR
sunjava_seRange2.2.65
OR
oracleenterprise_data_qualityRange8.1.2
OR
oracleenterprise_data_qualityRange9.0.11
OR
oracleenterprise_manager_for_oracle_databaseRange10.2.0.5
OR
oracleenterprise_manager_for_oracle_databaseRange11.2.0.4
OR
oracleenterprise_manager_for_oracle_databaseRange12.1.0.6
OR
oracleoracle_applications_technology_stack_componentRange11.5.10.2
OR
oracleoracle_applications_technology_stack_componentRange12.1.3
OR
oracleprimavera_contract_managementRange13.1
OR
oracleprimavera_contract_managementRange14.0
OR
oracleretail_invoice_matchingRange11.0
OR
oracleretail_invoice_matchingRange12.1
OR
oracleretail_invoice_matchingRange13.2
OR
oracleretail_invoice_matchingRange14.0
OR
-jpublisherRange11.2.0.4
OR
-jpublisherRange12.1.0.2
OR
peoplesofthrmsRange9.2
OR
oracleoracle_applications_technology_stack_componentRange12.2.4
OR
sunjava_seRange5.0u71
OR
sunjava_seRange6u81
OR
sunjava_seRange7u67
OR
sunjava_seRange8u20
OR
sunjava_seRange27.8.3
OR
sunjava_seRange28.3.3
OR
oraclecommunications_metasolv_solutionRange9.4.0
OR
oraclecommunications_metasolv_solutionRange10.1.0
OR
oraclecommunications_metasolv_solutionRange6.2.1.0.0
OR
oraclecommunications_metasolv_solutionRange49.0.0
OR
oracleadaptive_access_managerRange11.1.2.2
OR
-solarisRange10
OR
-solarisRange11
OR
oracleretail_markdown_optimizationRange12.0
OR
oracleretail_markdown_optimizationRange13.4
OR
mysqlmysql_serverRange5.6.20
OR
oracleapplication_performance_managementRange12.1.0.6.2
OR
oracleopenssoRange3.0
OR
sunjava_seRange8u20
OR
sunjava_seRange5.0u71
OR
sunjava_seRange6u81
OR
sunjava_seRange7u67
OR
oracleagile_plmRange9.3.3
OR
oracleapplication_object_libraryRange11.5.10.2
OR
oraclecommunications_session_border_controllerRange640m5
OR
fujitsum10-4s_firmwareRange2221
OR
oraclehealth_sciences_empirica_signalRange7.3.3.3
VendorProductVersionCPE
oracleprimavera_p6_enterprise_project_portfolio_management*cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:*
oracletransportation_management*cpe:2.3:a:oracle:transportation_management:*:*:*:*:*:*:*:*
-java_vm*cpe:2.3:a:-:java_vm:*:*:*:*:*:*:*:*
-jdbc*cpe:2.3:a:-:jdbc:*:*:*:*:*:*:*:*
oracleidentity_manager*cpe:2.3:a:oracle:identity_manager:*:*:*:*:*:*:*:*
oracleendeca_information_discovery_studio*cpe:2.3:a:oracle:endeca_information_discovery_studio:*:*:*:*:*:*:*:*
oracleretail_clearance_optimization_engine*cpe:2.3:a:oracle:retail_clearance_optimization_engine:*:*:*:*:*:*:*:*
oraclepeoplesoft_enterprise_pt_peopletools*cpe:2.3:a:oracle:peoplesoft_enterprise_pt_peopletools:*:*:*:*:*:*:*:*
oraclevm_virtualbox*cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*
oraclesecure_global_desktop*cpe:2.3:a:oracle:secure_global_desktop:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 431