Firma Oracle wydała kwartalny biuletyn bezpieczeństwa, aktualizacja zawiera poprawki do 254 luk.

CERT PSE zachęca administratorów do zapoznania się z Oracle Critical Patch Update Advisory – April 2018 i zastosowania niezbędnych aktualizacji.

Produkty których dotyczy poprawka to:

Enterprise Manager Base Platform, versions 12.1.0.5, 13.2.0.0 Enterprise Manager
Enterprise Manager for MySQL Database, version 12.1.0.4 Enterprise Manager
Enterprise Manager for Virtualization, version 13.2 Enterprise Manager
Enterprise Manager Ops Center, versions 12.2.2, 12.3.3 Enterprise Manager
Hardware Management Pack, versions prior to 2.4.3 Systems
Instantis EnterpriseTrack, versions 17.1, 17.2 Oracle Construction and Engineering Suite
Integrated Lights Out Manager (ILOM), versions 3.x, 4.x Systems
JD Edwards EnterpriseOne Tools, version 9.2.2 JD Edwards
JD Edwards World Security, versions A9.2, A9.3, A9.4 JD Edwards
Management Pack for Oracle GoldenGate, version 11.2.1.0.13 Fusion Middleware
MICROS Handheld Terminal, versions Prior to Fusion 2.03.0.0.021R MICROS Handheld Terminal
MICROS Lucas, version 2.9.5 Retail Applications
MySQL Cluster, versions 7.2.27 and prior, 7.3.16 and prior, 7.4.14 and prior, 7.5.5 and prior MySQL
MySQL Enterprise Monitor, versions 3.3.7.3306 and prior, 3.4.5.4248 and prior, 4.0.2.5168 and prior MySQL
MySQL Server, versions 5.5.59 and prior, 5.6.39 and prior, 5.7.21 and prior MySQL
Oracle Access Manager, versions 10.1.4.3.0, 11.1.2.3.0, 12.2.1.3.0 Fusion Middleware
Oracle Adaptive Access Manager, version 11.1.2.3.0 Fusion Middleware
Oracle Agile Engineering Data Management, versions 6.1.3, 6.2.0, 6.2.1 Oracle Supply Chain Products
Oracle Agile PLM Framework, version 9.3.6 Oracle Supply Chain Products
Oracle Agile Product Lifecycle Management for Process, versions 6.1.1.6, 6.2.0.0, 6.2.1.0 Oracle Supply Chain Products
Oracle Application Testing Suite, versions 12.5.0.3, 13.1.0.1, 13.2.0.1 Enterprise Manager
Oracle Banking Corporate Lending, versions 12.3.0, 12.4.0, 12.5.0, 14.0.0 Oracle Financial Services Applications
Oracle Banking Enterprise Collections, version 2.6 Oracle Banking Platform
Oracle Banking Enterprise Originations, version 2.6 Oracle Banking Platform
Oracle Banking Enterprise Product Manufacturing, version 2.6 Oracle Banking Platform
Oracle Banking Payments, versions 12.3.0, 12.4.0, 12.5.0, 14.0.0 Oracle Financial Services Applications
Oracle Banking Platform, versions 2.4, 2.5, 2.6 Oracle Banking Platform
Oracle Big Data Discovery, version 1.6.0 Fusion Middleware
Oracle Business Intelligence Data Warehouse Administration Console, version 11.1.1.6.4 Fusion Middleware
Oracle Business Intelligence Enterprise Edition, versions 11.1.1.7.0, 11.1.1.9.0, 12.2.1.2.0, 12.2.1.3.0 Fusion Middleware
Oracle Communications Calendar Server, version 8.x Oracle Communications Calendar Server
Oracle Communications Contacts Server, version 8.x Oracle Communications Contacts Server
Oracle Communications EAGLE LNP Application Processor, versions 10.1.0.0.0 and prior Oracle Communications EAGLE LNP Application Processor
Oracle Communications Messaging Server, version 8.x Oracle Communications Messaging Server
Oracle Communications MetaSolv Solution, version 6.3.0 Oracle Communications MetaSolv Solution
Oracle Communications Network Charging and Control, versions 4.4.1.5.0, 5.0.0.1.0, 5.0.0.2.0, 5.0.1.0.0, 5.0.2.0.0 Oracle Communications Network Charging and Control
Oracle Communications Network Intelligence, version 7.3.x Oracle Communications Network Intelligence
Oracle Communications Order and Service Management, versions 7.2.4.3.0, 7.3.0.1.x, 7.3.1.0.7, 7.3.5.0.x Oracle Communications Order and Service Management
Oracle Communications Unified Inventory Management, version 7.x Oracle Communications Unified Inventory Management
Oracle Data Visualization Desktop, version 12.2.4.1.1 Fusion Middleware
Oracle Database Server, versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18.1.0.0 Database
Oracle E-Business Suite, versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 E-Business Suite
Oracle Endeca Information Discovery Integrator, versions 3.1, 3.2 Fusion Middleware
Oracle Endeca Information Discovery Studio, versions 7.6.1.0.0, 7.7.0.0.0 Fusion Middleware
Oracle Endeca Server, version 7.7 Fusion Middleware
Oracle Enterprise Repository, versions 11.1.1.7.0, 12.1.3.0.0 Fusion Middleware
Oracle Financial Services Analytical Applications Infrastructure, versions 7.3.x, 8.0.x Oracle Financial Services Analytical Applications Infrastructure
Oracle Financial Services Basel Regulatory Capital Basic, version 8.0.x Oracle Financial Services Basel Regulatory Capital Basic
Oracle Financial Services Basel Regulatory Capital Internal Ratings Based Approach, version 8.0.x Oracle Financial Services Basel Regulatory Capital Internal Ratings Based Approach
Oracle Financial Services Hedge Management and IFRS Valuations, versions 8.0.4, 8.0.5 Oracle Financial Services Hedge Management and IFRS Valuations
Oracle Financial Services Market Risk Measurement and Management, version 8.0.5 Oracle Financial Services Market Risk Measurement and Management
Oracle FLEXCUBE Core Banking, versions 11.5.0, 11.6.0, 11.7.0 Oracle Financial Services Applications
Oracle FLEXCUBE Enterprise Limits and Collateral Management, versions 12.3.0, 14.0.0 Oracle Financial Services Applications
Oracle FLEXCUBE Investor Servicing, versions 12.0.4, 12.1.0, 12.3.0, 12.4.0 Oracle Financial Services Applications
Oracle FLEXCUBE Private Banking, versions 12.0.0, 12.1.0 Oracle Financial Services Applications
Oracle FLEXCUBE Universal Banking, versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 Oracle Financial Services Applications
Oracle Fusion Applications , versions 11.1.2 through 11.1.9 Fusion Applications
Oracle Fusion Middleware, versions 11.1.1.7, 11.1.1.9, 11.1.2.3, 12.1.3.0, 12.2.1.2, 12.2.1.3 Fusion Middleware
Oracle Fusion Middleware MapViewer, versions 11.1.1.7.0, 11.1.1.9.0 Fusion Middleware
Oracle GoldenGate, version 12.2.0.1 Oracle GoldenGate
Oracle GoldenGate Veridata, versions 11.2.0.1.2, 12.1.3.0.0 Fusion Middleware
Oracle Hospitality Cruise Fleet Management System, version 9.x Oracle Hospitality Cruise Fleet Management
Oracle Hospitality Guest Access, versions 4.2.0, 4.2.1 Oracle Hospitality Guest Access
Oracle Hospitality Reporting and Analytics, version 9.0 Oracle Hospitality Reporting and Analytics
Oracle Hospitality Simphony, versions 2.7, 2.8, 2.9, 2.10 Oracle Hospitality Simphony
Oracle Hospitality Simphony First Edition, versions 1.6, 1.7 Oracle Hospitality Simphony First Edition
Oracle Hospitality Suite8, version 8.x Oracle Hospitality Suite8
Oracle HTTP Server, versions 12.1.3, 12.2.1.2 Fusion Middleware
Oracle Java SE, versions 6u181, 7u161, 7u171, 8u152, 8u162, 10 Java SE
Oracle Java SE Embedded, versions 8u152, 8u161 Java SE
Oracle JRockit, version R28.3.17 Java SE
Oracle Managed File Transfer, versions 12.1.3.0.0, 12.2.1.2.0, 12.2.1.3.0 Fusion Middleware
Oracle Mobile Security Suite, version 3.0.1 Fusion Middleware
Oracle Outside In Technology, version 8.5.3 Fusion Middleware
Oracle Retail Advanced Inventory Planning, versions 13.2, 13.4, 14.1, 15.0 Retail Applications
Oracle Retail Back Office, versions 13.4.9, 14.0.4, 14.1.3 Retail Applications
Oracle Retail Central Office, versions 13.4.9, 14.0.4, 14.1.3 Retail Applications
Oracle Retail Customer Engagement, version 16.0 Retail Applications
Oracle Retail EFTLink, versions 1.1.125, 15.0.2, 16.0.3 Retail Applications
Oracle Retail Insights, versions 14.0, 14.1, 15.0, 16.0 Retail Applications
Oracle Retail Integration Bus, version 13.2 Retail Applications
Oracle Retail Invoice Matching, versions 12.0, 13.0, 13.1, 13.2, 14.0, 14.1, 15.0, 16.0 Retail Applications
Oracle Retail Merchandising System, version 16.0 Retail Applications
Oracle Retail Order Broker, versions 5.0, 5.1, 5.2, 15.0, 16.0 Retail Applications
Oracle Retail Order Management System, versions 4.0, 4.5, 4.7, 5.0 Retail Applications
Oracle Retail Point-of-Service, versions 13.3.8, 13.4.9, 14.0.4, 14.1.3 Retail Applications
Oracle Retail Predictive Application Server, versions 13.4.3, 14.0.3, 14.1.3 Retail Applications
Oracle Retail Price Management, versions 12.0, 13.0, 13.1, 13.2, 14.0, 14.1, 15.0, 16.0 Retail Applications
Oracle Retail Returns Management, versions 2.3.8, 2.4.9, 14.0.4, 14.1.3 Retail Applications
Oracle Retail Store Inventory Management, versions 12.0.12, 13.0.7, 13.1.9, 13.2.9, 14.0.4, 14.1.3, 15.0.2, 16.0.1 Retail Applications
Oracle Retail Xstore Point of Service, versions 6.0, 6.0.12, 6.5, 6.5.12, 7.0, 7.0.7, 7.1, 7.1.7, 15.0, 15.0.2, 16.0, 16.0.3 Retail Applications
Oracle Secure Global Desktop (SGD), version 5.3 Virtualization
Oracle Security Service, versions 12.1.3.0.0, 12.2.1.2.0 Fusion Middleware
Oracle Transportation Management, versions 6.2, 6.4.3 Oracle Supply Chain Products
Oracle Tuxedo, version 12.1.1.0.0 Fusion Middleware
Oracle Utilities Framework, versions 2.2.0, 4.2.0, 4.3.0 Oracle Utilities Applications
Oracle VM VirtualBox, versions prior to 5.1.36, prior to 5.2.10 Virtualization
Oracle WebCenter Content, versions 11.1.1.9.0, 12.2.1.2.0, 12.2.1.3.0 Fusion Middleware
Oracle WebCenter Portal, versions 12.2.1.2.0, 12.2.1.3.0 Fusion Middleware
Oracle WebCenter Sites, versions 11.1.1.8.0, 12.2.1.2.0, 12.2.1.3.0 Fusion Middleware
Oracle WebLogic Portal, version 10.3.6.0.0 Fusion Middleware
Oracle WebLogic Server, versions 10.3.6.0, 12.1.3.0, 12.2.1.2, 12.2.1.3 Fusion Middleware
OSS Support Tools, versions prior to 18.2 Support Tools
PeopleSoft Enterprise HCM, version 9.2 PeopleSoft
PeopleSoft Enterprise HCM Shared Components, version 9.2 PeopleSoft
PeopleSoft Enterprise PeopleTools, versions 8.54, 8.55, 8.56 PeopleSoft
PeopleSoft Enterprise PRTL Interaction Hub, version 9.1 PeopleSoft
PeopleSoft Enterprise PT PeopleTools, versions 8.54, 8.55, 8.56 PeopleSoft
Primavera P6 Enterprise Project Portfolio Management, versions 16.2, 17.1 – 17.12 Oracle Construction and Engineering Suite
Primavera Unifier, versions 16.x, 17.x Oracle Construction and Engineering Suite
Real-Time Decisions (RTD) Solutions, version 3.2.0.0.0 Fusion Middleware
Siebel Applications, version 17.0 Siebel
Solaris, versions 10, 11.3 Systems
Solaris Cluster, version 4.3 Systems
Sun ZFS Storage Appliance Kit (AK), versions prior to 8.7.17 Systems