Actualizaciones en productos de Oracle
La compañia americana ha publicado en su boletín de octubre actualizaciones en varios de sus productos.
Riesgo: Alto
Esta actualización de parches crítica contiene actualizaciones para 252 vulnerabilidades detectadas en diferentes productos de la marca desde el gestor de base de datos Oracle Database, Java, MySQL, Solaris y Virtualbox, entre otros.
También en el ambito hardware, se han publicado actualizaciones que solucionan vulnerabilidades detectadas en los servidores de la serie M y SPARC.
Más información.
Sistemas Afectados:
- Fujitsu M10-1, M10-4, M10-4S, M12-1, M12-2, M12-2S Servers, versiones anteriores a XCP2340 y anterior a XCP3030
- Java Advanced Management Console, version 2.7
- JD Edwards EnterpriseOne Tools, version 9.2
- JD Edwards World Security, versiones A9.1, A9.2, A9.3, A9.4
- Management Pack for Oracle GoldenGate, version 11.2.1.0.12
- MICROS Retail XBRi Loss Prevention, versiones 10.0.1, 10.5.0, 10.6.0, 10.7.7, 10.8.0, 10.8.1
- MySQL Connectors, versiones 6.9.9 and prior
- MySQL Enterprise Monitor, versiones 3.2.8.2223 and prior, 3.3.4.3247 and prior, 3.4.2.4181 and prior
- MySQL Server, versiones 5.5.57 and prior, 5.6.37 and prior, 5.7.19 and prior
- Oracle Access Manager, version 11.1.2.3.0
- Oracle Agile Engineering Data Management, versiones 6.1.3, 6.2.0
- Oracle Agile PLM, versiones 9.3.5, 9.3.6
- Oracle API Gateway, version 11.1.2.4.0
- Oracle BI Publisher, versiones 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0, 12.2.1.2.0
- Oracle Business Intelligence Enterprise Edition, versiones 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0, 12.2.1.2.0
- Oracle Business Process Management Suite, versiones 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0
- Oracle Communications Billing and Revenue Management, version 7.5
- Oracle Communications Diameter Signaling Router (DSR), version 7.x
- Oracle Communications EAGLE LNP Application Processor, version 10.x
- Oracle Communications Messaging Server, version 8.x
- Oracle Communications Order and Service Management, versiones 7.2.4.x.x, 7.3.0.x.x, 7.3.1.x.x, 7.3.5.x.x
- Oracle Communications Policy Management, versiones 11.5, 12.x
- Oracle Communications Services Gatekeeper, versiones 5.1, 6.0
- Oracle Communications Unified Session Manager, version SCz 7.x
- Oracle Communications User Data Repository, version 10.x
- Oracle Communications WebRTC Session Controller, versiones 7.0, 7.1, 7.2
- Oracle Database Server, versiones 11.2.0.4, 12.1.0.2, 12.2.0.1
- Oracle Directory Server Enterprise Edition, version 11.1.1.7.0
- Oracle E-Business Suite, versiones 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7
- Oracle Endeca Information Discovery Integrator, versiones 2.4, 3.0, 3.1, 3.2
- Oracle Engineering Data Management, versiones 6.1.3.0, 6.2.2.0
- Oracle Enterprise Manager Ops Center, versiones 12.2.2, 12.3.2
- Oracle FLEXCUBE Universal Banking, versiones 11.3, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0
- Oracle Fusion Applications, versiones 11.1.2 through 11.1.9
- Oracle Fusion Middleware, versiones 11.1.1.7, 11.1.1.9, 11.1.2.2, 11.1.2.3, 12.1.3.0, 12.2.1.1, 12.2.1.2, 12.2.1.3
- Oracle GlassFish Server, versiones 3.0.1, 3.1.2
- Oracle Healthcare Master Person Index, version 4.x
- Oracle Hospitality Cruise AffairWhere, versiones 2.2.5.0, 2.2.6.0, 2.2.7.0
- Oracle Hospitality Cruise Fleet Management, version 9.0.2.0
- Oracle Hospitality Cruise Materials Management, version 7.30.564.0
- Oracle Hospitality Cruise Shipboard Property Management System, version 8.0.2.0
- Oracle Hospitality Guest Access, versiones 4.2.0, 4.2.1
- Oracle Hospitality Hotel Mobile, version 1.1
- Oracle Hospitality OPERA 5 Property Services, versiones 5.4.2.x through 5.5.1.x
- Oracle Hospitality Reporting and Analytics, versiones 8.5.1, 9.0.0
- Oracle Hospitality Simphony, versiones 2.6, 2.7, 2.8, 2.9
- Oracle Hospitality Suite8, versiones 8.10.1, 8.10.2
- Oracle HTTP Server, versiones 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0
- Oracle Hyperion BI+, version 11.1.2.4
- Oracle Hyperion Financial Reporting, version 11.1.2
- Oracle Identity Manager, version 11.1.2.3.0
- Oracle Identity Manager Connector, version 9.1.1.5.0
- Oracle Integrated Lights Out Manager (ILOM), versiones anteriores a 3.2.6
- Oracle iPlanet Web Server, version 7.0
- Oracle Java SE, versiones 6u161, 7u151, 8u144, 9
- Oracle Java SE Embedded, version 8u144
- Oracle JDeveloper, versiones 12.1.3.0.0, 12.2.1.2.0
- Oracle JRockit, version R28.3.15
- Oracle Managed File Transfer, versiones 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0
- Oracle Outside In Technology, version 8.5.3.0
- Oracle Retail Back Office, versiones 13.2, 13.3, 13.4, 14.0, 14.1
- Oracle Retail Clearance Optimization Engine, version 13.4
- Oracle Retail Convenience and Fuel POS Software, version 2.1.132
- Oracle Retail Markdown Optimization, versiones 13.4, 14.0
- Oracle Retail Point-of-Service, versiones 6.0.x, 6.5.x, 7.0.x, 7.1.x, 15.0.x, 16.0.0
- Oracle Retail Store Inventory Management, versiones 13.2.9, 14.0.4, 14.1.3, 15.0.1, 16.0.1
- Oracle Retail Xstore Point of Service, versiones 6.0.11, 6.5.11, 7.0.6, 7.1.6, 15.0.1
- Oracle Secure Global Desktop (SGD), version 5.3
- Oracle SOA Suite, version 11.1.1.7.0
- Oracle Transportation Management, versiones 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.4.1, 6.4.2
- Oracle Virtual Directory, versiones 11.1.1.7.0, 11.1.1.9.0
- Oracle VM Virtualbox, versiones anteriores a 5.1.30
- Oracle WebCenter Content, versiones 11.1.1.9.0, 12.2.1.1.0, 12.2.1.2.0
- Oracle WebCenter Sites, versiones 11.1.1.8.0, 12.2.1.2.0
- Oracle WebLogic Server, versiones 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0
- PeopleSoft Enterprise FSCM, version 9.2
- PeopleSoft Enterprise HCM, version 9.2
- PeopleSoft Enterprise PeopleTools, versiones 8.54, 8.55, 8.56
- PeopleSoft Enterprise PRTL Interaction Hub, version 9.1.00
- PeopleSoft Enterprise PT PeopleTools, versiones 8.54, 8.55, 8.56
- PeopleSoft Enterprise SCM eProcurement, versiones 9.1.00, 9.2.00
- Primavera Unifier, versiones 9.13, 9.14, 10.x, 15.x, 16.x
- Siebel Applications, versiones 16.0, 17.0
- Solaris Cluster, versiones 3.3, 4.3
- SPARC Enterprise M3000, M4000, M5000, M8000, M9000 Servers, versiones anteriores a XCP 1123
- SPARC M7, T7, S7 based Servers, versiones anteriores a 9.7.6.b
- Sun ZFS Storage Appliance Kit (AK), version AK 2013
- Tekelec HLR Router, version 4.x
Referencias: CVE-2017-10026, CVE-2017-10033, CVE-2017-10034, CVE-2017-10051, CVE-2017-10055, CVE-2017-10060, CVE-2017-10066, CVE-2017-10152, CVE-2017-10154, CVE-2017-10159, CVE-2017-10163, CVE-2017-10259, CVE-2017-10261, CVE-2017-10268, CVE-2017-10271, CVE-2017-10281, CVE-2017-10292, CVE-2017-10293, CVE-2017-10295, CVE-2017-10304, CVE-2017-10306, CVE-2017-10309, CVE-2017-10310, CVE-2017-10312, CVE-2017-10321, CVE-2017-10322, CVE-2017-10323, CVE-2017-10324, CVE-2017-10325, CVE-2017-10326, CVE-2017-10328, CVE-2017-10329, CVE-2017-10330, CVE-2017-10331, CVE-2017-10332, CVE-2017-10336, CVE-2017-10345, CVE-2017-10347, CVE-2017-10352, CVE-2017-10355, CVE-2017-10356, CVE-2017-10358, CVE-2017-10359, CVE-2017-10360, CVE-2017-10362, CVE-2017-10363, CVE-2017-10364, CVE-2017-10366, CVE-2017-10369, CVE-2017-10373, CVE-2017-10379, CVE-2017-10385, CVE-2017-10388, CVE-2017-10391, CVE-2017-10392, CVE-2017-10393, CVE-2017-10400, CVE-2017-10407, CVE-2017-10408, CVE-2017-10409, CVE-2017-10410, CVE-2017-10411, CVE-2017-10412, CVE-2017-10413, CVE-2017-10414, CVE-2017-10415, CVE-2017-10416, CVE-2017-10417, CVE-2017-10428, CVE-2017-3444, CVE-2017-3445, CVE-2017-3446
Solución:Aplicar las actualizaciones correspondientes a cada producto. (ver notas)
Notas:
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html