Oracle Plugs 122 Security Holes

Aditi.Tuteja writes "Oracle has released a 'critical patch update' that plugs 122 security vulnerabilities across the company's databases, enterprise applications, developer tools and middleware. Oracle has also started providing additional information indicating whether a flaw can be exploited by remote attackers without any authentication credentials. But, Oracle has failed to deliver its patches on all platforms. Patches for Oracle databases 9.2.0.6 and 10.1.0.5 will not be available until the end of this month. Users running Oracle 10.2.0.1 on Linux on Power servers will also have to wait until the end of October, as will users running Oracle 10.2.0.2 on Windows."

Comments

This has to make OSS look good

[ben there...]

So for every month of the past year, it's safe to assume that Oracle had between 50-100 open vulnerabilities.

Rhetorical question: How many did PostgreSQL or MySQL have open during any of those months?