The American software publisher Oracle suspends its Patch Day for every three months. Oracle calls it “Critical Patch Updates” (CPU). Aufgrund des umfangreichen Produktfolios sowie de relative langen Update-Turnus fall dabei regelmäßig more hundert zu beseitigende Lücken an. Im Oktober sind 334 Schwachstellen zusammengekommen – etwas weniger als beim letzten Mal im Juli. Insgesamt kommt Oracle in diesem Jahr auf 1550 gestopfte Lücken. Das sindlich weniger als in den beiden Vorjahren.

Etliche der seeitigten Schwachstellen sind als kritisch einzustufen. Angaben dazu, ob Schwachstellen bereits für Angriffe ausgenutzt werden (0-Day-Lücken), macht Oracle nicht. For risk assessment, Oracle industry standard CVSS 3.1 (Common Vulnerability Scoring Standard), dessen höchster Wert 10.0 ist. Microsoft also gives a single Zeit a CVSS-Score for optimal security.

Die Dicksten Brocken

Die mit Abstand meisten Sicherheitslücken hat Oracle, wie schön im April and Juli, in seiner Produktfamilie für die Telekommunikationsbranche (Communications) geschlossen. With 100 chances and 81 without ausnutzbar network comparison you get CVSS score 9.8. Dahinter supports MySQL database server with 37 tracking functions. Yesterday if 12 Lücken ohne Benutzeranmeldung über das Netzwerk ausnutzbar, acht erreichen den CVSS Score 9.1. The new versions of MySQL (MySQL Community Server) are 9.1.0 (“Innovation”), 8.4.3 (LTS – Long Term Support) and 8.0.40.

This is Fusion Middleware with 32 management steps. Davon sind 25 ohne Benutzeranmeldung über das Netzwerk ausnutzbar, 25 erreichen den CVSS-Score 9.8. Products for banking and financial services (financial services) were updated from April 20 to 15 without any network changes. Two of these chances have CVSS score 9.1.

Java updates

In Java SE (Standard Edition), Oracle installs the following information, which is also used by the Netzwerk (CVSS-Höchstwert 7.5). A chance (CVSS 8.1) is offered to you by GraalVM for employees. In September, Oracle Java 23 is available, with the first security update being version 23.0.1. Java 21 from September 2023 is installed in an LTS (long-term support) version. And Java 17 and Java 11 have LTS versions. You will be able to use the latest version of updates. The new media contains versions 21.0.5, 17.0.13 and 11.0.25. When Java 9 brings Java-based solutions yourself, it has made it possible for you to do so. Im Gegensatz zu Java 8 müssen Sie als Anwender die Java-Laufzeitumgebung (JRE) also im Regelfall is not itself installed and activated.

▶New security updates

For applications, Oracle must use Java 8 (JRE – Java Runtime Environment) relevant to and used by Oracle. The new version is Java 8 Update 431 (8u431). Darin hat Oracle sechs Schwachstellen beseitigt. Java 8 will be available for private applications in an optimal time with free and free security updates. Oracle will be available until support ends 18 months prior to purchase. Companies and officials have started working since April 2019 on these updates, which will be available until the end of 2030.

Trick : Stop your software from working properly and make sure your PC is secured with appropriate antivirus software. We found many antivirus solutions in “The best antivirus program 2024 in review: to better understand your Windows PC”. You can browse anonymously by installing a VPN tool.

Updates for Java 11 (LTS) are available in Herbst 2022 for free commercial specifications. ab sofort golden dies also for Java 17 (LTS). Subscribe to updates until January 2032 (Java 11) until September 2029 (Java 17). The next LTS Java 25 release update is scheduled for September 2025. A year later, updates for Java 21 (LTS) took place, also in September 2026. For private tasks and updates , I advise you of all costs.

Virtual Box

The quelloffene VirtualBox virtualization solution is available in the new version 7.1.4. Darin hat Oracle fünf Schwachstellen beseitigt, von denen keine übers Netzwerk ausnutzbar ist. A woman has one or another chance to code the VM on the host system.

The next Oracle CPU-Tag update will occur on January 21, 2025. As of April 2022, this end is scheduled for January, April, July, and October.