Oracle releases delayed Windows database patch

Oracle releases delayed Windows database patch

The Critical Patch Update released earlier this week failed to fix the flaw in Oracle Database Server for Windows, which this patch fixes

Oracle probably worried some DBAs last week when it released its Critical Patch Update, but neglected its most critical database flaw of the quarter for users on the Windows platform. At the time, Oracle said this fix would come on April 30, but now it looks like Oracle has found a way to get the patch out.

Oracle's Eric Maurice made the announcement on Friday afternoon.

It now turns out that security researcher David Litchfield first discussed this flaw in November 2005. After Oracle released its Critical Patch Update last week, he published this research note, discussing this and a few other flaws that were patched this month.

Litchfield, managing director of Next Generation Security Software, says he first reported the bug to Oracle in 2002.

Follow Us

Join the newsletter!


Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.


Show Comments