Skip to content

Oracle's January 2015 Security Update: Record-Breaking 169 Entries, Critical Vulnerabilities Patched

Oracle's massive January 2015 security update addresses 169 vulnerabilities, including critical bugs in Java and Sun Solaris. System administrators must prioritize patching to protect their systems.

On the left side this is a sun, this is water, on the right side two ships are moving in this...
On the left side this is a sun, this is water, on the right side two ships are moving in this water.

Oracle's January 2015 Security Update: Record-Breaking 169 Entries, Critical Vulnerabilities Patched

Oracle's January 2015 security update list is record-breaking, with 169 entries affecting 48 different product types. The update addresses critical vulnerabilities in various Oracle products, including Sun Solaris, MySQL, Oracle RDBMS, and Java.

Sun Solaris is patched with 29 fixes, 10 of which are remotely exploitable and have the highest CVSS score of 10. Meanwhile, MySQL has nine vulnerabilities, three of which can be exploited remotely, with a highest CVSS value of 7.5. Oracle RDBMS, on the other hand, has nine vulnerabilities requiring an authenticated user, with a CVSS score up to 9.

Oracle's large patch surface requires careful management. Technical owners of affected systems were previously identified to handle social security impacts effectively. Oracle publishes security updates every three months, with a second edition on Patch Tuesday.

Java is patched with 19 vulnerabilities, 13 of which are remotely exploitable and have the highest CVSS score of 10. Two new 0-days were discovered, which can be used to escalate privileges when paired with another vulnerability. Google has auto-published these Windows bug reports after the 90-day embargo limit.

Oracle's January 2015 security update is extensive, addressing numerous critical vulnerabilities. Microsoft is expected to address these 0-days in February's Patch Tuesday. System administrators are advised to manage the security impacts effectively by staying updated and following Oracle's patching schedule.

Read also:

Latest