Oracle Releases 78 Patches, Some for Self-Imposed Security Holes

Strangely enough, many of the patches released on quarterly Patch Tuesday cure vulnerabilities that Oracle itself created with its own faulty security products, a database security analyst told eWEEK.

In its quarterly Patch Tuesday update on July 19, Oracle released a total of 78 security patches that encompass nearly every type of product in its portfolio.

Strangely enough, many of the patches cure vulnerabilities that Oracle itself created with its own faulty security products, a database security analyst told eWEEK. Oracle fixed 13 problems in its flagship database in the next Critical Patch Update, the company said in its CPU pre-release announcement July 14. Of the fixed issues, Oracle classified 27 vulnerabilities as critical or issues that may be exploited remotely without requiring a user name or password.