Oracle Repairs Flaws In Java, Sun Software With 85-Fix Patch

Oracle (NSDQ:ORCL) issued 85 fixes in a massive Critical Patch Update, repairing a slew of vulnerabilities in both its Sun and Java product lines, many of which could enable malicious hackers to launch remote code execution attacks on users' systems.

Thirty-one of the 85 fixes were for Oracle's newly acquired Sun products, which included OpenSolaris, Open Office, Sun Convergence, Sun Directory Server and Enterprise Edition. Of the Sun patches, 16 repaired vulnerabilities that could be exploited remotely by hackers, while some of the most critical vulnerabilities fixed by the patch affected OpenOffice, Solaris and OpenSolaris.

Specifically, the CPU included five new fixes for OpenOffice, repairing serious vulnerabilities that received at least a 9.3 on Oracle's Common Vulnerability Scoring System, which indicate that the flaws could be exploited by a user with root or administrator privileges. Oracle executives maintained that the size of the October patch reflected the inclusion of the Sun products.