Moments like this I’m glad that I’m not a database admin. Oracle has released patches that tackle 52 vulnerabilities. From Oracle site:
Description
This Critical Patch Update Pre-Release Announcement provides advance information about the Oracle Critical Patch Update for January 2007 which will be released on Tuesday, 16 January 2007. While this Pre-Release Announcement is as accurate as possible at the time of publication, the information it contains may change before publication of the Critical Patch Update advisory.
A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required (because of interdependencies) by those security patches. This Critical Patch Update contains 52 new security fixes across all products. Some of the vulnerabilities addressed in this Critical Patch Update affect multiple products.
The highest CVSS base score of vulnerabilities across all products is 7.0.
[tags]Oracle, Database Security, Oracle Patches[/tags]