None

The Oracle Global Product Security team has announced some new changes to Oracle's quarterly Critical Patch Update (CPU) documentation. Organizations face a huge challenge in attempting to prioritize and determine the impact of each CPU, especially...

Oracle has updated the "Integrating Oracle E-Business Suite Release 11i with Oracle Internet Directory and Oracle Single Sign-On" whitepaper from build 3.2 to build 4.0.  This whitepaper is a detailed description of implementing...

Oracle has finally certified the use of Advanced Security Option/Advanced Network Option for encryption of SQL*Net traffic between the database and application servers.  This certification had been promised for several years.The Advanced...

As I have previously discussed (here and here), Oracle is requiring recent ATG rollup patches to be installed as prerequisites for the Critical Patch Updates.  The ATG_PF rollups are generally released every 6 months.  For ATG_PF.H the...

Oracle is now pushing all 11.5.10 implementations even harder in terms of mandating minimum patch levels.  The October 2006 Critical Patch Update (CPU) will require at least ATG_PF.H.RUP3 and ATG_PF.H.RUP4 is recommended.  These patches...

The Federal Information Security Management Act (FISMA) of 2002 requires all government agencies to submit to the Office of Management and Budget an annual evaluation of IT security across the agency.  The overall results of these reports are...

Oracle has updated the Oracle Applications 11i DMZ Configuration document (Metalink Note ID 287176.1).  "Oracle E-Business Suite 11i Configuration in a DMZ" is the definitive reference for implementing Oracle Applications in a DMZ...

There was very little press coverage regarding Oracle security from last week's Black Hat security conference in Las Vegas.  I am a little surprised about the lack of attention in the media regarding Pete Finnigan's presentation on unwrapping...

You may want to warn your CIO and IT Security Manager that some bad press about Oracle security will be coming later this week and next week.  The annual Black Hat conference in Las Vegas is Wednesday and Thursday of this week.  Every year...

There are currently three major un-patched and published Oracle Database security bugs and all three bugs impact the Oracle E-Business Suite. All Oracle Applications 11i implementations should review the possible impact on their installations to...