Security News > 2020 > April > Oracle Tackles a Massive 405 Bugs for Its April Quarterly Patch Update

Oracle admins are staring down the barrel of a massive quarterly Critical Patch Update that includes 405 patches.

Impacted with multiple critical flaws, rated 9.8 CVSS in severity, are 13 key Oracle products including Oracle Financial Services Applications, Oracle MySQL, Oracle Retail Applications and Oracle Support Tools, according to the company's April Critical Patch Update Pre-Release Announcement, posted Monday.

Each of the bugs will be addressed with mitigation advice or patches by Oracle on Tuesday, coinciding with Microsoft's April's Patch Tuesday release of fixes.

Forty-five bugs in Oracle MySQL were identified, nine being remotely exploitable with a CVSS rating of 9.8.

As with many other Oracle products impacted by flaws this quarter, Oracle said none of the Database Server bugs "Are applicable to client-only installations, i.e., installations that do not have the Oracle Database Server installed."

News URL

https://threatpost.com/oracle-tackles-405-bugs-for-april-quarterly-patch-update/154737/