Items tagged with NASDAQ: ORCL
You have to give a little credit to Google; just a couple of days after Bitcoin announced that it found vulnerabilities with Android wallets, the Android dev team figured out the root cause of the problem and issued patches to developers. (Google credited Soo Hyeon Kim and Daewan Han of ETRI and Dong Hoon Lee of Korea University for the heads-up.) “We have now determined that applications which use the Java Cryptography Architecture (JCA) for key generation, signing, or random number generation may not receive cryptographically strong values on Android devices due to improper initialization of the underlying PRNG,” wrote Android Security Engineer Alex Klyubin in a blog post. “Applications...
Read more...
Microsoft and Oracle are teaming up in an official capacity to enable customers to run Oracle software on Windows Server Hyper-V and in Windows Azure, the two companies announced this week. As a result of the partnership, customers will be able to deploy Oracle software such as Java, Oracle Database, and Oracle WebLogic Server on the aforementioned Windows products and receive full support from Oracle. "Microsoft is deeply committed to giving businesses what they need, and clearly that is the ability to run enterprise workloads in private clouds, public clouds and, increasingly, across both," said Steve Ballmer, chief executive officer of Microsoft. "Now our customers will be able to take advantage...
Read more...
Two of the world's largest enterprise companies may be about to shake hands in a deal that'll have massive implications across the entire cloud (er, industry). A new report suggests that Microsoft and Oracle are ready to "link their fortunes in the cloud," announcing at its upcoming BUILD conference a new partnership with Oracle. BUILD is expected to be the launching pad for Windows 8.1, but that's mostly on the consumer front. On the enterprise front, Oracle is expected to announce a cooperation with Microsoft whereby Microsoft's software ties in tightly with Oracle's powerful enterprise hardware. It's a strange collaboration, for sure. A few years ago, these two were seen as rivals. But given...
Read more...
Do you use Java? If so, be aware that Oracle just released its "June 2013 Critical Update for Java SE," a collection of code that provides 40 new security fixes. All but three of them are security holes that can be exploited from a remote location without any kind of authentication. Four of the vulnerabilities affect client and server deployments, while 34 only affect client deployments, Oracle said, adding that Java users should waste no time applying the update. "Oracle recommends that this Critical Patch Update be applied as soon as possible because it includes fixes for a number of severe vulnerabilities," Oracle said in a statement. "Note that the vulnerabilities fixed in this Critical Patch...
Read more...
If our not-too-subtle hint a couple of weeks ago about the perils of having Java installed wasn't enough to convince you to uninstall, you should waste no time in heading on over to the official site and grabbing the latest version (7u13). When it comes to Java, the Swiss-cheese of the software world, it's important to snag updates whenever they're rolled-out - but this one is in a league of its own. Oracle managed to pack 50 fixes with this single update - the largest bulk of fixes ever seen in the software's history. For those interested in getting into the nitty gritty of what's been patched up, you can head on over to this very in-depth advisory page. Given the number of holes and exploits...
Read more...
Software vulnerabilities are common, but it’s not every day that the Computer Readiness Team (CERT) at the U.S. Department of Homeland Security steps in and starts warning the public. Not surprisingly, Oracle jumped on the security hole and released an update (Java Update 7u11) that resolves the problem. If you’re running Java (even the Java plug-in in your browser), update now. That said, not everyone is convinced that Java users are completely in the clear after updating to the latest version. Experts agree that the updated version of Java now blocks the zero day exploit (in part by making you click a button to run Java technology present on most websites). But...
Read more...
