Oracle has released its Critical Patch Update Advisory, Solaris Third Party Bulletin, and Linux Bulletin for April 2023. The updates address several vulnerabilities that could be exploited by a remote attacker to take control of an affected system. The vulnerabilities impact multiple Oracle products and services.
In total, Oracle released 354 security patches addressing various vulnerabilities in its products. The Critical Patch Update Advisory addresses 326 vulnerabilities in multiple Oracle products, including Oracle Database, Fusion Middleware, and Enterprise Manager.
The Solaris Third Party Bulletin addresses 12 vulnerabilities in third-party software included in Oracle Solaris.
Meanwhile, the Linux Bulletin addresses 16 vulnerabilities in Oracle Linux and Virtualization. According to Oracle, many of the vulnerabilities addressed in the updates could be exploited remotely without requiring user credentials.
Therefore, users and administrators are advised to apply the necessary updates as soon as possible to protect their systems.
The Cybersecurity and Infrastructure Security Agency (CISA) has also urged users and administrators to review Oracle’s Critical Patch Update Advisory, Solaris Third Party Bulletin, and Linux Bulletin and apply the necessary updates promptly.
With the increasing frequency of cyberattacks targeting organizations worldwide, it is crucial to keep software and systems up-to-date with the latest security patches and updates to prevent potential vulnerabilities from being exploited by attackers.