<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Musings on Database Security &#187; patching</title>
	<atom:link href="http://www.slaviks-blog.com/category/patching/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.slaviks-blog.com</link>
	<description>Slavik&#039;s Blog</description>
	<lastBuildDate>Wed, 07 Dec 2011 17:07:31 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>dbms_jvm_exp_perms 0day fixed on Windows 11gR2</title>
		<link>http://www.slaviks-blog.com/2010/04/08/dbms_jvm_exp_perms-0day-fixed-on-windows-11gr2/</link>
		<comments>http://www.slaviks-blog.com/2010/04/08/dbms_jvm_exp_perms-0day-fixed-on-windows-11gr2/#comments</comments>
		<pubDate>Thu, 08 Apr 2010 17:48:22 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[Oracle]]></category>
		<category><![CDATA[patching]]></category>
		<category><![CDATA[technical tips]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=262</guid>
		<description><![CDATA[Alex wrote a nice blog post showing that the 0day found by David Litchfield [pdf] is now fixed in the newest Oracle 11.2.0.1 release for Windows. He has some analysis of the fix as well as some good examples of using Repscan to view permissions and audit records using the online browser. Whenever I need [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2010/04/08/dbms_jvm_exp_perms-0day-fixed-on-windows-11gr2/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Java Forensics in Oracle</title>
		<link>http://www.slaviks-blog.com/2010/03/31/java-forensics-in-oracle/</link>
		<comments>http://www.slaviks-blog.com/2010/03/31/java-forensics-in-oracle/#comments</comments>
		<pubDate>Wed, 31 Mar 2010 22:44:00 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[monitoring]]></category>
		<category><![CDATA[Oracle]]></category>
		<category><![CDATA[patching]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[forensics]]></category>
		<category><![CDATA[virtual patching]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=257</guid>
		<description><![CDATA[Paul Wright published an interesting post about how you can find traces of Java privilege escalation attacks in the database. Great stuff! Of course, Hedgehog already protects against these published attacks as Paul showed earlier here. Hedgehog comes with build-in vPatch protections that cover the DBMS_JVM_EXP_PERMS and DBMS_JAVA attacks.]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2010/03/31/java-forensics-in-oracle/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Oracle January 2010 CPU</title>
		<link>http://www.slaviks-blog.com/2010/01/13/oracle-january-2010-cpu/</link>
		<comments>http://www.slaviks-blog.com/2010/01/13/oracle-january-2010-cpu/#comments</comments>
		<pubDate>Wed, 13 Jan 2010 23:20:20 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[Oracle]]></category>
		<category><![CDATA[patching]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[cpus]]></category>
		<category><![CDATA[virtual_patching]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=214</guid>
		<description><![CDATA[Ah, time flies when you&#8217;re having fun. It seams that only yesterday we worked on the October CPU and now Oracle released the January CPU. This time, Oracle acknowledged 24 security fixes, 9 of them in the database layer. This number is a bit lower than the average but as in the previous CPU, you [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2010/01/13/oracle-january-2010-cpu/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Oracle October 2009 CPU</title>
		<link>http://www.slaviks-blog.com/2009/10/21/oracle-october-2009-cpu/</link>
		<comments>http://www.slaviks-blog.com/2009/10/21/oracle-october-2009-cpu/#comments</comments>
		<pubDate>Wed, 21 Oct 2009 16:23:13 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[Oracle]]></category>
		<category><![CDATA[patching]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[cpus]]></category>
		<category><![CDATA[virtual_patching]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=195</guid>
		<description><![CDATA[Oracle has released the October CPU with 38 announced security fixes (and more under the covers). 16 database vulnerabilities out of which a mind blowing 6 may be remotely exploitable without authentication, i.e., may be exploited over a network without the need for a username and password. Also, 3 of those will allow you to [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2009/10/21/oracle-october-2009-cpu/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Oracle Jul2009 CPU</title>
		<link>http://www.slaviks-blog.com/2009/07/14/oracle-jul2009-cpu/</link>
		<comments>http://www.slaviks-blog.com/2009/07/14/oracle-jul2009-cpu/#comments</comments>
		<pubDate>Tue, 14 Jul 2009 22:49:35 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[DBA]]></category>
		<category><![CDATA[Oracle]]></category>
		<category><![CDATA[patching]]></category>
		<category><![CDATA[cpus]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=142</guid>
		<description><![CDATA[Wow, that&#8217;s a big one! Not so much as in the number of security bugs fixed but from the severity point of view. Oracle fixed 30 vulnerabilities which is a bit less than the previous CPUs. Most of the problems are in the core database product and centered around the network components. The advanced queueing [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2009/07/14/oracle-jul2009-cpu/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Oracle CPU Dissected</title>
		<link>http://www.slaviks-blog.com/2009/01/20/oracle-cpu-dissected/</link>
		<comments>http://www.slaviks-blog.com/2009/01/20/oracle-cpu-dissected/#comments</comments>
		<pubDate>Wed, 21 Jan 2009 06:27:47 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[compliance]]></category>
		<category><![CDATA[DBA]]></category>
		<category><![CDATA[Oracle]]></category>
		<category><![CDATA[patching]]></category>
		<category><![CDATA[technical tips]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=97</guid>
		<description><![CDATA[In light of last week&#8217;s CPU announcements, I invited my colleague Aviv Pode, Sentrigo&#8217;s Head of Security Research, to submit a special guest blog post. Thanks Aviv! Oracle releases Critical Patch Updates (CPUs) every three months, containing security code fixes to vulnerabilities discovered by its security personnel or external researchers and hackers. By exploring these [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2009/01/20/oracle-cpu-dissected/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
	</channel>
</rss>

<!-- Dynamic Page Served (once) in 1.402 seconds -->

