Yo, sysadmins! Thought Patch Tuesday was big? Oracle says 'hold my Java' with huge 334 security flaw fix bundle

Oracle has released a sweeping set of security patches across the breadth of its software line. The January update, delivered one day after Microsoft, Intel, Adobe, and others dropped their scheduled monthly patches, addresses a total of 334 security vulnerabilities across 93 different products from the enterprise giant. As …

[redpawn]

Someone has to...

Job security strikes again. Thank you Oracle!

[Version 1.0]

Re: Someone has to...

Can you imagine a job where, if your boss discovered that you'd made 334 mistakes, you would still be employed?

[ForthIsNotDead]

Eh?

Is anyone using Oracle's Java? I thought world + dog had moved over to OpenJDK, no?

[GidaBrasti]

Re: Eh?

Agreed about OpenJDK.

However neither the article nor the linked resource mentions any JDK related CVEs.

Icon for trying to set the records straight.

[Hans 1]

Re: Eh?

Icon for trying to set the title straight.

#TFTFY

[englishr]

Re: Eh?

Oracle databases have an optional embedded JVM, which is necessarily Oracle Java. The embedded JVM allows stored procedures, triggers, etc. to be written in Java rather than PL/SQL - and alas, if the vendor of your ERP platform requires an Oracle RDBMS with embedded Java, then you just have to suck it up.

[fidodogbreath]

That's a lot of bugs

Here's a handy visualization. (Trigger warning for entomophobes)