Oracle to fix 56 flaws in October patch release

Oracle has posted advance notification for its upcoming October security update release.

The company said the 18 October update would address some 56 flaws in its Database, Application Server and Fusion Middleware platforms among others. The release will also include fixes for a number of Sun products.

Among the vulnerabilities addressed in the update are flaws in Fusion Middleware that could be used by an attacker to remotely compromise a targeted server without the need for a username or password.

The update will also address three vulnerabilities in the Oracle E-Business Suite that could be remotely exploited without the need for authentication or user credentials.

Of the 22 updates planned for Sun products, Oracle said nine would address remotely-exploitable vulnerabilities. The patched components include Solaris, GlassFish Server, the Sparc T3 platform and the Oracle Communications Unified platform.

Oracle's Linux 6 platform will also receive a fix for a flaw that is not believed to be remotely exploitable.

The patch release comes in the aftermath of the 2011 Oracle OpenWorld conference. The company used the event to announce the release of a number of products including the Exalytics and Big Data database machines as well as a cloud service and a number of updates for Java.

Earlier this month, Microsoft released its monthly security update, addressing flaws in Internet Explorer and Silverlight.