Re: [oss-security] Oracle January 2025 Critical Patch Update

2025-01-29 Thread John Haxby
> On 23 Jan 2025, at 17:24, Alan Coopersmith > wrote: > > On 1/22/25 18:42, Solar Designer wrote: >> Hi, >> Once in a while, Oracle publishes what they call Critical Patch Update > > Once a quarter, per the schedule published on: > https://www.oracle.com/security-alerts/#CriticalPatchUpdates

Re: [oss-security] Oracle January 2025 Critical Patch Update

2025-01-25 Thread Sam James
Solar Designer writes: > On Thu, Jan 23, 2025 at 09:24:14AM -0800, Alan Coopersmith wrote: >> The open source packages delivered in Oracle Linux & Oracle Solaris are >> listed separately, but these are downstreams, so I've always thought they'd >> be off topic here, since we normally only cover u

Re: [oss-security] Oracle January 2025 Critical Patch Update

2025-01-23 Thread Solar Designer
On Thu, Jan 23, 2025 at 09:24:14AM -0800, Alan Coopersmith wrote: > The open source packages delivered in Oracle Linux & Oracle Solaris are > listed separately, but these are downstreams, so I've always thought they'd > be off topic here, since we normally only cover upstream issues, and don't > pu

Re: [oss-security] Oracle January 2025 Critical Patch Update

2025-01-23 Thread Alan Coopersmith
On 1/22/25 18:42, Solar Designer wrote: Hi, Once in a while, Oracle publishes what they call Critical Patch Update Once a quarter, per the schedule published on: https://www.oracle.com/security-alerts/#CriticalPatchUpdates documents, which list many vulnerabilities addressed across many Orac

Re: [oss-security] Oracle January 2025 Critical Patch Update

2025-01-23 Thread John Haxby
> On 23 Jan 2025, at 02:42, Solar Designer wrote: > > Hi, > > Once in a while, Oracle publishes what they call Critical Patch Update > documents, which list many vulnerabilities addressed across many Oracle > products, some of them Open Source and some not. This is great, but it > would be ev