RE: Oracle Security Bugs./ Patches Requires Passwords

I went to Metalink to obtain the patch. Path finding for Oracle can be a pain. Some patches you find by filling in the plaform and product information on the first patch download screen, some you find on oracle-ftp, and some you find by clicking on the "Click here for Patches released after February 19, 2001 and for all Application Patches." link. For this bug the last choice was correct. If you have multiple databases at sundry release levels you need to find the patch for each of those levels. Each patch is protected by a different password. I wanted the patches for 8.1.7.1 and 8.1.6.3 so I needed two passwords. I phoned Oracle support and had them email the passwords which expire in seven days.

When did this "password" requirement start? Has a new Customer Aggravation Department been formed at Redwood Shores? Oracle knows I'm entitled to the patch because I'm already on Metalink. The analyst I talked to was quite sympathetic. He had just dealt with a customer that needed 11 patches and 11 different passwords.

Ian MacGregor
Stanford Linear Accelerator Center
ian_at_slac.stanford.edu   

-----Original Message-----
Sent: Thursday, June 28, 2001 7:07 AM
To: Multiple recipients of list ORACLE-L

Team,
My Network Manager sent me this URL that has some interesting information about some security issues with Oracle.
http://www.theregister.co.uk/content/8/19881.html ROR mª¿ªm

--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Ron Rogers
  INET: RROGERS_at_galottery.org

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L


(or the name of mailing list you want to be removed from).  You may

also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: MacGregor, Ian A.
  INET: ian_at_SLAC.Stanford.EDU

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L


(or the name of mailing list you want to be removed from).  You may

also send the HELP command for other information (like subscribing).