Oracle-L: RE: 8.1.7.2 or 8.1.7.4

From: MacGregor, Ian A. <ian_at_SLAC.Stanford.EDU>
Date: Fri, 11 Oct 2002 14:13:37 -0800
Message-ID: <F001.004E75EB.20021011141337@fatcity.com>

There is a new listener bug detailed in security alert 42 which allows someone to execute a Denial of Service attack by crashing or hanging the listener. For Oracle 8i I only see patches at the 8.1.7.4 level.

Interestingly, the 8.0 database listener is not vulnerable.

Ian MacGregor
Stanford Linear Accelerator Center
ian_at_slac.stanford.edu <mailto:ian_at_slac.stanford.edu>

-----Original Message-----

Sent: Friday, October 11, 2002 12:12 PM
To: Multiple recipients of list ORACLE-L

I agree with Richard. If you are running 8.1.7.2, and you are not experiencing a bug that has been corrected in 8.1.7.4, then stay where you are. Wait until 9R2 is stable and then move only when Oracle starts threatening desupport of 8i. let sleeping (content) dogs lie.

Tom Mercadante
Oracle Certified Professional

-----Original Message-----

Sent: Friday, October 11, 2002 2:46 PM
To: Multiple recipients of list ORACLE-L

Vaidya I'm running 8.1.7.2 on all instances when I go to upgrade it will probably be 9iR2 starting with a test db, then from there, onto the least important db upwards. Of course I'm stalling to let all the venturous customers test thease new realeases (and abundantly advancing I might add) out for me =). I haven't had an issue where I couldn't get support because I wasn't at .3 or .4, nor has an issue arose in .2 that left me no choice to upgrade...

-----Original Message-----

Sent: Friday, October 11, 2002 2:14 PM
To: Multiple recipients of list ORACLE-L

Which patch is recommended?
Which is more stable?
Obvious answer from Oracle Support was 8.1.7.4 for the reason that it was latest.
But some of my friends have advised 8.1.7.2

Any opinions?

Thanks,

-Rachna
--

Please see the official ORACLE-L FAQ: http://www.orafaq.com <http://www.orafaq.com>
--

Author: Rachna Vaidya
INET: rachnavaidya_at_hotmail.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com <http://www.fatcity.com>  
San Diego, California        -- Mailing list and web hosting services 


--------------------------------------------------------------------- 

To REMOVE yourself from this mailing list, send an E-Mail message

to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).

--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author: MacGregor, Ian A.
INET: ian_at_SLAC.Stanford.EDU

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services


---------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message