RE: Apply CPUJan2006 or wait for 9.2.0.8

Thanks Jared, Niall, Paul and Ron for your replies.

Yes it was an article on the DB18 bug that my manager slammed down on my desk that precipitated my question.
I just thought I would check if anyone knew about 9208's arrival date. If it is not in the immediate future I will be applying the Jan security patch.

Ron: patch 9207 came out in August of 2005 and contained the CPUJuly2005 patch.

Ben Poels
  -----Original Message-----
  From: Jared Still [mailto:jkstill_at_gmail.com]   Sent: Monday, February 13, 2006 4:52 PM   To: poelsb_at_post.queensu.ca
  Cc: Oracle-L_at_Freelists. Org
  Subject: Re: Apply CPUJan2006 or wait for 9.2.0.8

  It depends on how vulnerable you think you are.

  Anyone with access to an Oracle database can potentially own   the db via the DB18 security bug uncovered by Imperva.

  The JAN 2006 CPU (one would hope) successfully closes this hole.

  Jared

  On 2/13/06, Ben Poels <poelsb_at_post.queensu.ca> wrote:     Hi

    I have heard that 9.2.0.8 will be the terminal release for Oracle9i and that

    it is not too far off in the future. Anyone have any better info on when it

    will be released?
    I am trying to decide whether to apply the CPUJan2006 patch or wait for     9.2.0.8
    which I am sure will include the Jan patch. Thanks,

    Ben Poels
    Queen's University

    --
    http://www.freelists.org/webpage/oracle-l

  --
  Jared Still
  Certifiable Oracle DBA and Part Time Perl Evangelist

--
http://www.freelists.org/webpage/oracle-l