Re: CPU - January 2017

From: Stefan Knecht <knecht.stefan_at_gmail.com>
Date: Thu, 26 Jan 2017 13:52:48 +0700
Message-ID: <CAP50yQ8Nzma1Vx0rzUN+AUxWoFCXG0MAsYcjqaAxVZ-f4Y1wpA_at_mail.gmail.com>



It also is not a mandatory component - which means it's a good idea to remove it if your code doesn't depend on it and if you're not using any other components / options that depend on it.

Stefan

On Thu, Jan 26, 2017 at 3:31 AM, David Ramírez Reyes <dramirezr_at_gmail.com> wrote:

> Thanks for the answers, now it's clear.
>
> Regards
>
> David Ramírez Reyes
> Profesión: Padre de Familia y DBA en mis ratos libres
> Profession: Parent and DBA in my spare time
>
>
> On 25 January 2017 at 14:27, Niall Litchfield <niall.litchfield_at_gmail.com>
> wrote:
>
>> Hi David
>>
>> Some time ago (ancient history to many I guess ) Oracle implemented an
>> *in database* jvm it's this that the OJVM patches er patch. As you might
>> imagine implementing an in DB execution environment also implements a new
>> attack method.
>>
>> On 25 Jan 2017 15:07, "David Ramírez Reyes" <dramirezr_at_gmail.com> wrote:
>>
>>> Hello everyone,
>>>
>>> As you may know, the CPU of January was released with a some items
>>> related to the DB; my question is, what about the OJVM component that
>>> comes as the first asset of the list?; I mean, I know the Virtual Machine
>>> is used by the DB, but is this the same as the one installed on the server
>>> (we're running on RHEL)?, is it a risk if our DB server is on an internal
>>> network segment that is not exposed to the web?
>>>
>>> Basically, not sure what's the difference between the JVM of the DB and
>>> the OS, or of it's the same or how it works, any help will be appreciated.
>>>
>>> Regards
>>>
>>>
>>> David Ramírez Reyes
>>> Profesión: Padre de Familia y DBA en mis ratos libres
>>> Profession: Parent and DBA in my spare time
>>>
>>>
>

--
http://www.freelists.org/webpage/oracle-l
Received on Thu Jan 26 2017 - 07:52:48 CET

Original text of this message