Joe Yong wrote:
> Hi all,
> Given the fiasco with the slammer virus thing, our customers are
> reviewing their activities and log on their databases as far as
> security fixes and bugs are concerned. My boss wants us to help by
> compiling a list of all known security issues (bugs or by design) to
> help our customers with that. Anybody out there already have such a
> list or know where I can get one? We're already comparing our stuff to
> metalink articles but given that our internal use of the DB is quite
> small (we're a tiny group), many of the issues might not be in our
> records cos they don't impact us.
>
> Would appreciate any pointers on this. Thanks much.
Well, CERT (Carnegie-Melon University) is one of the primary
repositories of security alerts (for a lot more than Oracle). You can
see current advisories, alerts, incidents, vulnerabilities, and so on at
http://www.cert.org/ (they have a search box ... when I just now typed
'oracle', I got 214 hits ... most of which are covered in Metalink as well).
Received on Tue Jan 28 2003 - 15:54:51 CST
