Oracle drops 1,449 security patches like it's the new normal

https://image.theregister.com/5254010.jpg?imageId=5254010&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683

Experts say the era of AI bug hunting is here, so defenders will simply have to adapt to busier workloads

It's a bad day to be an Oracle admin: Big Red has just released 1,449 security patches ready to be applied.

The patches were released as part of the company's quarterly security fixes, and the record number may partly reflect Oracle's internal push to harness AI for vulnerability detection, which it announced in April.

Oracle also manages a huge product portfolio, and the patches span numerous products, so the total shouldn't come as too much of a surprise.

Instead, experts speaking to The Register unanimously agreed that any concerns over the number of patches should be reserved for the admins responsible for applying them, rather than for Oracle's code quality.

Internal vs external CVEs

A quick look at Oracle's acknowledgments shows that external researchers were credited with finding just 64...

Copyright of this story solely belongs to theregister.com. To see the full text click HERE

Read more