Oracle Releases January 2020 Security Bulletin

Oracle has released its Critical Patch Update for January 2020 containing 334 new security patches to address vulnerabilities across multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

Threat ID:: CC-3339
Category:
Threat Severity:: Information only
Threat Vector:
Published:: 15 January 2020 12:00 AM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Affected platforms

The following platforms are known to be affected:

Oracle Database Server

Multiple Oracle products including:

MySQL Client - versions 5.6.46 and prior. 5.7.28 and prior, 8.0.18 and prior
MySQL Server - versions 5.6.46 and prior. 5.7.28 and prior, 8.0.18 and prior
Oracle Database Server - versions 11.2.0.4, 12.1.0.2, 12.1.0.11, 12.2.0.1, 18c, 19c, 29, 212.2.0.1
Oracle Java SE - versions 7u241, 8u231, 8u241, 11.0.5, 13.0.1

Remediation steps

Type	Step
	Users and administrators are encouraged to review the Oracle January 2020 Critical Patch Update and apply the necessary updates.

Last edited: 29 June 2021 12:00 pm