Oracle releases critical patch update for April
It's the time of year for Oracle to fix flaws across its product range.

Oracle has released a collection of patches for multiple potential security vulnerabilities across its product line.
The critical patch update contains 43 new security fixes, and Oracle urged customers to apply the fixes as soon as possible due to the threat of a successful attack.
The products affected are Oracle database Server, Oracle Application Server, Oracle E-Business Suite, Oracle PeopleSoft Enterprise, and Oracle WebLogic.
Oracle Database Server is affected by 16 of the 43 vulnerabilities, with two of the 16 remotely exploitable without authentication.
Until customers apply the patch, it may be possible to reduce the chance of a successful attack by restricting network protocols, or removing user privileges.
Critical patch updates are the primary means of releasing security fixes for Oracle products, and are released four times a year.
The next update is expected on 14 July.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
-
Bigger salaries, more burnout: Is the CISO role in crisis?
In-depth CISOs are more stressed than ever before – but why is this and what can be done?
By Kate O'Flaherty Published
-
Cheap cyber crime kits can be bought on the dark web for less than $25
News Research from NordVPN shows phishing kits are now widely available on the dark web and via messaging apps like Telegram, and are often selling for less than $25.
By Emma Woollacott Published
-
Organizations shift away from Oracle Java as pricing changes bite
News A survey from Azul Systems finds that, along with cost, customers cite a preference for open source and the threat of a Java usage audit
By Emma Woollacott Published
-
Why Java 17 growth is ‘exploding’
News Java 17 is now the most popular LTS version, according to application data from New Relic, but what's driving this growth?
By Steve Ranger Published
-
SuiteWorld 2023: NetSuite's day-two announcements
Live Blog Keep up-to-date with all the day-two announcements from NetSuite SuiteWorld 2023
By Rory Bathgate Last updated
-
Microsoft defends “negligent” security approach that prolonged vulnerability fix for five months
News The tech giant has refuted claims that its practices have left customers “in the dark”
By Ross Kelly Published
-
Ubuntu shifts to four-week update cycle
News Critical fixes will also come every two weeks, mitigating the issues involved with releasing prompt patches on the old three-week cadence
By Richard Speed Published
-
Can Oracle really be Linux's knight in shining armor?
Opinion The self-proclaimed champion of open source freedom would like you to forget about its history
By Richard Speed Published
-
Microsoft angers admins as April Patch Tuesday delivers password feature without migration guidance
News Security fixes include a zero day exploited by a ransomware group and seven critical flaws
By Connor Jones Published
-
Oracle’s Java subscription changes spark concerns over cost hikes for smaller businesses
News Smaller businesses could incur significant cost hikes as high as 1,400% with most new customers expected to pay at least double
By Ross Kelly Published