Think Patch Tuesday was bad? Oracle releases 603 fixes
Briefly

Oracle recently published its quarterly patch collection, totaling 603 patches, including critical updates for its products and Linux code. Of particular note is a patch for CVE-2025-21556, a severe vulnerability in the Agile Product Lifecycle Management Framework that allows low-privileged attackers with network access to compromise Oracle products. Additionally, other notable vulnerabilities in Oracle's communications range and middleware systems demand attention. The patch cycle underscores Oracle's ongoing commitment to addressing security threats, especially in high-stakes sectors like telecommunications and financial services.
The recently released Oracle patch bundle includes vital updates, notably a fix for a critical CVE-2025-21556 vulnerability in the Agile Product Lifecycle Management Framework.
Oracle's VP of security assurance emphasized the need for immediate attention to vulnerabilities addressed in the quarterly patch cycle, particularly highlighting the Agile PLM Framework.
Several high-severity flaws affecting Oracle's communications products could lead to remote code execution, raising concerns in sectors like telecommunications and financial services.
In total, Oracle has released 603 patches this quarter, signifying ongoing commitment to security across various product lines including communications and middleware.
Read at Theregister
[
|
]