2019-01-17
▷ 개요
l
오라클社 CPU에서 자사 제품의 보안 취약점 284개에 대한 패치를 발표 [1]
※
CPU(Critical Patch Update) : 오라클 중요 보안 업데이트
l
영향 받는 버전의 사용자는 악성코드 감염 등에
취약할 수 있으므로, 아래 해결방안에 따라 최신버전으로 업데이트 권고
▷ 영향받는
제품 및 버전
l
Enterprise Manager Base Platform, versions
12.1.0.5, 13.2, 13.3
l
Enterprise Manager for Virtualization,
versions 13.2.2, 13.2.3, 13.3.1
l
Enterprise Manager Ops Center, versions
12.2.2, 12.3.3
l
Hyperion BI+, version 11.1.2.4
l
Java Advanced Management Console, version
2.12
l
JD Edwards EnterpriseOne Tools, version 9.2
l
JD Edwards World Security, versions A9.3,
A9.3.1, A9.4
l
MySQL Connectors, versions 2.1.8 and prior,
8.0.13 and prior
l
MySQL Enterprise Monitor, versions 4.0.7 and
prior, 8.0.13 and prior
l
MySQL Server, versions 5.6.42 and prior,
5.7.24 and prior, 8.0.13 and prior
l
MySQL Workbench, versions 8.0.13 and prior
l
Oracle Agile Engineering Data Management,
versions 6.1.3, 6.2.0, 6.2.1
l
Oracle Agile PLM, versions 9.3.3, 9.3.4,
9.3.5, 9.3.6
l
Oracle Agile Product Lifecycle Management for
Process, versions 6.2.0.0, 6.2.1.0, 6.2.2.0, 6.2.3.0, 6.2.3.1
l
Oracle API Gateway, version 11.1.2.4.0
l
Oracle Application Testing Suite, versions
12.5.0.3, 13.1.0.1, 13.2.0.1, 13.3.0.1
l
Oracle Argus Safety, versions 8.1, 8.2
l
Oracle Banking Platform, versions 2.5.0,
2.6.0, 2.6.1, 2.6.2
l
Oracle Business Process Management Suite,
versions 11.1.1.9.0, 12.1.3.0.0, 12.2.1.3.0
l
Oracle Communications Billing and Revenue
Management, versions 7.5, 12.0
l
Oracle Communications Converged Application
Server, versions prior to 7.0.0.1
l
Oracle Communications Converged Application
Server - Service Controller, version 6.1
l
Oracle Communications Diameter Signaling
Router (DSR), versions prior to 8.3
l
Oracle Communications Online Mediation
Controller, version 6.1
l
Oracle Communications Performance
Intelligence Center (PIC) Software, versions prior to 10.2.1
l
Oracle Communications Policy Management,
versions prior to 12.5
l
Oracle Communications Service Broker, version
6.0
l
Oracle Communications Services Gatekeeper,
versions prior to 6.1.0.4.0
l
Oracle Communications Session Border
Controller, versions SCz7.4.0, SCz7.4.1, SCz8.0.0, SCz8.1.0
l
Oracle Communications Unified Inventory
Management, versions prior to 7.4.0
l
Oracle Communications Unified Session
Manager, version SCz7.3.5
l
Oracle Communications WebRTC Session
Controller, versions prior to 7.2
l
Oracle Database Server, versions 11.2.0.4,
12.1.0.2, 12.2.0.1, 18c
l
Oracle E-Business Suite, versions 12.1.1,
12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8
l
Oracle Endeca Server, version 7.7.0
l
Oracle Enterprise Communications Broker,
versions PCz2.1, PCz2.2, PCz3.0
l
Oracle Enterprise Repository, version
12.1.3.0.0
l
Oracle Enterprise Session Border Controller,
versions ECz7.4.0, ECz7.5.0, ECz8.0.0, ECz8.1.0
l
Oracle Financial Services Analytical
Applications Infrastructure, versions 7.3.3, 7.3.5, 8.0.1, 8.0.2, 8.0.3, 8.0.4,
8.0.5, 8.0.6, 8.0.7
l
Oracle FLEXCUBE Direct Banking, version
12.0.2
l
Oracle FLEXCUBE Investor Servicing, versions
12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0
l
Oracle Fusion Middleware MapViewer, version
12.2.1.3.0
l
Oracle GoldenGate Application Adapters,
version 12.3.2.1.1
l
Oracle Health Sciences Information Manager,
version 3.0
l
Oracle Healthcare Foundation, versions 7.1,
7.2
l
Oracle Healthcare Master Person Index,
versions 3.0, 4.0
l
Oracle Hospitality Cruise Fleet Management,
version 9.0.10
l
Oracle Hospitality Cruise Shipboard Property
Management System, version 8.0.8
l
Oracle Hospitality Reporting and Analytics,
version 9.1.0
l
Oracle Hospitality Simphony, version 2.10
l
Oracle HTTP Server, version 12.2.1.3
l
Oracle Insurance Calculation Engine, version
10.2
l
Oracle Insurance Insbridge Rating and
Underwriting, versions 5.2, 5.4, 5.5
l
Oracle Insurance Policy Administration J2EE,
versions 10.0, 10.2
l
Oracle Insurance Rules Palette, versions
10.0, 10.2
l
Oracle Java SE, versions 7u201, 8u192, 11.0.1
l
Oracle Java SE Embedded, version 8u191
l
Oracle Managed File Transfer, versions
12.2.1.3.0, 19.1.0.0.0
l
Oracle Outside In Technology, versions 8.5.3,
8.5.4
l
Oracle Reports Developer, version 12.2.1.3
l
Oracle Retail Back Office, versions 13.3,
13.4, 14.0, 14.1
l
Oracle Retail Central Office, versions 13.3,
13.4, 14.0, 14.1
l
Oracle Retail Convenience and Fuel POS Software,
version 2.8.1
l
Oracle Retail Customer Insights, versions
15.0, 16.0
l
Oracle Retail Integration Bus, version 17.0
l
Oracle Retail Merchandising System, version
14.1
l
Oracle Retail Returns Management, versions
13.3, 13.4, 14.0, 14.1
l
Oracle Retail Sales Audit, version 15.0
l
Oracle Retail Service Backbone, versions
13.1, 13.2, 14.0, 14.1, 15.0, 16.0
l
Oracle Retail Workforce Management Software,
versions 1.60.9, 1.64.0
l
Oracle Retail Xstore Payment, version 3.3
l
Oracle Secure Global Desktop (SGD), version
5.4
l
Oracle Service Architecture Leveraging
Tuxedo, versions 12.1.3.0.0, 12.2.2.0.0
l
Oracle SOA Suite, versions 12.1.3.0.0,
12.2.1.3.0
l
Oracle Solaris, versions 10, 11
l
Oracle Transportation Management, versions
6.3.7, 6.4.1, 6.4.2, 6.4.3
l
Oracle Utilities Framework, version
4.3.0.1-4.3.0.4
l
Oracle Utilities Network Management System,
versions 1.12.0.3, 2.3.0.0, 2.3.0.1, 2.3.0.2
l
Oracle VM VirtualBox, versions prior to
5.2.24, prior to 6.0.2
l
Oracle Web Cache, version 11.1.1.9.0
l
Oracle WebCenter Portal, versions 11.1.1.9.0,
12.2.1.3.0
l
Oracle WebCenter Sites, version 11.1.1.8.0
l
Oracle WebLogic Server, versions 10.3.6.0,
12.1.3.0, 12.2.1.3
l
OSS Support Tools, versions prior to 19.1
l
PeopleSoft Enterprise CC Common Application
Objects, version 9.2
l
PeopleSoft Enterprise CS Campus Community,
versions 9.0, 9.2
l
PeopleSoft Enterprise HCM eProfile Manager
Desktop, version 9.2
l
PeopleSoft Enterprise PeopleTools, versions
8.55, 8.56, 8.57
l
PeopleSoft Enterprise SCM eProcurement,
version 9.2
l
Primavera P6 Enterprise Project Portfolio Management,
versions 8.4, 15.1, 15.2, 16.1, 16.2, 17.7-17.12, 18.8
l
Primavera Unifier, versions 16.1, 16.2,
17.1-17.12, 18.8
l
Siebel Applications, versions 18.10, 18.11
l
Sun ZFS Storage Appliance Kit (AK), versions
prior to 8.8.2
l
Tape Library ACSLS, version 8.4
▷ 해결 방안
l
"Oracle Critical Patch Update Advisory –
January 2019“ 문서 및 패치사항을 검토하고 벤더사 및 유지보수 업체와 협의/검토
후 패치 적용 [1]
l
JAVA SE 사용자는 설치된 제품의 최신 업데이트를 다운로드[2]
받아 설치하거나, Java 업데이트 자동 알림 설정을 권고 [3]