Oracle releases critical patch update for April

Oracle has released a collection of patches for multiple potential security vulnerabilities across its product line.

The critical patch update contains 43 new security fixes, and Oracle urged customers to apply the fixes as soon as possible due to the threat of a successful attack.

The products affected are Oracle database Server, Oracle Application Server, Oracle E-Business Suite, Oracle PeopleSoft Enterprise, and Oracle WebLogic.

Oracle Database Server is affected by 16 of the 43 vulnerabilities, with two of the 16 remotely exploitable without authentication.

Until customers apply the patch, it may be possible to reduce the chance of a successful attack by restricting network protocols, or removing user privileges.

Critical patch updates are the primary means of releasing security fixes for Oracle products, and are released four times a year.

The next update is expected on 14 July.