九游老哥云
【威胁通告】Oracle全系产品2020年1月要害补丁更新
2020-01-15
综述
外地时间2020年1月14日 ，Oracle官方宣布了2020年1月要害补丁更新通告CPU（Critical Patch Update） ，清静通告以及第三方清静通告等通告内容 ，修复了334个差别水平的误差。各产品受影响情形以及可用补丁情形见附录表格。
完整信息请审查官方通告：
https://www.oracle.com/security-alerts/cpujan2020.html
误差总结
| 产品 | 误差个数 | 未授权远程使用个数 | 最高CVSS评分 |
| Oracle Database server | 12 | 3 | 7.7 |
| Oracle Communications Applications | 25 | 23 | 9.8 |
| Oracle Construction and Engineering Suite | 12 | 8 | 9.8 |
| Oracle E-Business Suite | 23 | 21 | 9.9 |
| Oracle Enterprise Manager | 50 | 10 | 9.8 |
| Oracle Financial Services Applications | 24 | 6 | 7.5 |
| Oracle Food and Beverage Applications | 1 | 0 | 4.9 |
| Oracle Fusion Middleware | 38 | 30 | 9.8 |
| Oracle GraalVM | 5 | 3 | 9.8 |
| Oracle Health Sciences Applications | 3 | 3 | 9.8 |
| Oracle Hospitality Applications | 5 | 2 | 7.5 |
| Oracle Hyperion | 2 | 1 | 9.8 |
| Oracle iLearning | 1 | 1 | 4.7 |
| Oracle Java SE | 12 | 12 | 8.1 |
| Oracle JD Edwards | 9 | 9 | 9.8 |
| Oracle MySQL | 19 | 6 | 7.5 |
| Oracle PeopleSoft | 15 | 12 | 9.8 |
| Oracle Retail Applications | 22 | 14 | 9.8 |
| Oracle Siebel CRM | 5 | 5 | 9.8 |
| Oracle Systems | 17 | 8 | 9.8 |
| Oracle Supply Chain | 8 | 8 | 9.6 |
| Oracle Utilities Applications | 4 | 4 | 9.8 |
| Oracle Virtualization | 22 | 3 | 8.2 |
受影响的产品及版本
受影响的产品及版本信息请参考文末附录。
要害补丁更新（cpu）
要害修补程序更新 (cpu) 是针对多个清静误差的修补程序荟萃。要害修补程序更新通常是累积的, 但每次都只形貌自上一个要害修补程序更新咨询以来添加的清静修复补丁。因此, 应复查先前宣布的清静修补程序的主要更新建议, 以相识有关早期版本的清静性修正的信息。
解决计划
鉴于乐成攻击所造成的威胁 ，Oracle强烈建议客户尽快下载并装置主要补丁更新修复程序。
附录
受影响产品（含版本）以及相关补丁情形如下表：
| Affected Products and Versions | Patch Availability Document |
| Enterprise Manager Base Platform, versions 12.1.0.5, 13.2.0.0, 13.3.0.0 | Enterprise Manager |
| Enterprise Manager for Fusion Middleware, versions 13.2.0.0, 13.3.0.0 | Enterprise Manager |
| Enterprise Manager for Oracle Database, versions 12.1.0.5, 13.2.0.0, 13.3.0.0 | Enterprise Manager |
| Enterprise Manager Ops Center, versions 12.3.3, 12.4.0 | Enterprise Manager |
| Hyperion Financial Close Management, version 11.1.2.4 | Fusion Middleware |
| Hyperion Planning, version 11.1.2.4 | Fusion Middleware |
| Identity Manager, versions 11.1.2.3.0, 12.2.1.3.0 | Fusion Middleware |
| Instantis EnterpriseTrack, versions 17.1, 17.2, 17.3 | Oracle Construction and Engineering Suite |
| JD Edwards EnterpriseOne Orchestrator, version 9.2 | JD Edwards |
| JD Edwards EnterpriseOne Tools, version 9.2 | JD Edwards |
| MySQL Client, versions 5.6.46 and prior, 5.7.28 and prior, 8.0.18 and prior | MySQL |
| MySQL Cluster, versions 7.3.27 and prior, 7.4.25 and prior, 7.5.15 and prior, 7.6.12 and prior | MySQL |
| MySQL Connectors, versions 5.3.13 and prior, 8.0.18 and prior | MySQL |
| MySQL Enterprise Backup, versions 3.12.4 and prior, 4.1.3 and prior | MySQL |
| MySQL Server, versions 5.6.46 and prior, 5.7.28 and prior, 8.0.18 and prior | MySQL |
| MySQL Workbench, versions 8.0.18 and prior | MySQL |
| Oracle Agile Engineering Data Management, versions 6.2.0, 6.2.1 | Oracle Supply Chain Products |
| Oracle Agile PLM, versions 9.3.3, 9.3.4, 9.3.5, 9.3.6 | Oracle Supply Chain Products |
| Oracle Agile PLM Framework, version 9.3.3 | Oracle Supply Chain Products |
| Oracle Agile PLM MCAD Connector, versions 3.4, 3.5, 3.6 | Oracle Supply Chain Products |
| Oracle Application Testing Suite, versions 12.5.0.3, 13.1.0.1, 13.2.0.1, 13.3.0.1 | Enterprise Manager |
| Oracle AutoVue, version 12.0.2 | Oracle Supply Chain Products |
| Oracle Banking Corporate Lending, versions 12.3.0-12.4.0, 14.0.0-14.3.0 | Oracle Financial Services Applications |
