RE: WHY WHY does Oracle OEM 12c (12.1.0.5) use the following...

  • From: <rajendra.pande@xxxxxxx>
  • To: <christopherdtaylor1994@xxxxxxxxx>, <oracle-l@xxxxxxxxxxxxx>
  • Date: Thu, 12 Nov 2015 21:28:14 +0000

So that you be vigilant and watch for all the CVSE announcement that will
likely come for WebLogic and Java and apply them diligently

It’s a dirty job ….but …

Or Maybe ORACLE Is going by the fact that there really has been no security
alert for JAVA SE since Java SE Critical Patch Update - June
2013<http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html>
So what me worry about ☺

Tomorrow is Friday – on the plus side

From: oracle-l-bounce@xxxxxxxxxxxxx [mailto:oracle-l-bounce@xxxxxxxxxxxxx] On
Behalf Of Chris Taylor
Sent: Thursday, November 12, 2015 4:11 PM
To: oracle-l@xxxxxxxxxxxxx
Subject: WHY WHY does Oracle OEM 12c (12.1.0.5) use the following...

Fresh install of OEM 12c (12.1.0.5)

Your environment has been set.
java version "1.6.0_43"
Java(TM) SE Runtime Environment (build 1.6.0_43-b01)
Java HotSpot(TM) 64-Bit Server VM (build 20.14-b01, mixed mode)

WebLogic Server Temporary Patch for BUG16080294 Fri Jan 18 20:57:01 IST 2013
WebLogic Server Temporary Patch for 13349651 Thu May 24 10:18:28 IST 2012
WebLogic Server Temporary Patch for BUG14482558 Fri Jan 11 11:20:16 IST 2013

WebLogic Server 10.3.6.0 Tue Nov 15 08:52:36 PST 2011 1441050

I don't get it. With all the security flaws in java and the PSUs and all the
rest, why does a new download of OEM 12c come with products with huge security
concerns?
I just don't get it....

(And yes it's been a long day)

Chris


Please visit our website at
http://financialservicesinc.ubs.com/wealth/E-maildisclaimer.html
for important disclosures and information about our e-mail
policies. For your protection, please do not transmit orders
or instructions by e-mail or include account numbers, Social
Security numbers, credit card numbers, passwords, or other
personal information.

Other related posts: