10/14/2006

Oracle to provide clearer vulnerability ratings

Filed under: — By Aviran Mordo @ 11:18 am

Oracle is to start ranking the severity of security bugs it fixes using an industry-standard scoring system starting with its next quarterly patch update, due on 17 October.

The database giant will grade the threat posed by the bugs it fixes using the Common Vulnerability Scoring System (CVSS). It has also promised to give an easy-to-understand execuctive summary of the flaws it has addressed, highlighting bugs that lend themselves to remote exploitation by hackers. In the past, Oracle published an internally developed risk matrix along with its quarterly patch cycle but this is to be sidelined if favour of a simpler - and clearer - method of explaining the relative importance of security bugs.

Source: The Registe

 

Leave a Reply

You must have Javascript enabled in order to submit comments.

All fields are optional (except comment).
Some comments may be held for moderation (depends on spam filter) and not show up immediately.
Links will automatically get rel="nofollow" attribute to deter spammers.

Powered by WordPress