Oracle today warned customers that they need to fix a major hole in its flagship database or risk downtime and hacker attacks, reports Infoworld.
In a weird twist of events, the hole was actually found by Infoworld, a news site that covers the tech industry. Oracle even gave the publication a public credit for finding and reporting the hole — and waiting to publish the story until Oracle could issue a patch, which it did today.
The flaw had to do with time stamp technology that acts like an internal clock. This clock is the key to keeping data synchronised and safe. When multiple databases are linked together the clock could be manipulated to be inaccurate. This is one of those critical systems that was difficult to fix and affected a long list of Oracle’s products.
The critical patch sent out today fixes a whole bunch of other flaws, too. Some 78 holes will be patched across all of Oracle’s major product families.
Inforworld contends that Oracle executives knew about the time stamp problem and not only downplayed it, but issued a workaround fix that could have caused customers even more headaches and money. Oracle seems to have gotten its act together and really fixed the security flaw this time, Infoworld says.