Oracle released its April Critical Patch Update (CPU) this week, addressing 73 different vulnerabilities spread across Oracle’s product portfolio.
Oracle’s namesake database gets six updates as part of the CPU. Only two of the updates are identified as flaws that could be remotely exploitable without authentication.
Oracle is also providing eight updates for the Open Office suite. Of those fixes, Oracle has identified seven vulnerabilities that may be remotely exploitable over a network without the need for a username and password.
The Open Office fixes come a week after Oracle announced that it was giving Open Office to the community and ending commercial sales. The Open Office project was forked in 2010 by community members that were unhappy with Oracle’s leadership.