Fergie's Tech Blog

Oracle to Open Up on Bug Severity

Joris Evers writes on C|Net News:

Oracle plans to add severity ratings to its security bulletins, making the alerts less of a guessing game for customers.

Starting with its Critical Patch Update scheduled for next week, Oracle will rate the severity of the flaws that it provides fixes for, Darius Wiles, senior manager for security alerts at Oracle, said late Tuesday.

In addition, the business software giant's security bulletins will explicitly indicate which bugs could be exploited over the Internet by anonymous attackers and will provide a summary of the security problems for each of its product categories, Wiles said.

posted by Fergie @ 10/11/2006 10:25:00 AM