Just like other user accounts, database users can get certain roles granted. Those roles define what they can do and what they can see. Best practice from a security perspective is the “Principle of Least Privilege” (also known as PoLP), granting only specific privileges the...

During Oracle Open World 2019, a partnership between Oracle and VMware was announced. From now on customers can extend or migrate their VMware operations to bare metal server clusters on the Oracle Cloud while maintaining full control of the environment (this is unique). This collaboration is a great...

  History   Since December 2015, Oracle released Oracle Standard Edition 2 (SE2), replacing the previous Standard Edition (SE) and Standard Edition One (SE1) releases. Customers on versions before 12.1.0.2 (running Standard Edition or Standard Edition One (SE1)), and who want to upgrade to a more recent version,...

Again 4 new execution side-channel vulnerabilities were disclosed by Intel on May 14th. Each of them has its own name but collectively they are referred to as Microarchitectural Data Sampling (mds): CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM): part of RIDL CVE-2018-12126: Microarchitectural Store Buffer...

  After the Spectre & Meltdown vulnerabilities (see https://monin-it.be/2018/01/17/meltdown-spectre-solution-linux-windows/) at the beginning of 2018, Intel now tackled 3 applications of another big vulnerability in their microcode: the L1 Terminal Fault (L1TF) vulnerabilities. All three applications of L1TF are speculative execution side-channel cache timing vulnerabilities: CVE-2018-3615: Affecting Intel Software...

Oracle customer and want to SAVE SOME MONEY? Oracle database 11gR2 free extended support is almost at its end. Time to upgrade or pay more to get less! Currently Oracle 12c Release 1 is the only version for which Oracle still delivers the Premier Support. For Oracle database...