Heartbleed leads to \u2018heartattack\u2019 \ud83d\ude42 during earlier this week to all Internet users and companies due to the OpenSSL Security vulnerability. Thought to share Oracle\u2019s take on different Oracle Products depend on OpenSSL, you can go through following docs:<\/p>\n
OpenSSL Security Bug-Heartbleed (Doc ID 1645479.1)<\/p>\n
And public link of the info provided by Oracle:<\/p>\n
http:\/\/www.oracle.com\/technetwork\/topics\/security\/opensslheartbleedcve-2014-0160-2188454.html<\/a><\/p>\n other information to refer<\/p>\n http:\/\/heartbleed.com\/<\/span><\/span><\/a><\/p>\n https:\/\/www.us-cert.gov\/ncas\/alerts\/TA14-098A<\/a><\/p>\n http:\/\/www.openssl.org\/news\/secadv_20140407.txt<\/a><\/p>\n Update on 18-April-2014:<\/strong><\/p>\n Oracle has issued Security Alert for OpenSSL Heartbleed vulnerability CVE-2014-0160 by describing as:<\/p>\n The Security Alert for OpenSSL Heartbleed vulnerability CVE-2014-0160 was released on April 18th, 2014. This Security Alert addresses CVE-2014-0160 (‘Heartbleed’), a security vulnerability which affects multiple OpenSSL versions implemented by various vendors in their products. This vulnerability also affects multiple Oracle products.<\/em> <\/p>\n
\nDue to the severity and the reported exploitation of CVE-2014-0160 “in the wild,” Oracle strongly recommends applying the patches as soon as possible.<\/em>
\nThe Security Alert for OpenSSL Heartbleed vulnerability CVE-2014-0160 is the starting point for relevant information. It includes links to other important documents that provide a list of affected products and the patch availability information.<\/em>
\nAlso, it is essential to review the Security Alert supporting documentation referenced in the Advisory before applying patches, as this is where you can find important information.<\/em>
\nThe Security Alert for OpenSSL Heartbleed vulnerability CVE-2014-0160 is available at the following location: Oracle Technology Network: http:\/\/www.oracle.com\/technetwork\/topics\/security\/alert-cve-2014-0160-2190703.html<\/span><\/span><\/a><\/span><\/span><\/em>
\nAll Oracle Critical Patch Updates and Security Alerts are available at the following location: Oracle Technology Network: http:\/\/www.oracle.com\/technetwork\/topics\/security\/alerts-086861.html<\/span><\/span><\/a><\/span><\/span><\/em><\/p>\n