Secure Transport (COST) to Restrict Instance Registration Oracle 12c
Hi there,
I'm having a question relating to Oracle Security Alert CVE-2012-1675
I'm running Oracle Database Enterprise release 12.1.0.2.0 on Linux 6.7 (non RAC) with primary and standby.
I have read that Oracle recommends to install bug fix 12880299 and add "SECURE_REGISTER_[listener_name] = (TCP)" to the listener.ora
However it seems that this patch is quite old (2013?). I have recently installed PSU Jan 2016 but I haven't seen patch 12880299 listed.
Therefore, I'm not sure whether I need to install this patch or just add the line in the listener.ora file.
Could you please shed some light in there?
Thank you