Thursday, May 03, 2012

Advanced Security Option for Free

In an attempt to make right what somewhat backfired, the Advanced Security Option is now for free (probably not always - check with your local store!):

"However, RAC customers who were previously not licensed for Oracle Advanced Security need not be concerned about a licensing restriction as Oracle has updated its licensing to allow these customers a restricted use of these features (namely SSL and TLS) to protect themselves against vulnerability CVE-2012-1675. In other words, Oracle has added Oracle Advanced Security SSL/TLS to the Enterprise Edition Real Application Clusters (Oracle RAC) and RAC One Node options, and added Oracle Advanced Security SSL/TLS to the Oracle Database Standard Edition license when used with the Real Application Clusters" 

For more info, and why you should be concerned, see this Oracle blog entry, and this CVE Warning.