Are previously-released security fixes included in the Critical Patch Update?
Critical Patch Update patches for most products are cumulative; that is they will include all fixes for that product from the previous Critical Patch Updates. The products with cumulative Critical patch Update patches are listed on http://www.oracle.com/us/technologies/security/cpu-products-168427.pdf.