What is the Oracle Critical Patch Update Program?
Oracle has changed the method and schedule of which they deliver security patch updates and security fixes for all of their products.From 2005, Oracle provide Critical Patch Updates (CPU) for all product offerings on a quarterly schedule. The comprehensive patches address significant security vulnerabilities and include fixes that customers are likely to apply, or are prerequisites for the security fixes. CPU patches are cumulative for database products. This means that the database patch in the latest CPU include fixes for all earlier CPUs unless stated otherwise.