Oracle Adds Monthly Security Updates for Critical Vulnerabilities
Summary
Oracle will add monthly Critical Security Patch Updates alongside its quarterly releases, starting May 28. Oracle-managed cloud services will receive updates automatically; self-managed customers must apply them.
Key points
- Oracle's first monthly Critical Security Patch Update (CSPU) is scheduled for May 28, followed by releases on June 16 and August 18.
- The July quarterly Critical Patch Update will include new security fixes and patches from earlier CSPUs.
- Oracle-managed cloud services will receive updates automatically; customers managing their own environments must apply the patches.
- Oracle says broader use of AI in code analysis, security testing, and vulnerability detection has helped it find vulnerabilities and deliver fixes faster.
Article Details
- Event Type
- Oracle announced monthly Critical Security Patch Updates (CSPUs) to supplement its quarterly Critical Patch Updates (CPUs).
- Impact
- The monthly releases are intended to let self-managed customers apply fixes for critical-severity vulnerabilities sooner; customers using Oracle-managed cloud services will receive updates automatically. Oracle says the change is supported by its use of AI for code analysis, security testing, and vulnerability detection. The article does not identify specific vulnerabilities or affected products.