Oracle will shift security patch releases for database and ERP applications from a quarterly to a monthly cycle. This change addresses the accelerated discovery of software vulnerabilities via artificial intelligence.
The new Critical Security Patch Updates (CSPUs) target customers using on-premises or non-Oracle cloud environments. Oracle-managed cloud services will receive these patches automatically.
The shift aligns Oracle with the monthly update schedules of Microsoft and SAP.