Security | Oracle Critical Patch Update - October 2009

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required (because of interdependencies) by those security patches. Critical Patch Updates are cumulative, except as noted below, but each advisory describes only the security fixes added since the previous Critical Patch Update. Thus, prior Critical Patch Update Advisories should be reviewed for information regarding earlier accumulated security fixes. Please refer to:

Critical Patch Updates and Security Alerts for information about Oracle Security Advisories.

Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply fixes as soon as possible. This Critical Patch Update contains 38 new security fixes across all products.

Notice of Upcoming Upgrade For My Oracle Support

My Oracle Support, Oracle’s next-generation support platform, will soon be upgraded, and Classic MetaLink will be retired. A number of additional features will be available through My Oracle Support, including ones that improve the patch management experience. As a result, after the upgrade, customers attempting to download CPU fixes will see a new Patches & Updates interface. In addition, customers will be required to have an Oracle Single Sign-On (SSO) account to access the My Oracle Support portal, and authorization rules for downloads will be more strictly enforced. Oracle recommends that customers verify or create their SSO account and review their support contracts to ensure they have the proper licenses in place to download the patches needed for the vulnerabilities described in this Critical Patch Update. To verify or create your SSO account, simply log in to My Oracle Support/Classic MetaLink prior to the upgrade and you will automatically be prompted to verify your SSO login or create a new SSO login using your email address. For more information about the My Oracle Support systems upgrade, see the My Oracle Support Transition Information Page and FAQs.