Organizations rely on Oracle Audit Vault and Database Firewall (AVDF) as critical security infrastructure for monitoring database activity, detecting suspicious behavior, and preserving audit evidence for investigations and compliance reporting. Keeping your AVDF deployment up to date helps protect that investment and maintain a reliable security foundation as threats evolve.
AVDF 20.19 is now available with important security updates across the AVDF software stack. Customers running AVDF 20.18 or any earlier supported release should apply AVDF 20.19 immediately.
Why apply AVDF 20.19
Keeping AVDF current supports a secure and reliable foundation for database activity monitoring, threat detection, incident investigation, and compliance.
Applying AVDF 20.19 helps organizations:
- Address important security vulnerabilities across the AVDF platform.
- Improve platform stability and reliability.
- Maintain visibility into activity across databases and other critical systems.
- Preserve a trusted audit trail for investigations and compliance reporting.
Security and Platform Updates in AVDF 20.19
AVDF 20.19 is a security-focused release that includes significant updates across the AVDF platform.
The release includes Oracle Database Server Release Update 19.33 for the underlying AVDF repository. The applicable CVEs are listed on the Oracle Critical Patch Updates page under the October 2026 Critical Patch Update.
Additional updates in AVDF 20.19 include:
- Security and stability fixes for underlying components, including Oracle APEX, Oracle REST Data Services, Oracle Java SE, Oracle Autonomous Health Framework, and Oracle GoldenGate.
- Security fixes for the embedded Oracle Linux 8.10 operating system.
- Java SE security fixes for CVE-2026-91403 and CVE-2026-114820, addressing the eMudhra certificate trust issues.
- Additional platform maintenance, reliability, and stability improvements across the AVDF software stack.
For the complete list of changes, enhancements, and resolved issues, see the AVDF 20.19 Release Notes.
Prepare for more frequent security updates
AVDF 20.19 is one update in an environment where AI shortens the time needed to discover and exploit vulnerabilities. Customers should be prepared to deploy important security fixes more often and with less notice than in the past.
Monthly Recommended Patches and the direct AVDF 20.19 update path
Starting with AVDF 20.18, release-specific Monthly Recommended Patches (MRPs) are made available as needed to address security vulnerabilities between Release Updates. These patches may include security fixes for the embedded Oracle Database, Oracle Linux, and other platform components.
Customers can update directly from AVDF 20.18 to AVDF 20.19 using the standard quarterly Release Update process, even when MRPs have been applied. There is no need to roll back or uninstall them.
Keep AVDF updates aligned with security operations
Include AVDF releases in regular security-patching processes. Keep audit collection, monitoring policies, alerts, reports, and retention requirements aligned with the evolving threat environment.
Plan a transition to Database Security Central
Database Security Central, built on the Oracle Audit Vault and Database Firewall foundation, is generally available. It offers an updated platform with a broader, unified approach to database security, expanded capabilities, and new features. Support for AVDF 20 ends in May 2027. Customers should plan their transition to Database Security Central to benefit from the new platform and continue receiving product support. For more information, review the Oracle Lifetime Support Policy for Technology Products.
Upgrade prerequisites
To upgrade to Database Security Central, customers must be running AVDF 20.14 or later. Customers on an earlier AVDF 20 release must first update their environment to AVDF 20.14 or a later release update.
Detailed prerequisites and step-by-step upgrade instructions are provided in the official Database Security Central product documentation.
Do not wait for known vulnerabilities to become security incidents. Update to AVDF 20.19 now.
Download or provision AVDF 20.19
- Existing AVDF deployment: Download patch 40170444 from My Oracle Support. To locate the patch, sign in to My Oracle Support, search for “Patches and Product Certification Matrix,” and then enter the patch number.
- New AVDF installation: Download AVDF 20.19 from the Oracle Software Delivery Cloud.
- AVDF on Oracle Cloud Infrastructure: Provision AVDF from the OCI Marketplace.
- AWS-compatible AMI: Download AVDF 20.19 from the Oracle Software Delivery Cloud.