The Latest Technology Stack News Directly from EBS Development

Critical Patch Update for October 2014 Now Available

Robert Farrington
Applications Technology Integration

The Critical Patch Update (CPU) for October 2014 was released on October 14, 2014.  Oracle strongly recommends applying the patches as soon as possible.

The Critical Patch Update Advisory is the starting point for relevant information. It includes a list of products affected, pointers to obtain the patches, a summary of the security vulnerabilities, and links to other important documents.

Supported products that are not listed in the "Supported Products and Components Affected" Section of the Advisory do not require new patches to be applied.

Also, it is essential to review the Critical Patch Update supporting documentation referenced in the Advisory before applying patches, as this is where you can find important pertinent information.

The Critical Patch Update Advisory is available at the following location:

The next four Critical Patch Update release dates are:
  • 13 January 2015
  • 14 April 2015
  • 14 July 2015
  • 13 October 2015

E-Business Suite Releases 11i and 12 Reference

Join the discussion

Comments ( 7 )
  • Stuart Flower Thursday, October 16, 2014

    Hi Steve

    I see in the October 2014 CPUs that it includes a new Combo OJVM and Database PSU patch which patches both the Oracle JavaVM and the database (GI etc).

    Is OJVM OK to apply to the underlying e-Business database or should we stick to just the database CPU?



  • Steven Chan Tuesday, October 21, 2014

    Hi, Stuart,

    Either is fine. You still have the choice of using either CPUs or PSUs with the E-Business Suite.



  • guest Thursday, October 30, 2014

    Hi Steven,

    From Oct 2014, we have another database security fix - OJVM PSU and article 1929745.1 (Oracle Recommended Patches - "Oracle JavaVM Component Database PSU" OJVM PSU Patches) highlights following:

    "Execution of dbms_java_dev.disable also: Revokes public access to DBMS_JAVA, DBMS_JAVA_TEST, DBMS_JAVA_MISC, SQLJUTL, SQLJUTL2 and JVMRJBCINV".

    Can you confirm, does above access required for normal EBS operation? If so, EBS user can't choose an option to apply Mitigation Patch instead of OJVM PSU patches.

    Your clarification on supportability of Mitigation Patch for EBS user is highly appreciated.



  • Robert Farrington Monday, November 3, 2014

    Hi Chirag,

    We will shortly be updating the EBS October CPU note to clarify your options here. Please check the note again in a day or two (you can see when it was last changed from the Last Update field in the header, and the change log).



  • Robert Farrington Tuesday, November 4, 2014

    Hi Chirag,

    Table 2 of the EBS October CPU note has been updated with recommendations and options on applying the patches in question.

    Be aware that Oracle E-Business Suite Development has performed basic sanity testing with the Mitigation Patch and has not yet seen any issues with it. However, the patch has not been through the complete CPU test cycle. The October CPU note will be updated with any issues that are found.



  • guest Wednesday, December 24, 2014


    When we are applying PSU patch for Database ( we are on ), we already applied PSU for OCT-2014. So can we apply the CPU patch for EBS now ( we are on 12.1.3 EBS Release ) - CPU Oct 2014.

  • Steven Chan Monday, December 29, 2014

    Hi, Guest,

    I can't say whether it's necessary, but you can certainly apply any combination of PSUs and CPUs that you wish. You can log a Service Request with Oracle Support if you need help with obtaining overlay patches for your desired combination.



Please enter your name.Please provide a valid email address.Please enter a comment.CAPTCHA challenge response provided was incorrect. Please try again.Captcha