Proactive insights, news and tips from Oracle Fusion Middleware Support. Learn Oracle from Oracle.

Oracle Critical Patch Update for July 2018

Phil Catalano
Principal Technical Support Engineer

The Critical Patch Update for July 2018 was released on July 17th, 2018.
Oracle strongly recommends applying the patches as soon as possible.

The Critical Patch Update Advisory is the starting point for relevant information.
It includes the list of products affected, pointers to obtain the patches, a summary of the security vulnerabilities for each product suite, and links to other important documents. Supported products that are not listed in the "Affected Products and Components" section of the advisory do not require new patches to be applied.

Also, it is essential to review the Critical Patch Update supporting documentation
referenced in the Advisory before applying patches, as this is where you can find important pertinent information.
Critical Patch Update Advisories are available at the following location:

Oracle Technology Network: http://www.oracle.com/SecurityAlerts

The Critical Patch Update Advisory for July 2018 is available at the following location:

Oracle Technology Network: http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

Important information can also be found at: https://blogs.oracle.com/security/

The next four dates for Critical Patch Updates are:

  • October 16, 2018
  • January 15, 2019
  • April 16, 2019
  • July 16, 2019

Join the discussion

Comments ( 2 )
  • Daniel Ellison Thursday, August 9, 2018
    CPU lists fixes for all kinds of things yet does not show HOW TO get them applied. Why not?
  • Phil Catalano Friday, August 10, 2018
    Hi Daniel,

    You are correct, the CPU document doesn't have the How To in it, it's a few clicks away. Once you find the product/version you're interested in in the CPU, you need to click on the associated "Patch Availability Document" link.

    For example, say you were interested in Oracle WebCenter Portal, you would find that entry and then click on the Fusion Middleware "Patch Availability Document" link. This would bring you to the "Critical Patch Update (CPU) Program July 2018 Patch Availability Document (PAD) (Doc ID 2394520.1)" document. Once there, you would then find the Oracle WebCenter Portal entry and you would see the two patches: Oracle WebCenter Portal BP Patch 27989235 or later AND WebCenter Core Bundle Patch Patch 28330217 or later. Each of those two patches has a link to the actual patch and once you click on those links it would bring you to the actual patch, for example Patch 27989235. Once you get to the actual patch it has the "Read Me" file and the Download button to download the patch. The Read Me file has all of the instructions on how to install the patch.

    It's probably done this way because there are so many different products with so many different patches that everything couldn't fit on one page. Plus, there are different formatting and installation procedures for the different products so each one has it's own patch and Read Me formats, so each one needs to be presented separately and therefore ends up being a kind of tiered approach to get to the patch of interest.

    Hope that helps.

Please enter your name.Please provide a valid email address.Please enter a comment.CAPTCHA challenge response provided was incorrect. Please try again.