Oracle today release the January 2025 Critical Patch Update.
This Critical Patch Update provides security updates for a wide range of product families, including: Oracle Database Server, Oracle Application Express, Oracle Big Data Spatial and Graph, Oracle Blockchain Platform, Oracle GoldenGate, Oracle REST Data Services, Oracle Secure Backup, Oracle TimesTen In-Memory Database, Oracle Commerce, Oracle Communications Applications, Oracle Communications, Oracle Construction and Engineering, Oracle E-Business Suite, Oracle Enterprise Manager, Oracle Financial Services Applications, Oracle Fusion Middleware, Oracle Analytics, Oracle Health Sciences Applications, Oracle Hospitality Applications, Oracle Hyperion, Oracle Insurance Applications, Oracle Java SE, Oracle JD Edwards, Oracle MySQL, Oracle PeopleSoft, Oracle Policy Automation, Oracle Retail Applications, Oracle Siebel CRM, Oracle Supply Chain, Oracle Systems, Oracle Utilities Applications, and Oracle Virtualization.
On November 18, 2024, Oracle released Security Alert CVE-2024-21287 for Oracle Agile PLM Framework. Customers are strongly advised to apply the January 2025 Critical Patch Update for Oracle Agile PLM Framework as it includes patches for this Alert as well as additional patches.
For more information about the January 2025 Critical Patch Update, customers should refer to the Critical Patch Update advisory located at https://oracle.com/security-alerts/cpujan2025.html and the executive summary published on My Oracle Support (Doc ID 3053653.1).
For more information about the Critical Patch Update program, see the security vulnerability remediation practices page located on the Oracle Trust Center.
With over 20 years experience in helping customers deal with securing complex IT systems, responding to cyber incidents, and developing comprehensive security strategies to manage technological risks and meet regulatory requirements, Eric Maurice helps define corporate security assurance policies and programs for Oracle’s on-premises and cloud offerings.