By Ionut Arghire
Publication Date: 2026-05-06 06:32:00
Starting this month, Oracle is supplementing quarterly Critical Patch Update (CPU) fixes with monthly security releases focused on high-priority vulnerabilities.
The first monthly Critical Security Patch Update (CSPU) will be released on May 28 and addresses critical vulnerabilities in the company’s products.
A second CSPU follows on June 16th and a third on August 18th. In July, Oracle will release the usual quarterly CPU, which will contain fixes for new security flaws as well as the patches included in the previous CSPUs.
“This approach enables customers in customer-managed environments to reduce risk by applying critical fixes sooner, without having to wait for the next quarterly cycle,” the company said says.
As before, organizations using Oracle-managed cloud services will receive the new security updates automatically, while self-managed customers will need to apply the fixes themselves.
The move to a faster patch rollout is, according to Oracle…
