Oracle October 2021 Critical Patch Update Addresses 231 CVEs

On October 19, Oracle released its Critical Patch Update (CPU) for October 2021, the fourth and final quarterly update of the year. This CPU update contains fixes for 231 CVEs in 419 security updates across 28 Oracle product families. 

Out of the 419 security updates published this quarter, 8.6% of patches were assigned a critical severity. High severity patches accounted for the bulk of security patches at 47.3%, followed by medium severity patches at 40.6%. This quarter, the Oracle Communications product family contained the highest number of patches at 71, followed by MySQL at 66 patches. This month, there were four product families that did not receive security patches from Oracle, but they still contain third-party patches included as part of the CPU release.

For more information about the vulnerabilities, including the availability of patches and Tenable product coverage, please visit our blog.