https://www.oracle.com/security-alerts/
Critical Patch Updates, Security Alerts and Bulletins 
This page lists announcements of security fixes made in Critical Patch Update Advisories, Security Alerts and Bulletins, and it is updated when new Critical Patch Update Advisories, Security Alerts and Bulletins are released.
- Instructions for subscribing to email notifications of Critical Patch Update Advisories and Security Alerts.
- Oracle Corporate Security Blog
- Guidelines for reporting security vulnerabilities
This page contains the following sections:
- Critical Patch Updates
- Security Alerts
- Solaris Third Party Bulletins
- Oracle Linux Bulletins
- Oracle VM Server for x86 Bulletins
- Map of CVE to Advisory/Alert
- Policy on information provided in Critical Patch Update Advisories and Security Alerts
- Applicability of Critical Patch Updates and Security Alerts to Oracle Cloud
- References
Critical Patch Updates
Critical Patch Updates are collections of security fixes for Oracle products. They are available to customers with valid support contracts. They are released on the Tuesday closest to the 17th day of January, April, July and October. The next four dates are:
- 20 October 2020
- 19 January 2021
- 20 April 2021
- 20 July 2021
A pre-release announcement will be published on the Thursday preceding each Critical Patch Update release.
The Critical Patch Updates released since 2015 are listed in the following table. Critical Patch Updates released before 2015 are available here.