11i: October 2006 Critical Patch Update 9.2.0.8 Database Patch

Two weeks after the initial release of the October 2006 Critical Patch Update (CPU) Advisory, Oracle added information about the Oracle Database 9.2.0.8 being vulnerable and about a patch being available in the future.  The 9.2.0.8 patch release date keeps getting pushed back and is now scheduled for December 22 on Unix/Linux and December 15 for Windows (5 days ago).

The Oracle E-Business Suite Note for the CPU (Metalink Note ID 391564.1) has not been updated to show the required 9.2.0.8 patch.  If you have upgraded to 9.2.0.8, then you need to apply the CPU security patch when it becomes available as it corrects a number of high-risk vulnerabilities.