Oracle Delays Security Patches For OpenWorld

Hmm. So, rather than affect attendance for their conference Oracle has opted to hold off releasing security patches? Um, yeah.

From Computer World:

Oracle database administrators who are worried they might have to skip Oracle’s user conference next month to fiddle with security updates can relax. Oracle is cutting them a break and releasing its next set of patches a week later than planned.

The updates, which are released on a set schedule every three months, had been due for release on Oct. 13, slap in the middle of Oracle’s OpenWorld conference in San Francisco. But after thinking things over, Oracle has decided to delay the patches. They’re now due on Oct. 20.

Now, does this mean that we can expect to see a metric pantload of zerodays hit in early October? The thought occurred.

Article Link

Here is a copy of the email from Oracle Security on the topic.

Critical Patch Update – October 2009

There is a change in the previously announced release date of the October 2009 Critical patch Update.

Since many Oracle customers with responsibility for deploying the Critical Patch Update within their respective organizations will be attending Oracle OpenWorld October 11-15, 2009, the October 2009 Critical Patch Update originally scheduled to be published on Tuesday, October 13th 2009, will be released on October 20th 2009.

Please note: This date change only impacts the October 2009 Critical Patch Update. As usual, Oracle will issue a pre-release announcement on the Thursday before the publication of the Critical Patch Update (Thursday, October 15th). All other aspects of the Critical Patch Update (where to find the documentation, how to download the patches, etc.) remain the same.

The next four Critical Patch Update release dates are:

* October 20, 2009
* January 12, 2010
* April 13, 2010
* July 13, 2010

You will be notified via email once the Critical Patch Update for October 2009 has been released.

Sincerely,
Oracle Security Alerts