Oracle is now pushing all 11.5.10 implementations even harder in terms of mandating minimum patch levels. The October 2006 Critical Patch Update (CPU) will require at least ATG_PF.H.RUP3 and ATG_PF.H.RUP4 is recommended. These patches are not included in the base for any 11.5.10 release including CU2. 11.5.7, 11.5.8, and 11.5.9 customers must be at the minimum baseline in
Metalink Note ID 363827.1 -- the baseline is constantly updated and with the latest update being August 31, 2006.
These are recently released patches (RUP3 = February 2006 and RUP4 = August 2006) and are not minor patches, both are around 270MB with 9,000 files. The patches also include new functionality, like support for case-sensitive passwords. RUP4 requires the latest AD update AD.I.4.
The mandatory requirements for Critical Patch Updates will be consistent moving forward with at least the current or previous ATG RUP being required in order to install the CPU patches. This corresponds with the requirements of a recent AD minipack (at least AD.I.4) and a recent database patchset (at least 184.108.40.206). Many organizations are now facing a significant patching and testing challenge to apply security patches.
Metalink Note ID 363827.1 "Rebaselined Oracle Applications Technology Components for Releases 11.5.7, 11.5.8, 11.5.9, and 11.5.10"
11i.ATG_PF.H RUP3 = Patch 4334965 = Metalink Note ID 337274.1
11i.ATG_PF.H.RUP4 = Patch 4676589 = Metalink Note ID 365228.1