Oracle has announced plans to ship a Critical Patch Update with fixes for at least 38 security vulnerabilities in a wide range of database and server products.