Every few months Oracle will release a new Critical Patch update - https://www.oracle.com/security-alerts/
As part of the Aternity EUE On-premise release we offer an OEM Oracle software, so patching the software is often needed based off vulnerablities