What’s New in Oracle 19.28 [19c with July 2025 RU]

Oracle has just released their quarterly Oracle database security patches (july 2025). This quarter 6 security vulnerabilities were patched and new features and enhancements were introduced.

Lately (for the last few quarters) Oracle has introduced many good and new features in 19c [ so far the long term release] !

After Applying 19.28 RU a new set of system parameter were introduced:

NAME TYPE VALUE


mfa_duo_api_host string
mfa_oma_iam_domain_url string
mfa_sender_email_displayname string
mfa_sender_email_id string
mfa_smtp_host string
mfa_smtp_port integer 587

its related to : Oracle Database Multifactor Authentication (MFA) : https://blogs.oracle.com/database/post/new-mfa-jul2025

Another new enhancement is in Unified Auditing where a set of “Real Application Security” Audit actions were added to multiple pre-configured audit policies such as ORA_CIS_RECOMMENDATIONS

in 19.27 :

select * from AUDIT_UNIFIED_POLICIES where policy_name=’ORA_CIS_RECOMMENDATIONS’ and AUDIT_OPTION_TYPE=’XS ACTION’;

in 19.28:

select * from AUDIT_UNIFIED_POLICIES where policy_name=’ORA_CIS_RECOMMENDATIONS’ and AUDIT_OPTION_TYPE=’XS ACTION’;

Oracle 23ai Enhancement To  Monitor DATA PUMP Operations Through New Built-In Views

New and nice feature introduced in 23ai is the ability to view the progress of datapump operations through database views:

I will create a dummy account called “tim” and will grant the account “DBA” role.

SQL> alter session set container=FREEPDB1;

Session altered.

SQL> create user tim identified by tim123;

User created.

SQL> grant DBA to tim;

Grant succeeded.

SQL> alter user tim default role all;

User altered.

And I will define a directory :

SQL> create directory tmp as ‘/tmp’;

I will then execute the following export datapump command for simualtion (will take full pluggable database export backup):

expdp tim/tim123@//localhost:1521/FREEPDB1 directory=tmp FULL=Y dumpfile=test_dump.dmp logfile=EXP_TEST.log

The following view will show the account used for the export and operating system process id’s (SPID):

Wait event as shown below is “db file sequential read” for the datapump job: