Doug Burns wrote a great piece about how few people apply the latest patchsets and how almost no one applies the CPUs.

While my databases are all 10.2.0.2, I've only just begun looking at applying CPUs starting with the October CPU (they are cumulative).

We were also looking at finally upgrading to 10.2.0.3, then Laurent Schneider informed me that 10.2.0.4 is due out this year. Of course the reason we didn't upgrade to 10.2.0.3 when we had opportunities in the past was due to a lot of horror stories from the early adopters.