Oracle recommends that customers get all their security vulnerability information from Oracle Critical Patch Update Advisories available from links at Critical Patches, Security Alerts and Bulletins. It is strongly recommended that all critical patches be applied in a timely manner.

Additional full details are available at Oracle Software Security Assurance.