Oracle recommends that customers get all their security vulnerability information from Oracle Critical Patch Update Advisories available from links at Critical Patches, Security Alerts and Bulletins. It is strongly recommended that all critical patches be applied in a timely manner.

Additional details are available on Oracle Software Security Assurance website.