Is It Safe to Use Information about Oracle Security Vulnerabilities from Third-Party Sites?
The information available on non-Oracle sites is not approved by Oracle. Some sites offer misleading information by providing only a small part of the vulnerabilities covered by the Oracle Critical Patch Update or Security Alert. Third-party sites may suggest workarounds that are incorrect, incomplete or untested and following such advice can lead to system damage. Oracle strongly recommends that customers rely only on information provided by Oracle, specifically the Critical Patch Update documentation.