Where can one get information about security alerts for Oracle products?
Security alerts for all Oracle products can be found on the Oracle Technology Network: http://otn.oracle.com/deploy/security/alerts.htm. Please refer to that website for information on contacting Oracle’s Security Alert team if you believe that you have identified a security vulnerability, or if you have questions about whether a particular security issue is resolved by a given Critical Patch Update.