Here is a latest patch from oracle .
Critical Patch Update - October 2007
The Critical Patch Update for October 2007 is now available. Oracle strongly recommends applying the patches as soon as possible.
The Critical Patch Update Advisory is the starting point for relevant information. It includes a list of products affected, pointers to obtain the patches, a summary of the security vulnerabilities, and links to other important documents. Supported Products that are not listed in the "Supported Products and Components Affected" Section of the advisory do not require new patches to be applied.
Also, it is essential to review the Critical Patch Update supporting documentation referenced in the Advisory before applying patches, as this is where you can find important pertinent information.
The Critical Patch Update Advisory is available at any of the following locations: The next four Critical Patch Update release dates are:
- January 15, 2008
- April 15, 2008
- July 15, 2008
- October 14, 2008
Oracle Security Alerts
Thank you for your time to update