Patches are at http://ap103aru.us.oracle.com/quicklinks/server.html

Since 8.1.6 has been desupported, I don't see any reason why NOT to upgrade to 8.1.7.4.