This security alert has been published couple of days ago, see http://www.dbdomain.com/news.htm#security

Here is an OTN (aka Technet) page that deals with the security allerts and also provides (links to) some of the patches that can be applied
http://otn.oracle.com/deploy/securit...nfo&alerts.htm