We know it will break a number of Oracle products higher in the stack than the Oracle Application Server that the vulnerability exists in.

We are always disappointed when researchers feel the need to publish details of vulnerabilities before a fix is available. What David Litchfield has done is put our customers at risk.

Our plans are to keep trying to improve patches and the amount of testing we can do.

When the train is completed that will be the lure. So what do we do until then? We can't let it drop until we have the train. We have to be getting ready for it.

It's going to be a long and expensive process that will require a lot of reframing and reconstruction to make it work,

I've already gotten a bunch, so I'm hoping it will clear up a bit.