Oracle ignores a vuln for 4 years, then refuses to patch older versions because it's too hard, and leaves as 0day. No one else could do this SecuObs - L'observatoire de la sécurite internet - Site d'informations professionnelles francophone sur la sécurité informatique