OK, last post on this subject, I promise (I might be lying though :)) - I have never seen so many news articles about one Oracle security subject. I had planned to list all of the news articles that I had found and those that Alex found here as a record of the story. But Alex beat me to it and created a Red Database Security in the news page that now looks more impressive than my in the news page. So there is no real point in me recounting the whole list here. If anyone would like to read a large quantity of news reports about Alex Kornbrusts six advisories for bugs that have not been fixed then please visit his Red Database Security in the news page.