CVE-2014-0160 or ‘Heartbleed’
Oracle’s security and development teams are aware of the recently publicly disclosed vulnerability, which is reported to affect certain versions of OpenSSL (a.k.a. CVE-2014-0160; or ‘Heartbleed’).
Oracle is investigating the implications of this issue across the Oracle stack and has published a My Oracle Support Note. For information about affected products, availability of fixes and other mitigation instructions please see My Oracle Support Doc ID 1645479.1. This Note will be periodically updated as Oracle continues its assessment of the situation.