Regarding the Bash vulnerability CVE-2014-7169 / CVE-2014-6271. I can find the document for install

Fix for CVE-2014-6271

==================

  On
database nodes, obtain and update updated bash packages including the following
versions, or later:

 

bash-3.2-33.el5.1.x86_64

 

This
package may be obtained via public-yum.oracle.com.

To
install this package on DB nodes, the exadata-sun-computenode-exact RPM must be
removed first.

remove
exadata-sun-computenode-exact and install the newer bash:

rpm -e exadata-sun-computenode-exact

rpm -Uvh <new bash rpm>

On the cells:

rpm -Uvh --nodeps <new bash rpm>