David Litchfield Fixed Quotations

This is a very critical issue and it's disappointing that Oracle hasn't fixed it, especially since the workaround is rather simple.

We disclosed this to Oracle on Oct. 25 last year. Around the same time, they were alerted to another high-risk flaw that is not as serious as this one. They fixed that one in the January CPU but neglected to fix this. It's not a case of not having enough time, because the fix is trivial and the risks are severe.