Flaw hunters pick holes in Oracle patches

Oracle's massive bundle of 88 patches last week could use some patching itself for missing some components that security experts expected to be included. Details of the as-yet unpatched (or in some cases, mis-patched) flaws aren't clear, but this is part of a trend for Oracle. In many cases, Oracle just works around flaws instead of correcting them, said David Litchfield, a prominent researcher in the UK. Security is an aspect where Oracle can learn some modesty from Microsoft.

For more on the patch critiques:
- read this News.com article