The Critical Patch Update for January 2014 was released on January 14th, 2014.
Oracle strongly recommends applying the patches as soon as possible.
The Critical Patch Update Advisory is the starting point for relevant information. It includes the list of products affected, pointers to obtain the patches, a summary of the security vulnerabilities for each product suite, and links to other important documents. Supported products that are not listed in the "Supported Products and Components Affected" section of the advisory do not require new patches to be applied. Critical Patch Update Advisories are available at the following location: Oracle Technology Network: http://www.oracle.com/technetwork/topics/security/alerts-086861.html The Critical Patch Update Advisory for January 2014 is available at the following location: Oracle Technology Network: http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html