Given Oracles tardiness in fixing a remote security issue with there database product this year and they make alot of $ from that product then this is not a sup

Given Oracles tardiness in fixing a remote security issue with there database product this year and they make alot of $ from that product then this is not a supprise. Why woulc Oracle be so tardy in fixing security issues is the big question as it appears there approach recently is: 1) get told of a security issue. 2) ???? 3) Release fix once issue is out in wild/publicly known Given there history and how they got started and there connections thru large contracts then it is not impossible that they were asked to hold back and/or offered to hold back on a patch. Rememebr security issues are more than that these days, they are after all gradualy replaceing Nuclear weapons as they can be used and abused as the fallout is less unferstood and in that they are not the stand-off weapons which nukes are and given that they are opening up entirly new theartes of war. Thing is until Oracle explains there delays in addressing recent security issues in there database and now java, then people will and rightly so speculate as to there motivations in acting in the way they have. [EDIT ADD] some background on Oracles patch approach this year http://www.esecurityplanet.com/network-security/oracle-database-security-flaw-remains-unpatched.html http://www.esecurityplanet.com/network-security/oracle-datab...