http://www.eweek.com/article2/0,1759,1912228,00.asp?kc=EWRSS03119TX1K0000594

http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html

82 patches sounds like a high number - seems as though they may be following a trustworthy initiative similar to MS and reviewing the codebase for obvious security holes.

http://www.microsoft.com/mscorp/twc/default.mspx