Funny story: I raised a support request with Oracle last week to confirm if one of their products was vulnerable to Januscape.

When I got a copy-pasta ‘no’ I asked why there was an Oracle-issued advisory for kernels the product ships with.

A couple of days later they updated the SR with ‘yes, please update’

LOL