Oracle says it has found a way to get the fix out for 9.2.0.8 on Windows users. Security researcher David Litchfield first discussed the bug in 2005. He says he first reported the bug to Oracle in 2002. Oracle said this fix would come on April 30, but now it looks like it has been fixed. The fix will be available once you’ve finished testing, so you can rest a bit easier once you have done so so, once you’re done.”]
Source: https://www.csoonline.com/article/2136806/oracle-releases-delayed-windows-database-patch.html