Oracle has released their critical updates list.  Looking through it there is a very wide range of products, including java that require a fix.  Oracle "strongly recommends that customers remain on actively-supported versions and apply Critical Patch Update fixes without delay."