Oracle publishes CVRF on a quarterly basis with a few critical out-of-cycle CVRF.

The quarterly CVRF can include dozens of vulnerabilities.

This will reimport all the Oracle CVRF