Oracle Critical Patche Updates and Security Measures

[pleg]

Hi everyone,

I'm curious to know how often do you apply CPU's and are you only relying on CPUs for security?

How about versions that are not currently on Oracle premier or extended support like 11.2.0.3 or 10g?