Oracle today released fixes for 36 vulnerabilities, marking one of the smallest patch updates since the database giant began issuing quarterly distributions more than two years ago.