Security Alert #68 - patchsets required on client software also?

I'm really hoping that Oracle changes their position on this one ... but in case someone has already obtained more info on this issue already ...

What is your company's position on applying the patchsets covered by Oracle Security Alert #68 - to the Oracle Client Software already installed on desktops and application servers (not the Oracle Database server(s)).

This is mentioned (in no detail) in the following doc:

http://metalink.oracle.com/metalink/plsql/showdoc?db=Not&id=282108.1

Item #21.

21. Is the Database Client install equally vulnerable?

    Yes, according to Development, all database clients on all versions have to be patched also. The same patch for the database server can be applied on the client installation also.

thanks in advance for your opinions.

Paul

--
http://www.freelists.org/webpage/oracle-l