Oracle updates users on Heartbleed progress