Oracle Releases Java Update
© rore
Oracle has released a Java update that patches 27 security vulnerabilities.
"The new versions are Java, JDK and JRE 6 Update 19," writes PC Mag's Larry Seltzer. "JDK and JRE 5.0 Update 24 and SDK 1.4.2_26 are also updated, but have reached End of Service Life and are only supported on Solaris 9 and 10."
"Notable changes are the addition of seven new root SSL certificates and replacement of some older ones with new and improved versions, as well as the implementation of a warning dialog for Java Web Start applications that mix signed with unsigned code," according to Softpedia.
"While Oracle did not specifically disclose whether the flaws could allow an attacker to execute malicious code on a targeted system, the company noted that all 27 of the flaws could be remotely targeted and exploited without user authentication," writes V3.co.uk's Shaun Nichols.
More here from Watching the Watchers … more here from eSecurity Planet … and more here from ZDNet.