Sun Releases Java SE 6 Update 15

Filed in archive Security on August 7, 2009

Sun has released Java SE 6 Update 15, with revisions to both the Java SE development kit (JDK) and the Java runtime environment (JRE).

"With these versions, the developers fixed numerous bugs and resolved several security issues," according to The H Security. "One of the security problems gives untrusted applets access to a system, allowing attackers to gain control of a PC. Some of the holes are based on integer overflows when processing images and in connection with the Unpack200 JAR tool. Sun had to fix a similar flaw in the JAR tool in March 2009."

"It is Windows 7 support-ready and includes support for Internet Explorer 8, Windows Server 2008 SP2 and Windows Vista SP2," according to System News. "New features include the Garbage-First (G1) garbage collector, plus performance and security enhancements. The release has seven new root certificates, and the blacklist entries have been updated. The blacklist feature blocks certain signed JARs that contain serious security vulnerabilities that can be exploited by untrusted applets or applications. It will refuse to load any class or resource contained in a jar file that is on the blacklist."