Oracle releases software update to fix Java vulnerability

Oracle released an emergency software update today to fix a security vulnerability in its Java software that could allow attackers to break into computers.

The update, which is available on Oracle's Web site, fixes a critical vulnerability in Oracle's Java 7 that could allow a remote, unauthenticated attacker to execute arbitrary code. The attack can be induced if someone visits a Web site that's been set up with malicious code to take advantage of the hole.

Read more at source:
Oracle releases software update to fix Java vulnerability | Security & Privacy - CNET News

 

[NoelDP]

...and the next question is - did they break anything else with the fix?
... does the fix actually fix all the known variants of the exploits already out there?

 

[NoelDP]

...and you have to reset the browser permissions, if you want to download using the updater.

Java is looking more and more to be inherently vulnerable.

 

[gemhunter]

...and the next question is - did they break anything else with the fix?
... does the fix actually fix all the known variants of the exploits already out there?

And TWO new vulnerabilities come to light:

https://threatpost.com/en_us/blogs/...ken-two-new-sandbox-bypass-flaws-found-011813

Al

 

[townsbg]

I suppose that it's not yet time to update.

 

[NoelDP]

Probably better to rip it out completely unless you actually *need* it!

 

[townsbg]

Well I am decomming my system and giving it away.