Java 7 Update 21 closes security holes and restricts applets

snoopy · Apr 18, 2013

Java 7 Update 21 closes security holes and restricts applets

Java alert icon With Java 7 Update 21, Oracle has made available a patch release that can be regarded as important. The release includes 42 patches that fix security issues; Oracle says that 39 of these issues potentially allow attackers to take control of computers without authentication. In view of the numerous recent attacks on the Java platform, Oracle recommends that users install the new update as soon as possible. Nineteen of the security holes that have been fixed with the new update are explicitly rated at the highest Common Vulnerability Scoring System (CVSS) level of 10; many other flaws would be equally critical, but are rated lower by Oracle because they are more complex to access and exploit.

The update advisory lists the vulnerabilities and the pattern is familiar to anyone who has looked at the most recent set of updates' advisories. The list of flaws includes 7 critical flaws in the 2D graphics system, with other flaws spread throughout the various subcomponents of Java. Oracle also unexpectedly released an update for Java 6, Java 6 Update 45, which addresses a subset of applicable vulnerabilities in the older Java release; Java 6 had been expected to be end-of-lifed for security updates, but Oracle does appear to be keeping going with updates for Java 6 while trying to clear the current onslaught of security vulnerabilities.
Click to expand...

More details here: http://www.h-online.com/security/ne...rity-holes-and-restricts-applets-1843558.html

Log in or Sign up

Java 7 Update 21 closes security holes and restricts applets

snoopy Registered Members

Share This Page

Log in or Sign up

Java 7 Update 21 closes security holes and restricts applets

snoopy Registered Members

Share This Page

Useful Searches