Oracle Java 6 Update 34 and Java 7 Update 6 Released

[Arthur]

It's that time again!

Java SE 6 Update 34 (Recommended)
Download / Release Notes / Bugs Fixed

Java SE 7 Update 6
Download / Release Notes / Bugs Fixed

The Java 7 Update 6 Runtime Environment officially supports OS X now. Download via the link above.

[MatthewL]

Thanks for this.

[teejay]

Oh joy....

[Arthur]

A new zero-day vulnerability has been found so there is probably going to be another update from Oracle very soon.

Source: blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html

New Java zero-day vulnerability has been spotted in the wild. We have seen this unpatched exploit being used in limited targeted attacks. Most of the recent Java run-time environments i.e., JRE 1.7x are vulnerable. In my lab environment, I was able to successfully exploit my test machine against latest version of FireFox with JRE version 1.7 update 6 installed.

It's just a matter of time that a POC will be released and other bad guys will get hold of this exploit as well. It will be interesting to see when Oracle plans for a patch, until then most of the Java users are at the mercy of this exploit. Our investigation is not over yet; more details will be shared on a periodic basis.

[Arthur]

Oracle reportedly knew of critical Java bugs under attack for 4 months « Ars Technica