Oracle Java 7 Update 13 Released

[Arthur]

Time for another Java update!

 

Java SE 7 Update 13

Download (Windows: 32-bit, 64-bit) / Release Notes

 

Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply Critical Patch Update fixes as soon as possible. This Critical Patch Update contains 50 new security fixes across Java SE products.

 

In addition to a number of security in-depth fixes, the February 2013 Critical Patch Update for Java SE contains fixes for 50 security vulnerabilities. 44 of these vulnerabilities only affect client deployment of Java (e.g., Java in Internet browsers). In other words, these vulnerabilities can only be exploited on desktops through Java Web Start applications or Java applets. In addition, one vulnerability affects the installation process of client deployment of Java (i.e. installation of the Java Runtime Environment on desktops). Note also that this Critical Patch Update includes the fixes that were previously released through Security Alert CVE-2013-0422.

 

3 of the vulnerabilities fixed in this Critical Patch Update apply to client and server deployment of Java; that means that these vulnerabilities can be exploited on desktops through Java Web Start and Java applets in Browser, or in servers, by supplying malicious input to APIs in the vulnerable server components. In some instances, the exploitation scenario of this kind of bugs on servers is very improbable; for example, one of these vulnerabilities can only be exploited against a server in the unlikely scenario that the server was allowed to process image files from an untrusted source.

 

Finally, 2 of the vulnerabilities fixed in this Critical Patch Update only apply to server deployment of the Java Secure Socket Extension (JSSE). (Source)

 

http://i.imgur.com/ed63Nxc.jpg

 

Edit. Just noticed CyberNerd's thread in 'General Chat', but thought it would be useful to have a thread in the 'Downloads' forum too so that more people see it.

Edited February 2, 2013 by Arthur

[SYNACK]

Update 14 fixes all of the issues by simply uninstalling it completely.

[CyberNerd]

Update 14 fixes all of the issues by simply uninstalling it completely.

 

Hey, why not go the distance and just unplug the internet.

[SYNACK]

Hey, why not go the distance and just unplug the internet.

 

Now your talking sense :-)

[free780]

Just

Another

Vulnerability

Announcement

[CyberNerd]

lmfao.

[free780]

Its from Security Now last week.