Security Oracle plugs security holes: Updates for Java 1.4 to 7

[J65nko]

From http://h-online.com/-1806784

On Tuesday night, Oracle published the promised update for the emergency "Critical Patch Update" that the company released earlier than scheduled, three weeks ago. The update affects all Java runtime environments from version 1.4 up to and including the current version 7.

This update is designed to close three holes with the highest threat rating of 10. These vulnerabilities have the CVE identifiers CVE-2013-1484, CVE-2013-1486 and CVE-2013-1487 and can be exploited remotely without authentication. They affect libraries, deployment components and, once again, JMX; the Java Management Extensions were at the centre of the holes discovered by security researcher Adam Gowdiak.

[asemisldkfj]

I do some work as a Windows syadmin and these Java vulnerabilities are starting to drive me completely insane. Never mind Flash and Reader/Acrobat.