Big Java Critical Update Forthcoming

Once again the security Swiss cheese that is Java is being patched to try to staunch the flow of leaks due to security vulnerabilities. This Tuesday, June 18th, no less than forty items are being patched.
Of the 40 bugs, all but three are remotely exploitable over a network without the need for a username or password.
Yes, that's bad. Oracle ranks the severity of its flaws using the Common Vulnerability Scoring System (CVSS), and the top-ranked bug in this particular update rates a 10.0 – the highest possible score.
"Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply Critical Patch Update fixes as soon as possible," the database giant helpfully suggests.

No comments:

Post a Comment