Urgent ! Update your Java SE for security reasons!

[borka]

Oracle Java Security Alert:
http://www.oracle.com/technetwork/topic ... 35710.html

Java SE 7u7 JRE and 6u35 JRE AutoDL

http://www.java.com/en/download/manual.jsp 7u7
http://www.java.com/en/download/manual_v6.jsp 6u35

Java SE 7u7 JDK
http://www.oracle.com/technetwork/java/ ... 36413.html

HDI Java topic with manually urls updated too!
viewtopic.php?f=2&t=28086

JAVA SE (Standard Edition - for "Desktop Computers") = JRE (Java Runtime Environment) for Consumers and JDK (Java Development Kit - contains JRE ) for Developers

as it's an update for Java SE it's JRE aswell as JDK

[Phoenix246]

?

[borka]

Hope that clears up at length and in depth - have a lot of fun studying!

i.e. :
http://www.kb.cert.org/vuls/id/636312
http://www.h-online.com/security/news/i ... 76219.html


3 of those security flaws that got fixed was giving a 10 in Security Score by Oracle - which is highest...sadly they needed long time to fix (flaws where known since April http://seclists.org/bugtraq/2012/Aug/182) but i guess with having an exploit in the wild it got priority http://immunityproducts.blogspot.com.ar/2012/08/java-0day-analysis-cve-2012-4681.html

...only 9 of 22 Antivirusprograms where able to block a proof of concept with that exploit in a test http://www.av-comparatives.org/
did for german publisher Heise ...

a quote from ww.heise.de (Germays most trusted independent Computer magazine publisher) - google translation:

One can assume that the exploit in the arsenal of cyber-crooks will enjoy great popularity for several years, since it is cross-platform and very reliable. How reliable it is, if we look at the statisticshttp://blog.seculert.com/2012/08/java-0-day-blackhole-king.html of an installation of blackhole attack kit: With the installation of the exploit, the success rate of the Java exploits is 75 to 99 percent. Overall, one in four Black Hole infect computers - usually it works only in one in ten cases

[zmurrell]

plz borka do me a favor and speak basic engrish :3 i dun undastand

[Kaios]

I think he's saying there's an on-going issue with one of the Java SE versions that allows hackers to backdoor(?) in to your computer or something and fuck shit up.

So basically if you use Java SE, update it.

[Tonkyhonk]

SE are those developers versions, right?
JRE/JDK for customer versions have no issues so far?

[Kaios]

Right. No mention of JRE or JDK so I would assume they are safe.

[borka]

geez i made the OP title simple to understand, also the OP...the second one was just a ( bit ironical) response to the second post....

updated OP ...

there are also Java EE (Enterprise Edition - Business) - ME (Micro Editon - i.e. TV settop boxes)
http://en.wikipedia.org/wiki/Java_(software_platform)

[Tonkyhonk]

lol now you finally see some ppl never understand these
ok, i meant JRE, but i guess id better update it too then.

[Kaios]

stop getting rid of and editing your posts borka they're fine!!!!!!!!