Java Patch Closes Security Holes

A new version of Sun's Java SE JRE 6 and JDK 6 fixes serious vulnerabilities.

A new Update 17 version for JRE and JDK closes some major risks, including "arbitrary code execution," according to US-CERT.

Sun's new software versions, released yesterday, also address privilege escalation, denial of service, and information disclosure vulnerabilities, according to US-CERT's post. Unless you've turned it off, Java will check for updates automatically, but will only do so once a month (on a day that varies per installation).

To grab the new version right away, double-click the Java icon in the Windows Control Panel to bring up the Java control panel.  Head to the Update tab, and then click the Update Now button.

To continue reading, register here and become an Insider. You'll get free access to premium content from CIO, Computerworld, CSO, InfoWorld, and Network World. See more Insider content or sign in.

A new Update 17 version for JRE and JDK closes some major risks, including "arbitrary code execution," according to US-CERT.

Sun's new software versions, released yesterday, also address privilege escalation, denial of service, and information disclosure vulnerabilities, according to US-CERT's post. Unless you've turned it off, Java will check for updates automatically, but will only do so once a month (on a day that varies per installation).

To grab the new version right away, double-click the Java icon in the Windows Control Panel to bring up the Java control panel.  Head to the Update tab, and then click the Update Now button.

Alternatively, you can download the new versions from Sun's Java site, which also has full details on both updates.

For more PC news, visit PC World. Story copyright PC World Communications, Inc.