Thursday, March 26, 2009

New Java SE Runtime Environment (JRE) Update Available

Sun has released update for Java SE Runtime Environment (JRE) 6 (JRE allows end-users to run Java applications) to fix a bunch of security vulnerabilities and other bugs. By exploiting the vulnerabilities an attacker may be able to cause denial of service, gain escalated privileges and execute arbitrary code in target system.

Found vulnerabilities are related to HTTP and LDAP implementation, JAR -file unpacking, PNG and GIF image handling and saving & handling fonts. Java Plug-in used in web browsers is vulnerable too.

The latest update can be downloaded from Sun's Java SE Downloads site. Release notes of Java SE 6 Update 13 can be read here.

No comments: