Oracle Critical Patch Update Pre-Release Announcement - October 14, 2014

  • 12 October 2014
  • 0 replies
  • 4 views

Userlevel 7
Badge +56

Description

This Critical Patch Update Pre-Release Announcement provides advance information about the Oracle Critical Patch Update for October 2014, which will be released on Tuesday, October 14, 2014.  While this Pre-Release Announcement is as accurate as possible at the time of publication, the information it contains may change before publication of the Critical Patch Update Advisory.
A Critical Patch Update is a collection of patches for multiple security vulnerabilities. This Critical Patch Update contains 155 new security vulnerability fixes across hundreds of Oracle products. Some of the vulnerabilities addressed in this Critical Patch Update affect multiple products.  Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply Critical Patch Update fixes as soon as possible.
Vulnerabilities fixed by this Critical Patch Update are scored using the standard CVSS 2.0 scoring (see Oracle's Use of CVSS Scoring). The highest CVSS 2.0 Base Score for vulnerabilities in this Critical Patch Update is 10.0 for Java SE Embedded of Oracle Java SE and Java SE of Oracle Java SE.
 
This Critical Patch Update contains 25 new security fixes for Oracle Java SE.
22 of these vulnerabilities may be remotely exploitable without authentication, i.e., may be exploited over a network without the need for a username and password.

The highest CVSS Base Score of vulnerabilities affecting Oracle Java SE is 10.0

The Oracle Java SE components affected by vulnerabilities that are fixed in this Critical Patch Update are:
• Java SE
• Java SE Embedded
• JavaFX
• JRockit

Affected versions:
Oracle Java SE, versions 5.0u71, 6u81, 7u67, 8u20
Oracle JavaFX, version 2.2.65
Oracle Java SE Embedded, version 7u60

Java SE 8 runtime (JRE) updates will be available here:
www.oracle.com/technetwork/java/···dex.html

Java SE 7 runtime (JRE) updates will be available here:

www.oracle.com/technetwork/java/···dex.html
 
Be on the lookout for any unwanted add-ons (PUA's) during install!! Also for Vista to Win 8.1 I would suggest to use Java SE 8 Runtime also if you have a 64bit OS be sure to download both 32bit & 64bit versions! Java 7 SE Runtime will work on XP but as soon as they stop updating Java 7 there will be no more support for Windows XP.
 
http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
 
Daniel 😉

0 replies

Be the first to reply!

Reply