Oracle patches critical flaws in Java

Oracle has issued 27 fixes for Java

Oracle has released a critical update to address vulnerabilities in its recently acquired Java platform.

The company said that the patch addresses flaws in Java SE and Java for Business. The update includes fixes for 27 vulnerabilities in total.

The update covers the Windows, Solaris and Linux versions of the Java SE and Java for Business platforms. Apple has opted to develop and maintain its own Java components in-house, and Oracle is not releasing an update for Mac OS X systems.

Oracle is strongly recommending that users of both Java platforms install the update, along with those running the JRE, JDK and SDK components.

Oracle did not specifically disclose whether the flaws could allow an attacker to execute malicious code on a targeted system, but said that all 27 flaws could be remotely targeted and exploited without user authentication.

Most end users will be able to receive the update through automatic update tools, but administrators and those wishing to manually install the updates can obtain fixes for Java SE and Java for Business directly from Oracle.