Thursday, March 26, 2009

Java Runtime Environment (JRE) Version 6 Update 13

The latest version fixed several security vulnerabilities:

254569 : Security Vulnerabilities in the JRE LDAP Implementation may Allow a Denial of Service (DoS) and Malicious Code to be Executed

254570 : Integer and Buffer Overflow Vulnerabilities in the JRE "unpack200" JAR Unpacking Utility May Lead to Escalation of Privileges

254571 : Buffer Overflow Vulnerabilities in the JRE with Processing Image Files and Fonts may Allow Privileges to be Escalated

254608 : Security Vulnerabilities in the JRE With Storing and Processing Font Files May Allow Denial of Service

254609 : A Security Vulnerability in the JRE HTTP Server Implementation May Allow a Denial of Service Condition on a JAX-WS Service Endpoint

254610 : A Security Vulnerability in the JRE Virtual Machine With Code Generation May Allow Escalation of Privileges

254611 : Multiple Security Vulnerabilities in Java Plug-in May Allow Privileges to be Escalated

For privacy reason, you can uncheck "Keep temporary files on my computer".

The bug which does not allow you to uncheck "
Check for Updates Automatically" in JRE Version 6 Update 10 is still not resolved in this version.





But, you can disable JRE Auto-Download and jsched setting in Windows startup using msconfig.

No comments: