Correction to Java Update Story

Summary: Krebs on Security corrected an earlier post that wrongly stated Oracle had shipped security updates for Java; Oracle did release Java 6 Update 32 earlier in April 2012, but it was a maintenance update with no security fixes. Readers noted that Oracle's own java.com pages still listed Update 31 as the latest and that Java 6 was set to leave maintenance in November 2012.
What's compelling: A maintenance release mistaken for a security patch leaves anyone running Java 6 Update 31 believing they are current when the fix they think they installed does not exist.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026