Java Update Clobbers 29 Security Flaws
Summary: Oracle released a critical Java update fixing at least 29 security vulnerabilities, with the patched version being Java 6 Update 22 for Windows, Solaris and Linux. Krebs notes that Apple maintains its own Java for OS X and typically issues fixes several months after the official release, and that Java's updater may bundle unwanted extras such as the Yahoo! Toolbar unless the checkbox is de-selected.
Why it matters: Krebs calls Java 'the single most viral infected software extant' and advises that if you don't absolutely need it, it should not be on your computer - while Apple users wait months for their version of the fix.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026