Oracle Critical Patch Update Pre-Release Announcement - January 2016This Critical Patch Update Pre-Release Announcement provides advance information about the Oracle Critical Patch Update for January 2016, which will be released on Tuesday, January 19, 2016. While this Pre-Release Announcement is as accurate as possible at the time of publication, the information it contains may change before publication of the Critical Patch Update Advisory. See - »
www.oracle.com/technetwo ··· 955.htmlOracle Java SE This Critical Patch Update contains 8 new security fixes for Oracle Java SE.
7 of these vulnerabilities may be remotely exploitable without authentication, i.e., may be exploited over a network without the need for a username and password.
The highest CVSS Base Score of vulnerabilities affecting Oracle Java SE is 10.0
The Oracle Java SE components affected by vulnerabilities that are fixed in this Critical Patch Update are:
• Java SE
• Java SE Embedded
• JRockit
Security vulnerabilities addressed by this Critical Patch Update affect the following products:
• Oracle Java SE, version(s) 6u105, 7u91, 8u66
• Oracle Java SE Embedded, version(s) 8u65
• Oracle JRockit, version(s) R28.3.8
When available on Jan 19, updates will be found at:
Java.com (consumer site) - »
java.com/en/download/manual.jspOracle Technology Network - »
www.oracle.com/technetwo ··· d=ocomen