New JAVA out of band patch from Oracle
I just noticed a new e-mail from U.S.-CERT in my in box about an out of band patch for JAVA that's designed to address the vulnerabilities we've been reading about in the news lately (you can register with us.cert.gov to get e-mail updates when new security bulletins are published).
It looks like U.S. CERT sent the e-mail notification around 4:12PM Eastern this afternoon (but I haven't checked my e-mail lately and just now noticed it):
Here's quote from it:
"Oracle has released an out-of-band patch to address the recently announced vulnerability in Java Runtime Environment (JRE) 7. US-CERT encourages users and administrators to review the bulletin and follow best-practice security policies to determine which updates should be applied"
See the U.S -CERT notification about it here::
Here's a link to the bulletin from Oracle that it mentions. It includes links to the new JAVA updates: