>> I notice that Java (JDK, JRE) update 8u40 has been released. >> Though >> http://www.oracle.com/technetwork/java/javase/downloads/index.html >> says "this release includes important security fixes" ... > > My reading of the first WWW page is that only Java SE 7 u75/76 contains > security fixes and that there are no security fixes in Java SE 8 u40.
Yes, they changed the wording since I wrote that! Noting that 7u75/76 are not new now, but were released in January. Seems that 8u40 is simply a useability release; previous must have been very bad, unusual that Oracle would release out-of-band. Thanks, Paul Paul Szabo p...@maths.usyd.edu.au http://www.maths.usyd.edu.au/u/psz/ School of Mathematics and Statistics University of Sydney Australia _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: http://seclists.org/fulldisclosure/
