full-disclosure

Open Source and information security mailing list archives

Message-ID: <54FA27BF.3080805@oracle.com>
Date: Fri, 06 Mar 2015 14:18:39 -0800
From: Alan Coopersmith <alan.coopersmith@...cle.com>
To: paul.szabo@...ney.edu.au
Cc: fulldisclosure@...lists.org
Subject: Re: [FD] Java 8u40 released: why?

On 03/ 6/15 12:02 PM, paul.szabo@...ney.edu.au wrote:
>>> I notice that Java (JDK, JRE) update 8u40 has been released.
>>> Though
>>>    http://www.oracle.com/technetwork/java/javase/downloads/index.html
>>> says "this release includes important security fixes" ...
>>
>> My reading of the first WWW page is that only Java SE 7 u75/76 contains
>> security fixes and that there are no security fixes in Java SE 8 u40.
>
> Yes, they changed the wording since I wrote that! Noting that 7u75/76
> are not new now, but were released in January.
>
> Seems that 8u40 is simply a useability release; previous must have been
> very bad, unusual that Oracle would release out-of-band.

Java 8u40 is a feature release that's been planned for almost a year, not
a special out of band bug fix release.

http://openjdk.java.net/projects/jdk8u/releases/8u40.html
https://blogs.oracle.com/thejavatutorials/entry/jdk_8u40_released

-- 
	-Alan Coopersmith-              alan.coopersmith@...cle.com
	 Oracle Solaris Engineering - http://blogs.oracle.com/alanc

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives