Full Disclosure mailing list archives

Re: Java 8u40 released: why?


From: paul.szabo () sydney edu au
Date: Sat, 7 Mar 2015 07:02:02 +1100

I notice that Java (JDK, JRE) update 8u40 has been released.
Though
  http://www.oracle.com/technetwork/java/javase/downloads/index.html
says "this release includes important security fixes" ...

My reading of the first WWW page is that only Java SE 7 u75/76 contains
security fixes and that there are no security fixes in Java SE 8 u40.

Yes, they changed the wording since I wrote that! Noting that 7u75/76
are not new now, but were released in January.

Seems that 8u40 is simply a useability release; previous must have been
very bad, unusual that Oracle would release out-of-band.

Thanks, Paul

Paul Szabo   psz () maths usyd edu au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of Sydney    Australia

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/


Current thread: