Oracle warns of critical flaws in Java

New parent company Oracle has released a critical update to address vulnerabilities in its Java platform.

The company said that the patch addresses flaws in both Java SE and Java for business. In total, the update includes fixes for 27 different vulnerabilities in Java.

The update will cover the Windows, Solaris and Linux versions of the Java SE and Java for business platforms. Because Apple has opted to develop and maintain its own Java components in-house, Oracle is not releasing an update for MacOS X systems.

Oracle is strongly recommending that all users of both Java platforms install the update. Additionally, those running the JRE, JDK and SDK components are advised to install the patch.

While Oracle did not specifically disclose whether the flaws could allow an attacker to execute malicious code on a targeted system, the company noted that all 27 of the flaws could be remotely targeted and exploited without user authentication.

While most end users will be able to receive the update through automatic update tools, administrators and those wishing to manually install the updates can obtain fixes for both Java SE and Java for Business directly from Oracle.