Download Oracle Java 7 Update 13

Oracle has released an update to version 7.0 for both the Java Standard Edition development kit and runtime environment earlier than originally intended. This update was planned for February 19, but some of the vulnerabilities it fixes are already being actively exploited. More information about the security vulnerabilities can be found on our own front page and in the security bulletin below.

February 2013 Critical Patch Update for Java SE Released

Oracle just released the February 2013 Critical Patch Update for Java SE. The original Critical Patch Update for Java SE was scheduled on February 19th, but Oracle decided to accelerate the release of this Critical Patch Update because active exploitation “in the wild” of one of the vulnerabilities affecting the Java Runtime Environment (JRE) in desktop browsers , was addressed with this Critical Patch Update.

In addition to a number of security in-depth fixes, the February 2013 Critical Patch Update for Java SE contains fixes for 50 security vulnerabilities. 44 of these vulnerabilities only affect client deployment of Java (eg, Java in Internet browsers). In other words, these vulnerabilities can only be exploited on desktops through Java Web Start applications or Java applets. In addition, one vulnerability affects the installation process of client deployment of Java (ie installation of the Java Runtime Environment on desktops). Note also that this Critical Patch Update includes the fixes that were previously released through Security Alert CVE-2013-0422.

For more information:

• The advisory for the February 2013 Critical Patch Update is located here.
• More information about setting the security level in the Java client is available here.
• More information about Oracle Software Security Assurance is located here.