Java patches out and MS Office patches on the horizon

As it could have been expected, Microsoft has issued Security Bulletin Advance Notification indicating that its March release cycle will contain four bulletins. All of them will have the severity rating of Critical. The notification states that these Critical bulletins are for Microsoft Office and Office Web components. The release is scheduled for Tuesday, March 11, 2008.

Additionally, Sun has released security updates for Java SE. These updates address multiple vulnerabilities in Java Web Start, Java JDK, Java JRE, and Java SDK. These vulnerabilities may allow a remote attacker to execute arbitrary code, bypass security restrictions, or cause a denial-of-service condition. Don't forget that installing the new version won't uninstall the old one. You have to deinstall it yourself.

• Sun Alert 233321 - Two Security Vulnerabilities in the Java Runtime Environment Virtual Machine
• Sun Alert 233322 - Security Vulnerability in the Java Runtime Environment with the Processing of XSLT Transformations
• Sun Alert 233323 - Multiple Security Vulnerabilities in Java Web Start May Allow an Untrusted Application to Elevate Privileges
• Sun Alert 233324 - A Security Vulnerability in the Java Plug-in May Allow an Untrusted Applet to Elevate Privileges
• Sun Alert 233325 - Vulnerabilities in the Java Runtime Environment image Parsing Library
• Sun Alert 233326 - Security Vulnerability in the Java Runtime Environment May Allow Untrusted JavaScript Code to Elevate Privileges through Java APIs
• Sun Alert 233327 - Buffer Overflow Vulnerability in Java Web Start May Allow an Untrusted Application to Elevate its Privilege