ITWire

The discovery of in-the-wild attacks exploiting a vulnerability in Oracle's Java 7 caused a flap this week.

The next Java update was scheduled for October 16, but overnight Oracle released Java 7 Update 7 to fix the vulnerability, which has been used to deliver Windows malware.

Update 7 also includes fixes for two other vulnerabilities affecting Java running in desktop web browsers.

Although the in-the-wild exploit reportedly only affected Java 7, the update also includes a patch for a "security-in-depth" issue that also applies to Java 6, so Oracle "strongly recommends" the updates should be applied to Java 6 and Java 7 installations "as soon as possible."

Java 7 Update 7 and Java 6 Update 35 can be downloaded here, though Windows users may prefer to take advantage of the automatic update feature.

Mac users can download Java 7 Update 7 via the above link, but those still on Java 6 will have to wait until Apple releases the update.