Compiling Java 7 on CentOS 5 and 6

Step 1: Go to Oracle Java Download site and select the

Step 2: Unpack the Archive

# cd /usr/local/
# tar -zxvf jdk-7u51-linux-x64.tar.gz

Step 3: Setup the Environmental Variables. At your .bashrc

export JAVA_HOME=/usr/local/jdk1.7.0_51
export JRE_HOME=/usr/local/jdk1.7.0_51/jre
export PATH=$JAVA_HOME/bin:$JRE_HOME/bin 

Step 4: Check the version

# java -version
java version "1.7.0_51"
Java(TM) SE Runtime Environment (build 1.7.0_51-b13)
Java HotSpot(TM) 64-Bit Server VM (build 24.51-b03, mixed mode)

US-Cert Alert - Oracle has released multiple updates for Java SE

US Cert has released the alert to patch the Java SE

Here is the excerpts of the alert.

Overview
Oracle has released a Critical Patch Update (CPU) for Java SE. Oracle strongly recommends that customers apply CPU fixes as soon as possible.

Description
Oracle Java SE Critical Patch Update Advisory - April 2013 describes the update as:
A Critical Patch Update is a collection of patches for multiple security vulnerabilities. The Critical Patch Update for Java SE also includes non-security fixes. Critical Patch Updates are cumulative and each advisory describes only the security fixes added since the previous Critical Patch Update and Security Alert. Thus, prior Critical Patch Update and Security Alert advisories should be reviewed for information regarding earlier accumulated security fixes.

Impact
A remote, unauthenticated attacker could execute arbitrary code, cause a denial of service, or gain unauthorized access to your files or system.

Solution
Apply Updates

Oracle Java SE Critical Patch Update Advisory - April 2013 includes the following information:

1. Developers can download the latest release from http://www.oracle.com/technetwork/java/javase/downloads/index.html.
2. Users running Java SE with a browser can download the latest release from http://java.com.
3. Users on the Windows and Mac OS X platforms can also use automatic updates to get the latest release.
4. The latest JavaFX release is included with the latest update of JDK and JRE 7. For JDK and JRE 6 users, the latest Java FX release is available from http://www.oracle.com/technetwork/java/javafx/

References
 * Oracle Java SE Critical Patch Update Advisory - April 2013

Software Updates for critical vulnerability in Java 7 is available

Oracle has released an emergency software update today to fix a vulnerability that is exploited by a zero-day Trojan horse called Mal/JavaJar-B, which was already identified as attacking Windows, Linux and Unix systems and being distributed in exploit kits "Blackhole" and "NuclearPack," making it far more convenient to attackers. More information of Update Release  of the Software Update.

More Information on Java 7 Vulnerability:

1. Oracle Java 7 Security Manager Bypass Vulnerability

Patch Release by Oracle for Zero day Vulnerability Alert

Oracle had posted the update release information on the link below:

1. Update release notes  - http://www.oracle.com/technetwork/java/javase/7u7-relnotes-1835816.html
2. Description of alert (Oracle Security Alert for CVE-2012-4681) and patch information - http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html

For more information:

1. The Advisory for Security Alert CVE-2012-4681 is located at http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html
2. Users can verify that they’re running the most recent version of Java by visiting: http://java.com/en/download/installed.jsp 
3. Instructions on removing older (and less secure) versions of Java can be found at http://java.com/en/download/faq/remove_olderversions.xml