Oracle released the scheduled update for its Java SE Runtime Environment software. This is a bugfix and critical security update.
This Critical Patch Update contains 13 new security patches for Oracle Java SE. Eleven (11) of these vulnerabilities may be remotely exploitable without authentication, i.e., may be exploited over a network without requiring user credentials.
Download Information: Java SE Runtime Environment Version 8u401: https://java.com/en/download/manual.jsp (https://java.com/en/download/manual.jsp).
Release Notes (https://www.oracle.com/java/technologies/javase/8u391-relnotes.html)