Oracle updates Java, but not for security
Usually, updates of Java SE 6 include security fixes -- that's the normal course that I tend to expect. But that's not the case with the recent Java SE 6 update 23 (6u23) update.
"Java SE 6u23 does not contain any additional fixes for security
vulnerabilities to its previous release, Java SE 6u22," Oracle's release notes state. "Users who have
Java SE 6u22 have the latest security fixes and do not need to upgrade
to this release to be current on security fixes."
Huh. That's not usual is it?
That said, Java SE 6u23 does have performance and stability fixes - and from my perspective, with stability issues - sometimes there can be hidden memory error/crash exploitation issues that have to be reported, or discovered.