Oracle issues patch for Java flaws; attacks tied to Nitro gang

The rare out-of-band update closes holes being exploited in attacks, at least some of which are coming from China.