Jump to content

Critical Oracle Java Security Update


Corrine

Recommended Posts

  • 3 weeks later...
  • 8 months later...

Oracle released the scheduled critical security updates for its Java SE Runtime Environment software. With the usual warnings about pre-checked extras, the update fkor the latest version is Java SE 8u45.

 

Note that this release will be the last Oracle JDK 7 publicly available update.

 

Although most people do not need Java on their computer, there are some programs and games that require Java. In the event you need to continue using Java, How-to Geek discovered a little-known and unpublicized option in the Java Control Panel to suppress the offers for the pre-checked unwanted extras.

  • Launch the Windows Start menu
  • Click on Programs
  • Find the Java program listing
  • Click Configure Java to launch the Java Control Panel
  • Click the Advanced tab and go to the "Miscellaneous" section at the bottom.
  • Check the box by the “Suppress sponsor offers when installing or updating Java” option and click OK.

  • Like 3
Link to comment
Share on other sites

  • 6 months later...

Oracle released the scheduled critical security updates for its Java SE Runtime Environment software along with a subsequent update that includes "bug fixes". With the usual warnings about pre-checked extras, the update for the latest version available at the download link is Java SE 8u65 with Java SE 8u66 not yet available. Java SE 8u66 can be found here. Select the appropriate version for your operating system. You can verify your version here: Verify Java Version.

 

Although most people do not need Java on their computer, there are some programs and games that require Java. In the event you need to continue using Java, How-to Geek discovered a little-known and unpublicized option in the Java Control Panel to suppress the offers for the pre-checked unwanted extras.

 

  • Launch the Windows Start menu
  • Click on Programs
  • Find the Java program listing
  • Click Configure Java to launch the Java Control Panel
  • Click the Advanced tab and go to the "Miscellaneous" section at the bottom.
  • Check the box by the “Suppress sponsor offers when installing or updating Java” option and click OK.

 

Java SE 8u65 Update Release Notes

Java SE 8u66 Update Release Notes

  • Like 3
Link to comment
Share on other sites

  • 2 months later...

Oracle released the scheduled critical security updates for its Java SE Runtime Environment software and, once again, released a subsequent update that includes "bug fixes".

 

Although most people do not need Java on their computer, there are some programs and games that require Java. In the event you need to continue using Java, How-to Geek discovered a little-known and unpublicized option in the Java Control Panel to suppress the offers for the pre-checked unwanted extras.

 

  • Launch the Windows Start menu
  • Click on Programs
  • Find the Java program listing
  • Click Configure Java to launch the Java Control Panel
  • Click the Advanced tab and go to the "Miscellaneous" section at the bottom.
  • Check the box by the “Suppress sponsor offers when installing or updating Java” option and click OK.

 

Download link: Java SE 8u71

Java SE 8u72 can be found here. Select the appropriate version for your operating system.

Verify your version: http://www.java.com/en/download/testjava.jsp

 

 

 

Link to comment
Share on other sites

  • 3 weeks later...

Oracle released an out-of-band critical security update which addresses CVE-2016-0603 which can be exploited when installing Java SE 6, 7 or 8 on the Windows platform.

 

Important Note: The exposure exists only during the installation process. Thus, Java SE users who have downloaded any old version of Java SE prior to 6u113, 7u97 or 8u73 for later installation needs to discard the old downloads and replace them with 6u113, 7u97 or 8u73 or later.

 

Download link: Java SE 8u73

Java SE 8u73 Update Release Notes

  • Like 1
Link to comment
Share on other sites

Oracle released an out-of-band critical security update which addresses CVE-2016-0603 which can be exploited when installing Java SE 6, 7 or 8 on the Windows platform.

this one strikes me at bogus. the circumstances that needed to be met to exploit - could they have arisen in any real world situation? this update notification should only have been delivered to people using java from 3 years ago.

too many notifications lead to people ignoring them all.

Link to comment
Share on other sites

Not necessarily since there are Enterprises that use older versions of Java. In addition, Java SE 8 is the current platform.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...