Critical Oracle Java Security Update

[mac]

Thanks Corrine! Here is the link to the Oracle webpage with the offline downloads: http://www.java.com/en/download/manual.jsp Since I maintain 3 PCs here at the house, I can download once and then update all three over my LAN.

[Guest LilBambi]

Yep, used to do the same thing mac.

 

I know don't have to worry about it since I have no need for Java any longer.

[Corrine]

Note that there was a new Java update today for version 7 only, no update for version 8. It appears to be a bug fix. Java™ SE Development Kit 7 Update 67 Release Notes

 

The good news is that with the August 12 Microsoft Security Updates: Internet Explorer begins blocking out-of-date ActiveX controls.

[Corrine]

Oracle released the scheduled critical security updates for its Java SE Runtime Environment software. With the usual warnings about pre-checked extras, the update fkor the latest version is Java SE 8u45.

 

Note that this release will be the last Oracle JDK 7 publicly available update.

 

Although most people do not need Java on their computer, there are some programs and games that require Java. In the event you need to continue using Java, How-to Geek discovered a little-known and unpublicized option in the Java Control Panel to suppress the offers for the pre-checked unwanted extras.

• Launch the Windows Start menu
  
• Click on Programs
  
• Find the Java program listing
  
• Click Configure Java to launch the Java Control Panel
  
• Click the Advanced tab and go to the "Miscellaneous" section at the bottom.
  
• Check the box by the “Suppress sponsor offers when installing or updating Java” option and click OK.
  

[Corrine]

Oracle released the scheduled critical security updates for its Java SE Runtime Environment software along with a subsequent update that includes "bug fixes". With the usual warnings about pre-checked extras, the update for the latest version available at the download link is Java SE 8u65 with Java SE 8u66 not yet available. Java SE 8u66 can be found here. Select the appropriate version for your operating system. You can verify your version here: Verify Java Version.

 

Although most people do not need Java on their computer, there are some programs and games that require Java. In the event you need to continue using Java, How-to Geek discovered a little-known and unpublicized option in the Java Control Panel to suppress the offers for the pre-checked unwanted extras.

 

• Launch the Windows Start menu
  
• Click on Programs
  
• Find the Java program listing
  
• Click Configure Java to launch the Java Control Panel
  
• Click the Advanced tab and go to the "Miscellaneous" section at the bottom.
  
• Check the box by the “Suppress sponsor offers when installing or updating Java” option and click OK.
  

 

Java SE 8u65 Update Release Notes

Java SE 8u66 Update Release Notes

[Guest LilBambi]

Thanks ... got the update for the Mac too.

[Corrine]

Oracle released the scheduled critical security updates for its Java SE Runtime Environment software and, once again, released a subsequent update that includes "bug fixes".

 

Although most people do not need Java on their computer, there are some programs and games that require Java. In the event you need to continue using Java, How-to Geek discovered a little-known and unpublicized option in the Java Control Panel to suppress the offers for the pre-checked unwanted extras.

 

• Launch the Windows Start menu
  
• Click on Programs
  
• Find the Java program listing
  
• Click Configure Java to launch the Java Control Panel
  
• Click the Advanced tab and go to the "Miscellaneous" section at the bottom.
  
• Check the box by the “Suppress sponsor offers when installing or updating Java” option and click OK.
  

 

Download link: Java SE 8u71

Java SE 8u72 can be found here. Select the appropriate version for your operating system.

Verify your version: http://www.java.com/en/download/testjava.jsp

 

 

• Java SE 8u71 Update Release Notes
  
• Java SE 8u72 Update Release Notes
  

 

[Corrine]

Oracle released an out-of-band critical security update which addresses CVE-2016-0603 which can be exploited when installing Java SE 6, 7 or 8 on the Windows platform.

 

Important Note: The exposure exists only during the installation process. Thus, Java SE users who have downloaded any old version of Java SE prior to 6u113, 7u97 or 8u73 for later installation needs to discard the old downloads and replace them with 6u113, 7u97 or 8u73 or later.

 

Download link: Java SE 8u73

Java SE 8u73 Update Release Notes

[crp]

Oracle released an out-of-band critical security update which addresses CVE-2016-0603 which can be exploited when installing Java SE 6, 7 or 8 on the Windows platform.

this one strikes me at bogus. the circumstances that needed to be met to exploit - could they have arisen in any real world situation? this update notification should only have been delivered to people using java from 3 years ago.

too many notifications lead to people ignoring them all.

[Corrine]

Not necessarily since there are Enterprises that use older versions of Java. In addition, Java SE 8 is the current platform.