Oracle Java October Security Update

Corrine · Oct 14, 2014

Oracle released the scheduled critical security updates for its Java SE Runtime Environment software.

This is a Critical Patch Update that affects Oracle Java SE, versions 5.0u71, 6u81, 7u67, 8u20. From The Assurance Blog:

Out of the 154 vulnerabilities fixed with today’s Critical Patch Update release, 31 are for the Oracle Database. All but 3 of these database vulnerabilities are related to features implemented using Java in the Database, and a number of these vulnerabilities have received a CVSS Base Score of 9.0.

In the event you need to continue using Java, How-to Geek discovered a little-known and unpublicized option in the Java Control Panel to suppress the offers for the pre-checked unwanted extras.

Launch the Windows Start menu
Click on Programs
Find the Java program listing
Click Configure Java to launch the Java Control Panel
Click the Advanced tab and go to the "Miscellaneous" section at the bottom.
Check the box by the “Suppress sponsor offers when installing or updating Java” option and click OK.

After that is complete, you should no longer need to worry about inadvertently installing the AskToolbar or some other unwanted extra.

Download link: Java SE 8u25
Verify your version: Verify Java Version

Oracle Critical Patch Update Advisory October 2014

Search

Search

Oracle Java October Security Update

Corrine

Administrator,
Microsoft MVP,
Security Analyst

Oracle Java October Security Update

Corrine

Administrator, Microsoft MVP, Security Analyst

Administrator,
Microsoft MVP,
Security Analyst