Corrine Administrator, Microsoft MVP, Security Analyst Staff member Joined Feb 22, 2012 Posts 12,059 Location Upstate, NY Jul 18, 2017 #1 Oracle released the scheduled critical security updates for its Java SE Runtime Environment software. The update contains 32 new security fixes for Oracle Java SE. 28 of these vulnerabilities may be remotely exploitable without authentication, i.e., may be exploited over a network without requiring user credentials. Update If Java is still installed on your computer, it is recommended that this update be applied as soon as possible due to the threat posed by a successful attack. Download link: Java SE 8u141 Verify your version: http://www.java.com/en/download/testjava.jsp ________________ Java SE 8u131 Update Release Notes Oracle Critical Patch Update - July 2017
Oracle released the scheduled critical security updates for its Java SE Runtime Environment software. The update contains 32 new security fixes for Oracle Java SE. 28 of these vulnerabilities may be remotely exploitable without authentication, i.e., may be exploited over a network without requiring user credentials. Update If Java is still installed on your computer, it is recommended that this update be applied as soon as possible due to the threat posed by a successful attack. Download link: Java SE 8u141 Verify your version: http://www.java.com/en/download/testjava.jsp ________________ Java SE 8u131 Update Release Notes Oracle Critical Patch Update - July 2017
Corrine Administrator, Microsoft MVP, Security Analyst Staff member Joined Feb 22, 2012 Posts 12,059 Location Upstate, NY Jul 27, 2017 #2 Out-of-Band Java SE Update Oracle released an out-of-band update for its Java SE Runtime Environment software. The update contains bug fixes for Oracle Java SE. Update : If Java is still installed on your computer, it is recommended that this update be applied as soon as possible due to the threat posed by a successful attack. Download link: Java SE 8u144 Verify your version: http://www.java.com/en/download/testjava.jsp Java SE 8u144 Update Release Notes
Out-of-Band Java SE Update Oracle released an out-of-band update for its Java SE Runtime Environment software. The update contains bug fixes for Oracle Java SE. Update : If Java is still installed on your computer, it is recommended that this update be applied as soon as possible due to the threat posed by a successful attack. Download link: Java SE 8u144 Verify your version: http://www.java.com/en/download/testjava.jsp Java SE 8u144 Update Release Notes
x BlueRobot Administrator Staff member Joined May 7, 2013 Posts 10,188 Location %systemroot% Jul 31, 2017 #3 The Java version verification page will only work if your browser has NPAPI support.
plodr Sysnative Staff, Contributor Staff member Joined Sep 11, 2016 Posts 992 Location In front of a computer Aug 1, 2017 #4 I don't have Java installed so I can't test this method. Can someone who does have it installed see if this will work, please? 1. Open a cmd window (run as administrator). You can type cmd in the search/run box. When you see cmd.exe right click and select run as administrator. 2. Type this Code: java -version Note the space between java and the dash. 3. You should either see the version or, if not installed, 'java' is not recognized as an internal or external command, operable program or batch file.
I don't have Java installed so I can't test this method. Can someone who does have it installed see if this will work, please? 1. Open a cmd window (run as administrator). You can type cmd in the search/run box. When you see cmd.exe right click and select run as administrator. 2. Type this Code: java -version Note the space between java and the dash. 3. You should either see the version or, if not installed, 'java' is not recognized as an internal or external command, operable program or batch file.
x BlueRobot Administrator Staff member Joined May 7, 2013 Posts 10,188 Location %systemroot% Aug 1, 2017 #5 Please find the output of the command on my system below: Code: java version "1.8.0_144" Java(TM) SE Runtime Environment (build 1.8.0_144-b01) Java HotSpot(TM) 64-Bit Server VM (build 25.144-b01, mixed mode) I didn't have to run an elevated command prompt either.
Please find the output of the command on my system below: Code: java version "1.8.0_144" Java(TM) SE Runtime Environment (build 1.8.0_144-b01) Java HotSpot(TM) 64-Bit Server VM (build 25.144-b01, mixed mode) I didn't have to run an elevated command prompt either.
plodr Sysnative Staff, Contributor Staff member Joined Sep 11, 2016 Posts 992 Location In front of a computer Aug 2, 2017 #6 Thanks for testing this. :thumbsup2:
Digerati ModeratorHardware ExpertMicrosoft MVP (Ret.) Staff member Joined Aug 28, 2012 Posts 4,914 Location Nebraska, USA Sep 10, 2017 #7 Corrine said: Update : If Java is still installed on your computer... Click to expand... If Java is still installed on your computer, I recommend you uninstall it and see if anything breaks. Odd are, nothing will and you can leave it off and have peace of mind this highly and constantly vulnerable program won't put your computer or its users in jeopardy again. I removed it over 2 years ago and nothing I use broke. If, on the slim chance you do still have some obscure program that needs Java, you will simply be prompted to install it again and at that point, you know at least you have the latest [and hopefully most secure - for now] version. That said, if you do still have some program that needs Java, I recommend you look around for an alternative program that doesn't.
Corrine said: Update : If Java is still installed on your computer... Click to expand... If Java is still installed on your computer, I recommend you uninstall it and see if anything breaks. Odd are, nothing will and you can leave it off and have peace of mind this highly and constantly vulnerable program won't put your computer or its users in jeopardy again. I removed it over 2 years ago and nothing I use broke. If, on the slim chance you do still have some obscure program that needs Java, you will simply be prompted to install it again and at that point, you know at least you have the latest [and hopefully most secure - for now] version. That said, if you do still have some program that needs Java, I recommend you look around for an alternative program that doesn't.
x BlueRobot Administrator Staff member Joined May 7, 2013 Posts 10,188 Location %systemroot% Sep 12, 2017 #8 I personally have Java applets disabled for any installed browsers and only allow Java for desktop programs. I only use the Java runtime environment for writing Java programs. https://www.java.com/en/download/help/disable_browser.xml
I personally have Java applets disabled for any installed browsers and only allow Java for desktop programs. I only use the Java runtime environment for writing Java programs. https://www.java.com/en/download/help/disable_browser.xml
Digerati ModeratorHardware ExpertMicrosoft MVP (Ret.) Staff member Joined Aug 28, 2012 Posts 4,914 Location Nebraska, USA Sep 12, 2017 #9 and only allow Java for desktop programs. Click to expand... I personally removed Java from all my systems about 2 years ago (once Minecraft for my grandson upgraded to a sans Java version) and have not encountered a program since that needed it. I recommend everyone remove it and see what happens. Chances are, you don't need it. The following shows how to remove it too. Java is Insecure and Awful, It’s Time to Disable It, and Here’s How
and only allow Java for desktop programs. Click to expand... I personally removed Java from all my systems about 2 years ago (once Minecraft for my grandson upgraded to a sans Java version) and have not encountered a program since that needed it. I recommend everyone remove it and see what happens. Chances are, you don't need it. The following shows how to remove it too. Java is Insecure and Awful, It’s Time to Disable It, and Here’s How
S Sysnative Windows Update Inactive Joined Oct 9, 2014 Posts 773 Sep 12, 2017 #10 Unfortunately, I have to use it for my e-banking. All banks in Croatia enforce it and we cannot avoid using Java.
Unfortunately, I have to use it for my e-banking. All banks in Croatia enforce it and we cannot avoid using Java.
Digerati ModeratorHardware ExpertMicrosoft MVP (Ret.) Staff member Joined Aug 28, 2012 Posts 4,914 Location Nebraska, USA Sep 13, 2017 #11 That is too bad. I for sure would disable it and only enable it again when banking, then quickly disable it again.
That is too bad. I for sure would disable it and only enable it again when banking, then quickly disable it again.
x BlueRobot Administrator Staff member Joined May 7, 2013 Posts 10,188 Location %systemroot% Sep 13, 2017 #12 Digerati said: That is too bad. I for sure would disable it and only enable it again when banking, then quickly disable it again. Click to expand... There's no need to, you can configure a Java whitelist for websites you wish to allow to run Java content.
Digerati said: That is too bad. I for sure would disable it and only enable it again when banking, then quickly disable it again. Click to expand... There's no need to, you can configure a Java whitelist for websites you wish to allow to run Java content.
Digerati ModeratorHardware ExpertMicrosoft MVP (Ret.) Staff member Joined Aug 28, 2012 Posts 4,914 Location Nebraska, USA Sep 14, 2017 #13 There's no need to, you can configure a Java whitelist for websites you wish to allow to run Java content. Click to expand... This is true. But that is a lot of hand-holding that for many is more hassle than worthwhile. Considering Java is specifically targeted because it is known to be such a security risk, I see no reason to leave it enabled when not needed. If me, I would contact those banks and other sites claiming you need Java and urge them to get with the times.
There's no need to, you can configure a Java whitelist for websites you wish to allow to run Java content. Click to expand... This is true. But that is a lot of hand-holding that for many is more hassle than worthwhile. Considering Java is specifically targeted because it is known to be such a security risk, I see no reason to leave it enabled when not needed. If me, I would contact those banks and other sites claiming you need Java and urge them to get with the times.