Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Oracle to fix 40 holes in Java on Tuesday, 18 June 2013

18 Jun 2013   #1

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium x64 SP1
 
 
Oracle to fix 40 holes in Java on Tuesday, 18 June 2013

Quote:
Oracle's official patch frequency for Java is rather unusual: once every four months.

There's no succinct adjective for that, as there is for monthly or quarterly updates: the easiest way to work out Oracle's official dates is simply to remember, "Around the middle of February, June and October."
Source

A Guy

My System SpecsSystem Spec
.

18 Jun 2013   #2

Windows 7 64-bit, Windows 8.1 64-bit, OSX Maverick
 
 

It's good to know that the latest version of JAVA, version 7 update 21 has 40 RCEs, quote:

Quote:
The good news is that lots of security vulnerabilities have been repaired - 40 in total, of which all but three are RCEs, or remote code execution holes.
That's where untrusted content sent over the network might be able to trick Java into performing operations that really ought to be limited to already-installed, trusted code.
In short, an RCE means that you could get infected by malware simply by looking around online, without explicitly downloading, authorising or even noticing the malware being installed.
Lets switch the update cycle to once every third of the year to trump up the vulnerability number to about 150 for the period. Maybe people get tired of the security holes in Java, stop using it, and we can stop supporting it. Way to go Oracle...

And no, the update had not been released as of yet...
My System SpecsSystem Spec
18 Jun 2013   #3

Windows 7, 64 bit Home SP1, Win 8.1.1 Pro 64 bit
 
 

I dumped Java last fall. I have not missed it or needed it.
My System SpecsSystem Spec
.


18 Jun 2013   #4

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium x64 SP1
 
 

Quote   Quote: Originally Posted by fireberd View Post
I dumped Java last fall. I have not missed it or needed it.
At the least, it can be disabled in browsers to mitigate that threat. A Guy
My System SpecsSystem Spec
18 Jun 2013   #5

Windows 7 64-bit, Windows 8.1 64-bit, OSX Maverick
 
 

I only enable it when needed, such as BofA ShopSafe credit card number generation for online shopping. Back in the "good ol'days", I used to have my own copy of this java applet...
My System SpecsSystem Spec
18 Jun 2013   #6

Windows 7 Ultimate SP1 (64 bit), Windows XP SP3, Linux Mint 17 MATE (64 bit)
 
 

It's been years (maybe pre-2009) since I had Java installed on my actual PC.

I have it installed in one of my Windows 7 VMs though (Cisco Packet Tracer needed it).
My System SpecsSystem Spec
18 Jun 2013   #7

Windows 7 Professional
 
 

Quote   Quote: Originally Posted by fireberd View Post
I dumped Java last fall. I have not missed it or needed it.
Yep, I dumped it a while back. I have 5 computers, all without Java and all working fine.

All these years of updating for nothing.
My System SpecsSystem Spec
18 Jun 2013   #8

Windows 7 Pro. 64/SP-1
 
 

I think what Oracle is saying between the lines is:
People go away. You are wasting are time and money with all these updates needed. Use Java at your own risk and go away. I heard them and dropped Java over a year ago.
My System SpecsSystem Spec
19 Jun 2013   #9

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium x64 SP1
 
 

Oracle releases latest round of Java security patches

Quote:
Oracle has released fixes for multiple products, many of which are aimed at preventing remote exploitation without authentication.

On Tuesday, the technology giant and Java software maker released its June 2013 Critical Patch Update for Java SE. The latest patch update includes 40 security fixes, 37 of which aimed at stopping attackers exploiting software remotely without the need for a username or password.

The majority of the security fixes, 34 in total, only affect client deployments. Under Oracle's CVSS rating system, some flaws rate as "critical," attaining the highest rating of 10.
Source

A Guy
My System SpecsSystem Spec
20 Jun 2013   #10

Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1 Pro
 
 

Thanx for the heads up. Would that a could get rid of Java, unfortunately the schools site requires Java in order to see that answer choices on the online tests. But I hear they may be switching to another web site for that, hopefully I can be free of Java if they do.
My System SpecsSystem Spec
Reply

 Oracle to fix 40 holes in Java on Tuesday, 18 June 2013




Thread Tools




Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 02:57 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33