Author Topic:  (Read 15227 times)

0 Members and 1 Guest are viewing this topic.

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 15979
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
« on: May 25, 2006, 03:16:21 PM »


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline roddy32

  • LzD Fallen Heroes
  • Hero Member
  • *****
  • Posts: 1083
    • View Profile
« Reply #1 on: August 15, 2012, 12:41:55 PM »
Java Runtime Environment (JRE) 6 Update 34 & Java 7 update 6 - August 14, 2012

Download links:

Java 7 update 6
http://www.oracle.com/technetwork/java/javase/downloads/jre7-downloads-1637588.html

Java 6 Update 34
http://www.oracle.com/technetwork/java/javase/downloads/jre6-downloads-1637595.html

Also make sure you pick the correct one for your operating system on the download page after you sign the agreement.

Verify your version
http://www.java.com/en/download/testjava.jsp

Note: UNcheck any unwanted toolbars/programs if offered.
Microsoft MVP Consumer Security 2006 - 2012

Log'N'Rock Computer Security


Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 15979
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
« Reply #2 on: August 30, 2012, 08:50:55 PM »
Out-of-band Java Update

Oracle released an out-of-band security update for Java SE.  Security Alert CVE-2012-4681 addresses three distinct but related critical vulnerabilities and one security-in-depth issue affecting Java running in desktop browsers.

These vulnerabilities may be remotely exploitable without authentication.  In other words, the vulnerabilities may be exploited over a network without the need for a username and password merely by visiting a malicious web page with an unpatched version of Java.

Now that Java SE 7 has been officially released, it is recommended that users of Java SE 6 upgrade to the latest version.  When you upgrade from Java SE 6 to Java SE7 please check installed program files and remove all versions of Java SE 6.

As of this posting, Java SE 7u7 is only available from this link:  http://java.com/en/download/index.jsp
Verify your version at http://www.java.com/en/download/testjava.jsp

Note: UNcheck any unwanted toolbars/programs if offered.

More Info in my blog post at Critical Java Security Update


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline roddy32

  • LzD Fallen Heroes
  • Hero Member
  • *****
  • Posts: 1083
    • View Profile
« Reply #3 on: August 31, 2012, 02:01:08 AM »
Just to add any more info to what Corrine already posted. ALL the version are available on the below link,

Java Runtime Environment (JRE) 6 Update 35 & Java 7 update 7 - August 30, 2012

This is a critical update:

Download links (Make sure you pick the correct one, there are many)
http://www.oracle.com/technetwork/java/javase/downloads/index.html

Note: Release notes are on the same page.

Verify your version
http://www.java.com/en/download/testjava.jsp

Note: UNcheck any unwanted toolbars/programs if offered.
Microsoft MVP Consumer Security 2006 - 2012

Log'N'Rock Computer Security


Offline ky331

  • LzD Friends
  • Sr. Member
  • *****
  • Posts: 385
    • View Profile
« Reply #4 on: August 31, 2012, 07:09:21 PM »

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 15979
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
« Reply #5 on: August 31, 2012, 08:56:15 PM »
A similar article:  http://www.pcworld.com/businesscenter/article/261748/researchers_find_critical_vulnerability_in_java_7_patch_hours_after_release.html

Most home computer users do NOT need Java. Please consider uninstalling it as it is likely taking up useless space. It is a huge target for malware writers and, obviously, Oracle is ineffective is providing a secure product. (See Do You Need Java? ~ Security Garden)


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline pete

  • Hero Member
  • *****
  • Posts: 1265
    • View Profile
« Reply #6 on: September 01, 2012, 09:05:48 AM »
Hi Corrine
Taken your advice and have removed Java.

cheers :GRAFX:
Even I'm Amazed At My Stupidity!!!

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 15979
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Oracle Java Quartely Security and Patch Update
« Reply #7 on: October 17, 2012, 09:54:09 PM »
Oracle released security updates for its Java SE Runtime Environment software.  Oracle Java SE Critical Patch Update Advisory - October 2012 identifies the affected product releases and versions.

It is strongly recommended that the update be applied as soon as possible.

Although Java is not required (See Do You Need Java?), if you do have Java installed on your computer, it is advisable to install the latest update.  It is also advised that all prior (and vulnerable) versions of Java SE be uninstalled from your computer.
 
Download Information

Now that Java SE 7 has been officially released, it is recommended that users of Java SE 6 upgrade to the latest version.  When you upgrade from Java SE 6 to Java SE 7, please check installed program files and remove all versions of Java SE 6. The "end of life" date for Java SE 6 has been extended from July 2012 to February 2013, to allow additional time for businesses to transition to JDK 7.


Select Java SE 7u9 from http://java.com/en/download/inc/windows_new_xpi.jsp?locale=en
or
Java SE 6 Update 37 from http://java.com/en/download/manual_v6.jsp

Verify your version:  http://www.java.com/en/download/testjava.jsp

Note: UNcheck any pre-checked toolbar and/or software options presented with the update. They are not part of the software update and are completely optional.


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline pastywhitegurl

  • Hero Member
  • *****
  • Posts: 770
  • advanced techno feeb
    • View Profile
« Reply #8 on: November 09, 2012, 03:29:14 PM »
Where will I find a safe download of the latest JavaRa  (to make sure old versions are removed)?

It looks like the original website is being redirected to singularlabs.com/

And which version do I need for Windows XP  ( I have the NET frameworks up to 3.5)

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 15979
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
« Reply #9 on: November 09, 2012, 04:27:36 PM »


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline pastywhitegurl

  • Hero Member
  • *****
  • Posts: 770
  • advanced techno feeb
    • View Profile
« Reply #10 on: November 15, 2012, 01:22:08 AM »
Got it. Thanks. :)

Offline ComicsLover

  • Full Member
  • ***
  • Posts: 128
    • View Profile
« Reply #11 on: November 17, 2012, 07:32:09 PM »
Dang.  I always turn off Java, but now that I know that Office.Org uses it, got rid of the program (although I liked Writer quite a bit.  Back to WordPad.)

Unfortunately, my main computer also has some entertainment freebie program from HP that also uses it.  Oh well....another thing I can live without.

Instead of running JavaRA is there a way to tell via a search on Computer if Java still exists or is it best to trust JavaRA as it gets rid of Registry Keys too?  (I understand little blits of dust like that tend to stick in places worse than dust bunnies do in homes.)

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 15979
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
« Reply #12 on: November 17, 2012, 09:08:11 PM »
JavaRa may not take care of the older versions of the Java Console.  As I recall, the Java Console extensions would be located in the Firefox > Tools > Add-ons list.  To remove:
  • Make sure you already have the most recent version, currently Java SE Runtime Environment 7u6.
  • Go to C:\Program Files > Mozilla Firefox > extensions.
  • Delete the folders "{CAFEEFAC-0016-0000-xxxx-ABCDEFFEDCBA}", where xxxx is the number of the JRE-version.  If Java is installed, keep the highest number as this is the latest version.  Otherwise, delete all.


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 15979
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
« Reply #13 on: January 13, 2013, 11:00:49 PM »


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.