Sun Java™ Runtime News

[Corrine]

Java 2 Platform Standard Edition (J2SE) software is the premier platform for rapidly developing and deploying secure, portable applications that run on server and desktop systems spanning most operating systems. J2SE 6.0 is a significant release including many new features and updates while preserving compatibility and stability. The development of J2SE 6.0 was led by Sun and progressed following the Java Community Process (JCP) to include input from a variety of constituents.
Java allows you to play online games, chat with people around the world, calculate your mortgage interest, and view images in 3D. These applications, written in the Java programming language and access from your browse, are called "applets". Corporations also use Java applets for intranet applications and other e-business solutions.

Java technology was created as a computer programming tool in a small, secret effort called "the Green Project" at Sun Microsystems in 1991. As it turns out, the Internet was ready for Java technology, and just in time for its initial public introduction in 1995, the team was able to announce that the Netscape Navigator Internet browser would incorporate Java technology.
Now, the Java platform has attracted over 5 million software developers, worldwide use in every major industry segment, and a presence in a wide range of devices, computers, and networks of any programming technology. Today, you can find Java technology in networks and devices that range from the Internet and scientific supercomputers to laptops and cell phones, from Wall Street market simulators to home game players and credit cards -- just about everywhere. The best way to preview these applications is to explore java.com, the ultimate marketplace, showcase, and central information resource for businesses, consumers, and software developers who use Java technology.

Key features:
• Write software on one platform and run it on practically any other platform
• Create programs to run within a web browser and web services
• Develop server-side applications for online forums, stores, polls, HTML forms processing, and more
• Combine Java technology-based applications or services to create highly customized applications or services
• Write powerful and efficient applications for mobile phones, remote processors, low-cost consumer products, and practically any device with a digital heartbeat

Product Info: Sun Java™

[roddy32]

Java Runtime Environment (JRE) 6 Update 34 & Java 7 update 6 - August 14, 2012

Download links:

Java 7 update 6
http://www.oracle.com/technetwork/java/javase/downloads/jre7-downloads-1637588.html

Java 6 Update 34
http://www.oracle.com/technetwork/java/javase/downloads/jre6-downloads-1637595.html

Also make sure you pick the correct one for your operating system on the download page after you sign the agreement.

Verify your version
http://www.java.com/en/download/testjava.jsp

Note: UNcheck any unwanted toolbars/programs if offered.

[Corrine]

Out-of-band Java Update

Oracle released an out-of-band security update for Java SE.  Security Alert CVE-2012-4681 addresses three distinct but related critical vulnerabilities and one security-in-depth issue affecting Java running in desktop browsers.

These vulnerabilities may be remotely exploitable without authentication.  In other words, the vulnerabilities may be exploited over a network without the need for a username and password merely by visiting a malicious web page with an unpatched version of Java.

Now that Java SE 7 has been officially released, it is recommended that users of Java SE 6 upgrade to the latest version.  When you upgrade from Java SE 6 to Java SE7 please check installed program files and remove all versions of Java SE 6.

As of this posting, Java SE 7u7 is only available from this link:  http://java.com/en/download/index.jsp
Verify your version at http://www.java.com/en/download/testjava.jsp

Note: UNcheck any unwanted toolbars/programs if offered.

More Info in my blog post at Critical Java Security Update

[roddy32]

Just to add any more info to what Corrine already posted. ALL the version are available on the below link,

Java Runtime Environment (JRE) 6 Update 35 & Java 7 update 7 - August 30, 2012

This is a critical update:

Download links (Make sure you pick the correct one, there are many)
http://www.oracle.com/technetwork/java/javase/downloads/index.html

Note: Release notes are on the same page.

Verify your version
http://www.java.com/en/download/testjava.jsp

Note: UNcheck any unwanted toolbars/programs if offered.

[ky331]

Another day, another embarrassment for the security team at Oracle responsible for safeguarding one of the most widely used pieces of software on the planet.

Researchers at the Polish security firm Security Explorations say they've found yet another bug in Java–this time in the patch intended to fix a set of security issues in the software through a critical update released just a day before (Java SE 7 Update 7).


http://www.forbes.com/sites/andygreenberg/2012/08/31/oracles-java-security-woes-mount-as-researchers-spot-a-bug-in-its-critical-bug-fix/

[Corrine]

A similar article:  http://www.pcworld.com/businesscenter/article/261748/researchers_find_critical_vulnerability_in_java_7_patch_hours_after_release.html

Most home computer users do NOT need Java. Please consider uninstalling it as it is likely taking up useless space. It is a huge target for malware writers and, obviously, Oracle is ineffective is providing a secure product. (See Do You Need Java? ~ Security Garden)

[pete]

Hi Corrine
Taken your advice and have removed Java.

cheers :GRAFX:

[Corrine]

Oracle released security updates for its Java SE Runtime Environment software.  Oracle Java SE Critical Patch Update Advisory - October 2012 identifies the affected product releases and versions.

It is strongly recommended that the update be applied as soon as possible.

Although Java is not required (See Do You Need Java?), if you do have Java installed on your computer, it is advisable to install the latest update.  It is also advised that all prior (and vulnerable) versions of Java SE be uninstalled from your computer.

Download Information

Now that Java SE 7 has been officially released, it is recommended that users of Java SE 6 upgrade to the latest version.  When you upgrade from Java SE 6 to Java SE 7, please check installed program files and remove all versions of Java SE 6. The "end of life" date for Java SE 6 has been extended from July 2012 to February 2013, to allow additional time for businesses to transition to JDK 7.


Select Java SE 7u9 from http://java.com/en/download/inc/windows_new_xpi.jsp?locale=en
or
Java SE 6 Update 37 from http://java.com/en/download/manual_v6.jsp

Verify your version:  http://www.java.com/en/download/testjava.jsp

Note: UNcheck any pre-checked toolbar and/or software options presented with the update. They are not part of the software update and are completely optional.

[pastywhitegurl]

Where will I find a safe download of the latest JavaRa  (to make sure old versions are removed)?

It looks like the original website is being redirected to singularlabs.com/

And which version do I need for Windows XP  ( I have the NET frameworks up to 3.5)

[Corrine]

JavaRa is now maintained by SingularLabs.com.  Paul McLain, one of the developers of JavaRa, moved on to other projects, although Freð ðe Vries had stayed with the project -- at least at the time of the move to SingularLabs.  JavaRa | SingularLabs.  I suggest the "stable version" 2.0.  I also recommend the download link at the site, not the mirrors.  http://singularlabs.com/software/javara/javara-download/

BTW, Freð ðe Vries had also been maintaining a list of uninstallers, which also was moved to SingularLabs:  Ultimate List of Uninstallers | SingularLabs | SingularLabs.

[pastywhitegurl]

Got it. Thanks. :)

[ComicsLover]

Dang.  I always turn off Java, but now that I know that Office.Org uses it, got rid of the program (although I liked Writer quite a bit.  Back to WordPad.)

Unfortunately, my main computer also has some entertainment freebie program from HP that also uses it.  Oh well....another thing I can live without.

Instead of running JavaRA is there a way to tell via a search on Computer if Java still exists or is it best to trust JavaRA as it gets rid of Registry Keys too?  (I understand little blits of dust like that tend to stick in places worse than dust bunnies do in homes.)

[Corrine]

JavaRa may not take care of the older versions of the Java Console.  As I recall, the Java Console extensions would be located in the Firefox > Tools > Add-ons list.  To remove:

• Make sure you already have the most recent version, currently Java SE Runtime Environment 7u6.
  
• Go to C:\Program Files > Mozilla Firefox > extensions.
  
• Delete the folders "{CAFEEFAC-0016-0000-xxxx-ABCDEFFEDCBA}", where xxxx is the number of the JRE-version.  If Java is installed, keep the highest number as this is the latest version.  Otherwise, delete all.
  

[Corrine]

Download link:  Java Version 7 Update 11
Check version:  http://www.java.com/en/download/testjava.jsp

More information:  Out-of-Band Oracle Java Critical Security Update Released