LandzDown Forum

Security => Security Alerts & Briefings => Topic started by: Corrine on October 21, 2015, 03:47:38 PM

Title: Oracle Java Quarterly Critical Security Update for October, 2015
Post by: Corrine on October 21, 2015, 03:47:38 PM
Oracle released the scheduled critical security updates for its Java SE Runtime Environment software along with a subsequent update that includes "bug fixes".  With the usual warnings about pre-checked extras, the update for the latest version available at the download link is Java SE 8u65 (http://java.com/en/download/) with Java SE 8u66 not yet available.  Java SE 8u66 can be found here (http://www.oracle.com/technetwork/java/javase/downloads/jre8-downloads-2133155.html).  Select the appropriate version for your operating system.  You can verify your version here:  Verify Java Version (http://www.java.com/en/download/testjava.jsp).

Although most people do not need Java on their computer, there are some  programs and games that require Java.  In the event you need to continue  using Java, How-to Geek (http://"http://www.howtogeek.com/198240/avoid-javas-ask-toolbar-installations-with-this-one-weird-registry-hack/")  discovered a little-known and  unpublicized option in the Java Control  Panel to suppress the offers for the pre-checked unwanted extras.

Java SE 8u65 Update Release Notes (http://www.oracle.com/technetwork/java/javase/8u65-relnotes-2687063.html)
Java SE 8u66 Update Release Notes (http://www.oracle.com/technetwork/java/javase/8u66-relnotes-2692847.html)
Title: Re: Oracle Java Quarterly Critical Security Update for October, 2015
Post by: DR M on October 21, 2015, 06:49:37 PM
Corrine,

So, should I install both?? 65 and 66? 66 fixes some bugs of 65, but it's not the full version?
Title: Re: Oracle Java Quarterly Critical Security Update for October, 2015
Post by: Corrine on October 21, 2015, 06:51:28 PM
JRE SE 8u66 incorporates the security updates in 8u65 so you only need to install 8u66.  Just be sure to get the right version and watch out for unwanted extras (pre-checked optional software).
Title: Re: Oracle Java Quarterly Critical Security Update for October, 2015
Post by: DR M on October 21, 2015, 07:01:27 PM
Oops!

Error code 1603. Installation failed. But Scotty warned me about a start up program's changes (SunJave Updates).
Title: Re: Oracle Java Quarterly Critical Security Update for October, 2015
Post by: DR M on October 23, 2015, 06:08:53 PM
For the history, and if someone is interested:

I tried to install update 66 several times, but every time I was getting error 1603.

Then I tried to install the offline version, and now I have the latest version of Java.
Title: Re: Oracle Java Quarterly Critical Security Update for October, 2015
Post by: DR M on October 23, 2015, 06:33:20 PM
Sorry for the second post, but I would also like to say that version 66 (offline) does not uninstall the older versions of Java. This can be done manually, from Control Panel (Uninstall a program).

This is my experience with Java latest version.
Title: Re: Oracle Java Quarterly Critical Security Update for October, 2015
Post by: ky331 on October 23, 2015, 08:21:55 PM
For what it's worth, I always use the OFFLINE installers for Java (on those systems where I have no choice but to keep Java around).

I opted to install u65 (on several Win7 systems)--- which contains all the security enhancements --- and it located and offered to remove older versions of Java.