Java Update

Oracle pushed out an update to Java yesterday bringing the version up to Java 7 update 65. They also clarified their position on updates for Windows XP: Java updates will continue to work on Windows XP but they will not be fixing any issues that only affect XP.

Critical out-of-band Java update

Oracle released an update for Java that fixes some critical vulnerabilities. Four of the 37 fixes in the update are easily exploitable and give the attacker control of your computer so this one is critical to patch ASAP.

You can check which version of Java you are running at either Java's online update check or Mozilla's plugin checker. The latest version is Java 7 update 55.

More info on the update.

Java update finally released

Oracle has finally released an updated version of their Java 7 plugin. Java 7 update 9 is out today. Links to the update are on the side.

Update Tuesday and Java flaw

Microsoft has a few bug-fix updates this Tuesday, nothing critical.

Java 7 update 7 has a new flaw that is being exploited from web pages. There isn't currently an update to fix this flaw yet. My recommendation is to disable Java except for when you need it. Alternatively you can uninstall Java 7 and install Java 6.

Steps to disable Java in major browsers:

Internet Explorer:
From the gear icon on the upper right select Manage add-ons.
Select All add-ons from the Show drop-down on the left.
Click on each Java add-on and disable it.

Firefox:
Select Add-ons from the Firefox menu at the top-left.
Select Plugins on the left.
Disable all Java plugins.


Chrome:
Type in chrome://plugins into the address bar.
Disable all Java plugins.
Note: Chrome will prompt before it runs the Java plugin so disabling Java in Chrome is not strictly necessary.

Enabling Java again follows the same steps just select enable instead of disable. You can enable and disable plugins without closing and opening the browser again. Only enable Java for trusted sites and disable it again when you are done.

Critical Java 7 Update

If you have updated to Java 7 there is a critical update that you should install as soon as possible. You can download the latest version (Java 7 update 7) at http://java.com/en/download/

This fixes a high risk vulnerability that is currently being exploited.