Java Runtime Environment 8 Update 71 released

[Arthur]

Java SE 8 Update 71 (expires 19 April 2016)

Download (Windows: 32-bit, 64-bit / OS X: 64-bit) / Release Notes / Bug Fixes / Risk Matrix / Command-line Parameters for MSI(s)

 

Java SE 8 Update 73 (expires 19 April 2016)

Download (Windows: 32-bit, 64-bit / OS X: 64-bit) / Release Notes / Command-line Parameters for MSI(s)

 

http://vgy.me/c7L2Ru.jpg

Edited February 7, 2016 by Arthur

[3s-gtech]

Cheers, just updated our single, solitary machine (a server) that runs it

[Arthur]

I only have Java installed on a few PCs too. I'll be glad to see the back of it (especially since the number of vulnerabilities in Oracle software is increasing dramatically!)

[RowlandoGloom]

....I hate it with a passion. Ditched it at Uni. It's outdated and nigh on unusable if your software isn't trusted.

[Arthur]

Oracle released yet another update on Friday. Download links in the first post.

 

Update 73 (and 74) fix the following vulnerability.

 

Oracle just released Security Alert CVE-2016-0603 to address a vulnerability that can be exploited when installing Java 6, 7 or 8 on the Windows platform. This vulnerability has received a CVSS Base Score of 7.6.

 

To be successfully exploited, this vulnerability requires that an unsuspecting user be tricked into visiting a malicious web site and download files to the user's system before installing Java 6, 7 or 8. Though considered relatively complex to exploit, this vulnerability may result, if successfully exploited, in a complete compromise of the unsuspecting user’s system.

 

Because the exposure exists only during the installation process, users need not upgrade existing Java installations to address the vulnerability. However, Java users who have downloaded any old version of Java prior to 6u113, 7u97 or 8u73, should discard these old downloads and replace them with 6u113, 7u97 or 8u73 or later.

 

Source: https://blogs.oracle.com/security/entry/security_alert_cve_2016_0603

Edited February 7, 2016 by Arthur