Tuesday, July 28, 2009

Java SE Runtime Environment 6u15 Update

Update:
Java SE 6u15 was pulled from the download site. According to the Advance notification of Security Updates for Java SE published by Sun yesterday, the release has been rescheduled for Tuesday, August 4.


Sun Microsystems has released update Java SE 6u15, which addresses US-CERT Vulnerability Note VU#466161 describing a security vulnerability with "verifying HMAC-based XML digital signatures."

In the event you have any old Java updates prior to 6u11, it is strongly advised that you go to Add/Remove programs and uninstall those versions as the "update mechanism" did not remove those vulnerable versions. Following the uninstall, run JavaRa. Merely unzip JavaRa to your desktop and do the following:
  • Double-click on JavaRa.exe to start the program. (Windows Vista users right-click JavaRa.exe > Select Run as Administrator)
  • Click on Remove Older Versions to remove older versions of Java.
At last check, the site has not been updated but the download link is live here: Java SE Runtime Environment 6u15. (Note: uncheck any pre-checked toolbar and/or software options presented with the update. They are not part of the software update and are completely optional.)

References:



Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

2 comments:

cel said...

Corrine when I go to update page it says:
"Java SE Runtime Environment 6u15
Product Not Found

The product you requested is not available at this time.

If you require further assistance, report the product name and referring URL to Customer Service."

Corrine said...

Hi, Cel. It appears that Sun Microsystems pulled the security update 6u15 and rescheduled the release for August 4: Security.