The scheduled February Java critical patch update was accelerated due to active exploitation “in the wild” of one of the vulnerabilities affecting the Java Runtime Environment (JRE) in desktop browsers.
The new Java release is Java™ SE Development Kit 7, Update 13 (JDK 7u13), with the full version string for this update release being 1.7.0_13-b20 (where "b" means "build") and the version number is 7u13.
If you have uninstalled Java due to recent critical vulnerabilities and have not missed it, my suggestion is to bypass re-installing it until or unless it is needed. See Java, The Never-Ending Saga for additional information on removing or disabling Java.
Should there be software programs you use or websites that you visit that require Java, it is strongly advised that the update be applied as soon as possible.
Java Security Recommendations
1) In the Java Control Panel, set the security to high.2) Keep Java disabled until needed. Uncheck the box "Enable Java content in the browser" in the Java Control Panel.
 |
| (Image via Sophos Naked Security Blog) |
3) If you use Firefox, install NoScript and only allow Java on those sites where it is required.
Instructions on removing older (and less secure) versions of Java can be found at http://java.com/en/download/faq/remove_olderversions.xml
Download Information
Download link: Java Version 7 Update 13Verify your version: http://www.java.com/en/download/testjava.jsp
Note: UNcheck any pre-checked toolbar and/or software options presented with the update. They are not part of the software update and are completely optional.
Critical Patch Updates
For Oracle Java SE Critical Patch Updates, the next scheduled dates are:- 18 June 2013
- 15 October 2013
- 14 January 2014
References
Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...
No comments:
Post a Comment