Critical Oracle Java Security Update

When Oracle released an out-of-band security update for Java SE, additional updates that had been planned were not included.  As a result, this critical security update was released to add the additional five fixes omitted earlier this month. 

In an surprising move, Oracle has added two additional dates to the update schedule in order to further accelerate Java security fixes.


If Java is still installed on your computer, it is recommended that this update be applied as soon as possible due to the threat posed by a successful attack.

Java Security Recommendations

1)  In the Java Control Panel, set the security to high.
2)  Keep Java disabled until needed.  Uncheck the box "Enable Java content in the browser" in the Java Control Panel.

(Image via Sophos Naked Security Blog)

3)  If you use Firefox, install NoScript and only allow Java on those sites where it is required.

Instructions on removing older (and less secure) versions of Java can be found at http://java.com/en/download/faq/remove_olderversions.xml

Download Information

Download link:  Java Version 7 Update 15

Verify your version:  http://www.java.com/en/download/testjava.jsp

Note: UNcheck any pre-checked toolbar and/or software options presented with the update. They are not part of the software update and are completely optional.

Critical Patch Updates

For Oracle Java SE Critical Patch Updates, the next scheduled dates are as follows:

• 16 April 2013
• 18 June 2013
• 15 October 2013
• 14 January 2014

References

• Java SE 7 Update Release Notes
• Critical Patch Updates, Security Alerts and Third Party Bulletin 
• Java, The Never-Ending Saga 

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...