Critical Java Update Fixes 20 Flaws!

KIA · 20 Oct 2011 at 17:48

http://krebsonsecurity.com/2011/10/critical-java-update-fixes-20-flaws/

http://java.com/en/download/installed.jsp will let you know if you have the latest version. Patch as soon as possible because by default the auto-update program only checks once a month. :eek:

iviv · 20 Oct 2011 at 17:56

On the subject of Java, what's going on with Java 7? I have filehippo which keeps telling me its available, but on the main java.com website it keeps telling me that version 6 is the latest?

theheyes · 20 Oct 2011 at 18:07

If you don't use Java the best thing to do is just get rid of it. Same with adobe reader and flash.

As for Java 7 as of yesterday there was a link on the left hand side of the page which said "looking for java 7?" and it took you to a page basically saying it was a developer release.

dfarrall · 20 Oct 2011 at 18:09

Every patch fixes some vulns, thats the point of it. Wouldnt say this one is any more severe than the others.

KIA · 20 Oct 2011 at 18:26

dfarrall said:
Every patch fixes some vulns, thats the point of it. Wouldnt say this one is any more severe than the others.

People need alerting.

theheyes said:
If you don't use Java the best thing to do is just get rid of it. Same with adobe reader and flash.

Agreed. Plenty of decent alternatives to Reader. Sumatra is my favourite or just open with Google Chrome.

bledd · 20 Oct 2011 at 22:29

I wish MS would allow Java and Flash updates through Windows update, but of course download from Sun and Adobe servers

Mr Krugga · 20 Oct 2011 at 23:45

bledd. said:
I wish MS would allow Java and Flash updates through Windows update, but of course download from Sun and Adobe servers

And the older versions don't automatically uninstall themselves upon the install of a new one.

Load of crap, that's what it is.

anything I don't mind · 21 Oct 2011 at 09:54

java update is so annoying. I just rolled out 100 pcs with java update disabled because the users do not have local administrator rights so the java update can not install and it just keeps reminding the users. So i disabled the auto update.

But the damn thing just re-enabled itself and now i have 100 users being prompted to install the java update constantly. got to be the single most annoying software around.

Java sucks!!!!!!

KIA · 21 Oct 2011 at 09:57

Why do they need Java?

anything I don't mind · 21 Oct 2011 at 09:58

Often the users will use client extranets and similar that require java. So instead of hassling with installing it when they need it, i built flash and java in to the image. But i disabled the updates. I was going to update flash and java through silent installs on start up scripts or similar.

But java sucks, the auto update sucks. java itself sucks, it is slow and prone to exploits. Most software made with java is slow and resource hungry and looks crap.

I have had easier time removing malware than disabling the java auto update.

DanielSon · 22 Oct 2011 at 17:28

tip for java update,

use ccleaner (tools, startup)or some other tool that lets you control the start-up processes, disable the java update from running. its likely in the registry so if you could probably push out a reg key on your client machines to fix/delete it.