Java 7u25 Released

[Chiefcrowe]

http://www.esecurityplanet.com/patches/oracle-patches-java-for-40-vulns.html

 

[pyonir]

Thanks. We'll see if this one holds up, or is full of problems yet again.

 

[bruceb]

Thanks, will update it.

 

[MontyAC]

Thanks for the heads up.

 

[lupi]

I was trying to update, yet find I can't. I was going to try to uninstall and do a fresh install, but that isn't working either. Noticed I still have a version 6 entry left in my program list also which doesn't respond to uninstall command.

Help?

 

[takeru]

for those planning to deploy java, there is apparently a corporate version:
http://www.labareweb.com/java-1-7-auto-update-deployment-with-sccmmdt/

Just to recap, any 7.25 version right now will turn off the “your version of Java is insecure” message. If you turned off the AutoUpdates tab (which I hope everyone does) that’s great as it will stop the balloon popup in the systray, but it Does Not stop the new updating mechanism that Oracle put in place with 7.17 and above.

When 7.21 came out and corporations are like, WTH Oracle, they quickly created the 7.21 With Auto-Update off. (This has nothing to do with the Updates tab, but the new Auto Update mechanism.) I’m sure most of us also heard from end users what is this security popup that now comes up. That was the 2nd patch Oracle made for 7.21 with AU off and insecure suppressed.

7.25 now comes out and thankfully Oracle was quick to create a 7.25 with AU off. That again is only the new update mechanism that throws the Upgrade, Block, or Later message. This is the version that I’ve tested that if you set your date our past the expiration any date in Dec 2013 you do NOT get the prompts. If you have the stock 7.25 and set your date to Dec 2013 you will reach the hard coded EOL and get the warning prompts. At least that is what happened with my testing . . . I could be wrong.

So if you can get the 7.25 with AU off it is essentially insurance that you don’t get these prompts again until you are ready to push out the next version. Personally, I’d try hard to get this because if Oracle really adds all these new features to 7.2X who know how many issues we’ll have.

 

[boochi]

for those planning to deploy java, there is apparently a corporate version:
http://www.labareweb.com/java-1-7-auto-update-deployment-with-sccmmdt/

The home user should NOTturn off any kind of java update notification as outdated java versions are the easiest entry point for malware to your PC.
I would say that 80-90% of infested PC's I see have old java versions. Keep your java up-to-date or don't install it at all.

 

[Berryracer]

Update 25? I had this since the 19th of June... I'm confused why it was just posted?

 

[pyonir]

I was trying to update, yet find I can't. I was going to try to uninstall and do a fresh install, but that isn't working either. Noticed I still have a version 6 entry left in my program list also which doesn't respond to uninstall command.

Help?

Try here: http://www.java.com/en/download/faq/remove_olderversions.xml

 

[lupi]

Try here: http://www.java.com/en/download/faq/remove_olderversions.xml

I had found that before but it seemed to only want to install the update which hung every time, so this time I hit the later button and it took me to the uninstall, yippee.

 

[takeru]

The home user should NOTturn off any kind of java update notification as outdated java versions are the easiest entry point for malware to your PC.
I would say that 80-90% of infested PC's I see have old java versions. Keep your java up-to-date or don't install it at all.

as my message entails, i am referring to individuals in a corporate environment who deploy software. just where did i even remotely mention home users? i doubt regular home users would even have access to said corporate versions easily, if at all.