Java Update

Forums › Desktop computing › Java Update

StevieT

702 posts

Ultimate Geek

#114471 20-Feb-2013 18:47

I now have Java jdk-7u15-windows-x64. Is it now safe to enable Java within browsers (I require it for Massey University)?

(not sure when this update was released; doing a quick google shows no articles on it fixing security issues)

kyhwana2

2566 posts

Uber Geek

#766666 20-Feb-2013 20:05

No.
(Use your browser in a VM or use a java and javascript whitelist)

jamesrt

1612 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#766694 20-Feb-2013 20:45

kyhwana2: No.

That's perhaps a little harsh, a) considering that the OP said they required Java, and b) that update is only a day or two old at the most (I get the Oracle security alerts thru work, and 7U15 only updated onto my OS today).

To the OP, 7U15 is the latest Java, and does contain fixes for all known issues to date, I believe. Of course, whether that actually means there aren't any more holes is another issue!

kyhwana2: (Use your browser in a VM or use a java and javascript whitelist)

For the paranoid, or those who want to be secure AND who have the ability to set either of those options up, then that is quite reasonable advice. Although 7U15 is the latest, there is no guarantee it is secure, given that Oracle have failed to fully secure the product across multiple previous updates. I think Java is pretty much tarred with the "use at own risk" brush now.

kyhwana2

2566 posts

Uber Geek

#766712 20-Feb-2013 20:53

:)
There's also more pending updates from Oracle, according to the download page for u15 that they're releasing next month (Or maybe April?)

bfginger

1268 posts

Uber Geek

#766765 20-Feb-2013 22:51

Java's always insecure. Just use a different browser with Java enabled for only the Massey website.