Oracle JDK 7u10 released with new security features

A few days ago, we released JRE and JDK 7 update 10. This release adds support for the following new platforms:

  • Windows 8 on x86-64. Note that Modern UI (aka Metro) mode is not supported.
  • Internet Explorer 10 on Windows 8.
  • Mac OS X 10.8 (Mountain Lion)

This release also introduces new features that provide enhanced security for Java applet and webstart applications, specifically:

  • The Java runtime tracks if it is updated to the latest security baseline. If you try to execute an unsigned applet with an outdated version of Java, a warning dialog will prompt you to update before running the applet.
  • The Java runtime includes a hardcoded best before date. It is assumed that a new version will be released before this date. If the client has not been able to check for an update prior to this date, the Java runtime will assume that it is insecure and start warning the user prior to executing any applets.
  • The Java control panel now includes an option to set the desired security level on a low-medium-high-very high scale, as well as an option to disable Java applets and webstart entirely. This level controls things such as if the Java runtime is allowed to execute unsigned code, and if so what type of warning will be displayed to the user.

More details on the security settings can be found in the documentation. See below for a sample screenshot.

Security Dialog Image

The new update of the JRE and the JDK are available via OTN. To learn more about the release please visit the release notes.

Comments:

Guest,

I’m sorry to hear that you have had such a frustrating time trying to figure out and install JRE 7u10.

We try to account for as many configurations as possible and create an installer and download experience that is trouble free. Unfortunately there are too many variables outside of our control, like the quality of the connection or whether the target machine has left over installations that were improperly removed, that can cause problems with the download and install.

There are user forums available, some hosted by Oracle like: https://forums.oracle.com/forums/category.jspa?categoryID=285 (I know the URL is not to friendly, you can find it by searching for “Java Forums” on your favorite search engine) where you can get help from other Java users on most issues. You can also file a bug on bugs.sun.com. Forums are usually better if you need a quick direct response rather than a fix on a later release.

Finally I understand your confusion about “should I use JRE 6 or JRE 7”. So many different products use Java and some products make their own recommendation on which version to use.

To try and keep things simple for end users, we have http://java.com on which we only have one version: the one that Oracle recommends for end users. Until April of 2012 it was JRE 6, now it is JRE 7 and we post periodic updates to it. At this time it is 7u10. If you have auto-update turned on (it’s on by default) the JRE will prompt you to update whenever a new security update is available.

For enterprise desktops however the right JRE version is whichever one –or it might be more than one- your IT department recommends. There might be some important applications that, for any number of reasons, rely on earlier versions of Java. For enterprise users and developers we have a Java section in Oracle Technology Network (OTN) http://www.oracle.com/technetwork/java/javase were you can download not only the JRE but also the JDK and all the version that are publicly available. That includes JRE and JDK 6 until Feb of 2013 and JRE and JDK 7.

Posted by Aurelio Garcia-Ribeyro (Oracle) on December 31, 2012 at 12:46 PM PST #

1. I do NOT know HOW to file a bug.I kno2w almost next to nothing about computers and worse than nothing about developers, applets, or sll that other tech language

2. I am an old woman just trying to use my computer to read e mail and do medical research for several severe medical issues.

3. re your info where you state: ".....the JDK and all the version that are publicly available. That includes JRE and JDK 6 until Feb of 2013 and JRE and JDK ...are these different than Java SE version 10?

7. are all the above you describe....free?
and which is the most simple for novices?

8. MOST IMPORTANTLY....A WHILE BACK, I REMEMBER SEEING A TOOL THAT I COULD CLICK ON, ...TO GET RID OF ALL THE OLD SCRAPS AND PARTICLES OF OLD FAILED JAVA DOWNLOADS, AND SUCH.....

BUT I CANT RE-LOCATE THIS WEB PAGE TO FIND THIS TOOL...WOULD YOU or someone.....BE KIND ENOUGH TO PROVIDE AN ADDRESS I COULD CLICK ON.... TO GET ME THERE WITHOUT 4 MORE DAYS OF SEARCHING THE MANY FRUSTRATING AND CONFLICTING WEB PAGES????

THANKS
c. hunter
hunter10039@infostations.com

Posted by guest on December 31, 2012 at 08:14 PM PST #

can SOMEONE PLEASE PLEASE!!! help me find the special "tool" that I can click on to remove all traces of failed downloads of Java, and traces of any Java stuff????????

thanks

hunter10039@infostations.com

Posted by guest on January 01, 2013 at 03:07 PM PST #

Post a Comment:
Comments are closed for this entry.
About

Henrik Stahl is VP of Product Management in the Java Platform Group at Oracle, and is responsible for product strategy for Java ME and SE.

Search

Categories
Archives
« April 2014
SunMonTueWedThuFriSat
  
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
   
       
Today