Java SE 7 Update 11 Released

Oracle has released Java SE 7 Update 11, containing important security fixes. See Oracle Security Alert CVE-2013-0422 to learn more. Oracle strongly recommends that all Java SE 7 users upgrade to this release. Read the Release Notes for additional details about this release. Download Java SE 7 update 11.

A user may control, via the Java Control Panel, the level of security that will be used when running unsigned (also called "untrusted" or "sandboxed") Java apps in a browser. The user may select from five levels of security. See the "Setting the Security Level of the Java Client" documentation to see what the settings do and how users can tighten security. You can also read Henrik Stahl's blog Oracle JDK 7u10 Released with New Security Features.

Because this is an out-of schedule release remediating security vulnerabilities, going forward Oracle will increment the release number for all subsequent Java 7 releases by two numbers in order to continue having CPUs as odd numbers and limited updates as even numbers. For example, the next Java CPU release, scheduled for Feb 19, 2013, the JDK 7 release version will be renamed to Java SE 7u13.

Comments:

Thanks you oracle.

It is time to reinstall and enable java again.

Posted by Mohamed Ramadan on January 13, 2013 at 04:55 PM PST #

At last!

Posted by Carola on January 13, 2013 at 05:33 PM PST #

Windows Firefox Users who we asked to set Java Security to "Very High" are unable to upgrade their Java 7 Update 10 to Update 11.

Java 7 Update 10 and 11 - Verifying / Upgrading Java Version fails on "Very High" Security

In Java Control Panel (Windows 7) set Security to "Very High"

Using FireFox 18.0,
Go to www.java.com
Click "Verify Java Version" button

www.java.com/en/download/installed.jsp

Java verification does not complete and displays Dialog box:

Title: Application Blocked by Security Settings
Name: jreVerification
Your Security settings have blocked untrusted application from running

Is Oracle unable to sign their Java Detection Application with a valid Code Signer certificate ? Yet again another part of the JRE waiting to be exploited .

Posted by guest on January 13, 2013 at 05:39 PM PST #

How about security update for J2SE6 ?

Posted by guest on January 13, 2013 at 06:23 PM PST #

After installation, My Java Control Panel disappeared!

Posted by guest on January 13, 2013 at 07:06 PM PST #

The MAC OS/X version isn't available... why not?

Posted by guest on January 13, 2013 at 08:19 PM PST #

Any updates on v 6 as well?

Posted by Sverre on January 13, 2013 at 11:52 PM PST #

Thanks Tori! :)

Posted by guest on January 14, 2013 at 05:10 AM PST #

Is this awkward numbering scheme really necessary?

Posted by guest on January 14, 2013 at 07:37 AM PST #

I guess Homeland Security can use Java again now XD

Posted by guest on January 14, 2013 at 09:09 AM PST #

Security experts on Java: Fixing zero-day exploit could take 'two years'

ZDNET dot Com:

Security experts say you have went far enough.

Why should we turn JAVA back on?

Posted by guest on January 14, 2013 at 10:48 AM PST #

a ver quien es el valiente que va primero

Posted by sandra on January 14, 2013 at 10:56 AM PST #

Re the comment about "Application Blocked by Security Settings," it has been reproduced, and a bug has been filed. I'll publish a bug number as soon as I get it.
Thanks for the feedback.

Posted by Tori on January 14, 2013 at 01:09 PM PST #

Thank you Oracle! This information may have protected my computer and Those of the friends I Interact with across the net. : ) so Here's to you!

Posted by guest on January 14, 2013 at 02:56 PM PST #

I'm not computer savvy, but I know that I need to update my Java. I don't know where to go to get the download. All these other problems (the above comments) are confusing me. I am using Mozilla firefox 18 (or the latest version)where do I go to fix the java? Thank you.

Posted by k9jayne on January 14, 2013 at 08:01 PM PST #

I am not a great computer person fall into the older untrained category. Today my antivirus sent me to this page to update java... I turned it off awhile back. Now it seems to me after reading some of the posts here it is safer to have it turned off than to take a chance it may be vulnerable still. I don't understand computers the ins and outs completely and am ok with that as I am not sure being a computer genius is what I want to do with my retirement :) whatever Java does or is meant to do I have not missed it one bit being turned off... so my question is this... Am I safer with or without it? And since I don't know what it does...who needs it?

Posted by sandy55 on January 15, 2013 at 04:42 AM PST #

k9jayne, Go to java.com and click on "Free Java Download"

Posted by Tori on January 15, 2013 at 12:55 PM PST #

sandy55
Java is a programming language and computing platform used by software programs. Some applications and websites that won't work unless you have Java installed.

http://java.com/en/download/faq/whatis_java.xml

You can download Java for free at java.com.

Posted by guest on January 15, 2013 at 01:03 PM PST #

Some time ago, everyone was advised to go back to Java 6. I did that and got rid of the updater. When this Java 7 warning started appearing on the internet, I checked my version and I still have Java 6. Can I update directly to Java 7 update 11?

Posted by guest on January 16, 2013 at 07:17 AM PST #

"The MAC OS/X version isn't available... why not?"

If you have a Mac 10.7 or higher, Java isn't pre-installed on it so you don't have to worry

Posted by guest on January 16, 2013 at 01:28 PM PST #

" Can I update directly to Java 7 update 11? "

Install the complete JRE 7u11, then uninstall the JRE 6. For end users (rather than developers) having several JVMs installed is not usually necessary.

") whatever Java does or is meant to do I have not missed it one bit being turned off... "

Unless you visit websites using Java applets, there's no need to have it turned on. Most of those tend to be games sites and corporate intranets/extranets, so there's a good chance you're not going to encounter them in your internet use as an average user.

"I guess Homeland Security can use Java again now XD"

The moment Oracle makes a large enough campaign contribution to the correct people DHS will no doubt release a statement that Java is safe to use again.

Posted by JTW on January 22, 2013 at 11:59 PM PST #

"Any updates on v 6 as well?"

The vulnerability doesn't affect v6, so no need to worry about that one.

Posted by JTW on January 23, 2013 at 12:11 AM PST #

As I understand, this update is incomplete. Before going into a panic, I suggest you check your current version of Java. Most computers I have seen are running version 6 which is not affected. If it's not broke - don't fix it.

Posted by guest on January 27, 2013 at 09:17 AM PST #

Nice to see this, I know this is coming but sooner is better than later. Now I can reinstall <a href="http://javarevisited.blogspot.com.ar">Java</a> and even enable Java plugin in Chrome and Firefox.

Posted by guest on March 13, 2013 at 12:28 AM PDT #

Now that Java 6 is End of Life (free patches are no longer available), is Java 7 safer than Java 6?

Posted by L on March 28, 2013 at 08:15 AM PDT #

i like java

Posted by ebinesar on April 22, 2013 at 05:03 AM PDT #

ygame_applet
Location: yog23.games.ac4.yahoo.com/yog/

"your security settings have blocked an untrusted application from running"

What does that mean and how do I corrected it? Just updated to the latest Jave.

Posted by guest on June 19, 2013 at 09:39 AM PDT #

Post a Comment:
  • HTML Syntax: NOT allowed
About

Insider News from the Java Team at Oracle!

duke
javeone logo
Links


Search

Archives
« April 2014
SunMonTueWedThuFriSat
  
2
5
6
7
12
13
17
18
19
20
21
22
23
24
25
26
27
28
29
30
   
       
Today