Security → Oracle Critical Patch updates [Java Updates] October 20, 2015

Oracle Critical Patch Update Pre-Release Announcement - October 2015
This Critical Patch Update Pre-Release Announcement provides advance information about the Oracle Critical Patch Update for October 2015, which will be released on Tuesday, October 20, 2015. While this Pre-Release Announcement is as accurate as possible at the time of publication, the information it contains may change before publication of the Critical Patch Update Advisory.

Oracle Java SE
This Critical Patch Update contains 25 new security fixes for Oracle Java SE. 24 of these vulnerabilities may be remotely exploitable without authentication, i.e., may be exploited over a network without the need for a username and password.

The highest CVSS Base Score of vulnerabilities affecting Oracle Java SE is 10.0

The Oracle Java SE components affected by vulnerabilities that are fixed in this Critical Patch Update are:
• Java SE
• Java SE Embedded
• JavaFX
• JRockit

When available updates can be found at:
Java (consumer site) - »java.com/en/download/manual.jsp
Oracle Java - »www.oracle.com/technetwo ··· d=ocomen

Thanks for the notification.

At least they still give some warning and basic information. MS is trying to get rid of that.

For now...

it has just released on oracle site.

Thanks!

Java SE 8 update 65 / 8u66
Java SE 8u65 includes important security fixes. Oracle strongly recommends that all Java SE 8 users upgrade to this release. Java SE 8u66 is a patch-set update, including all of 8u65 plus additional features (described in the release notes).

Downloads - »www.oracle.com/technetwo ··· d=ocomen
Downloads - Consumer - »www.java.com/en/download ··· nual.jsp

I got an update popup on one computer this afternoon. As always, I download the offline installer and use that to avoid the adware.

 
I installed this update on two PCs. During each install, I said to remove any old versions, and the installer confirmed that it did remove an old version (v60, in my case).

When I went to the Java applet on the Control Panel, and checked to see what version(s) were installed, I noticed that the old version (v60) had not been de-installed.

So I manually deleted the folder containing the old version on the two PCs. Now the Control Panel applet reports that only the current version is installed.

(note that I used the offline installer in both instances)

fwiw.

I saw that also. But I don't understand "user" vs "system" tabs in Java control panel (never mind that I've used Java forever but am confused by this)...duh. Anyhow, what I noticed was that the "user" tab has v60 checked as well as v65 but the "system" tab has only v65. Java.com tells me I don't have any old versions installed when I run the Java uninstaller tool. It's the x64 version that I have v60 files still in C:\Program Files\Java. For x86 version I only have v65 files. I unchecked the v60 under the "user" tab but is that enough? Especially since it is the x64 v60 version files that are still are there. x64 is used with my default browser. The other browsers use x86 and IE 10...it uses both I guess.

I am reluctant to just delete the folder like you did. But it's not in Programs and Features and Java Uninstaller doesn't see it. So how do I uninstall that x64 v60 files?