Java Runtime Environment (JRE) Version 6 Update 20

The latest version fixed several security vulnerabilities :

CVE-2010-0886 - Java Deployment Toolkit

CVE-2010-0887 - New Java Plug-in

Java Runtime Environment (JRE) Version 6 Update 17

The latest version fixed several security vulnerabilities :

269869 : Command Execution Vulnerability in the Java Runtime Environment Deployment Toolkit May be Leveraged to Execute Arbitrary Code

269870 : Security Vulnerability in the Java Web Start Installer May be Leveraged to Allow Untrusted Java Web Start Application to Run As Trusted Application

270474 : Buffer and Integer Overflow Vulnerabilities in the Java Runtime Environment With Processing Audio and Image Files May Allow Privileges to be Escalated

270475 : A Security Vulnerability in the Java Runtime Environment With Verifying HMAC Digests may Allow Authentication to be Bypassed

270476 : Two Security Vulnerabilities in the Java Runtime Environment With Decoding DER Encoded Data and Parsing HTTP Headers may Result in a Denial of Service (DoS)

Smartphone & Non-smartphone

Model	Nokia E63	Nokia 5630 XpressMusic	Nokia 6260 slide
Developer Platform	S60 3rd Edition Feature Pack 1 (Smartphone)	S60 3rd Edition Feature Pack 2 (Smartphone)	S40 6th Edition (Non-smartphone)
OS	Symbian OS v9.2	Symbian OS v9.3	Nokia
Screen	320 x 240 2.36"	240 x 320 2.2"	320 x 480 2.4"
Flash Lite MIDP (Java)	3.0 2.0	3.0 2.1	3.0 2.1
Maximum User Storage/ Free Executable RAM/ NAND Memory/ SDRAM Memory/ Maximum Heap Size/ Maximum JAR Size	110MB/ 71MB/ 256MB/ 128MB/ Unlimited/ Unlimited	60MB/ -/ 256MB/ 128MB/ Unlimited/ Unlimited	200MB/ -/ -/ -/ 4MB/ 2MB
Browser	OSS	OSS	WebKit Open Source

Java Runtime Environment (JRE) Version 6 Update 15

The latest version fixed several security vulnerabilities:

263408 : A Security Vulnerability in the Java Runtime Environment Audio System may Allow System Properties to be Accessed

263409 : Security Vulnerabilities With the Proxy Mechanism Implementation in the Java Runtime Environment (JRE) may Lead to Escalation of Privileges

263428 : Integer Overflow Vulnerability in the Java Runtime Environment When Parsing JPEG Images

263429 : A Security Vulnerability With Verifying HMAC-based XML Digital Signatures in the XML Digital Signature Implementation Included With the Java Runtime Environment (JRE) may Allow Authentication to be Bypassed

263488 : Integer Overflow Vulnerability in the Java Runtime Environment (JRE) "Unpack200" JAR Unpacking Utility May Lead to Escalation of Privileges

263489 : A Security Vulnerability in the Java Runtime Environment (JRE) With Parsing XML Data May Allow a Remote Client to Create a Denial of Service (DoS) Condition

264648 : Security Vulnerability in the Active Template Library in Various Releases of Microsoft Visual Studio Used by the Java Web Start ActiveX Control May Be Leveraged to Execute Arbitrary Code

Error in JRE Version 6 Update 13

The latest version running in Windows 7 Beta resulted in an error while visiting its own website.

Java Runtime Environment (JRE) Version 6 Update 13

The latest version fixed several security vulnerabilities:

254569 : Security Vulnerabilities in the JRE LDAP Implementation may Allow a Denial of Service (DoS) and Malicious Code to be Executed

254570 : Integer and Buffer Overflow Vulnerabilities in the JRE "unpack200" JAR Unpacking Utility May Lead to Escalation of Privileges

254571 : Buffer Overflow Vulnerabilities in the JRE with Processing Image Files and Fonts may Allow Privileges to be Escalated

254608 : Security Vulnerabilities in the JRE With Storing and Processing Font Files May Allow Denial of Service

254609 : A Security Vulnerability in the JRE HTTP Server Implementation May Allow a Denial of Service Condition on a JAX-WS Service Endpoint

254610 : A Security Vulnerability in the JRE Virtual Machine With Code Generation May Allow Escalation of Privileges

254611 : Multiple Security Vulnerabilities in Java Plug-in May Allow Privileges to be Escalated

For privacy reason, you can uncheck "Keep temporary files on my computer".

The bug which does not allow you to uncheck "
Check for Updates Automatically" in JRE Version 6 Update 10 is still not resolved in this version.





But, you can disable JRE Auto-Download and jsched setting in Windows startup using msconfig.

Java Application Error in Windows 7 Beta

I've no issue with Java SE 6 Update 7 running in Windows Vista SP1 with Internet Explorer 7. There are some issues with the latest version Java SE 6 Update 10.

But, using Java SE 6 Update 7 in Windows 7 Beta with Internet Explorer 8 causes application error with general exception as shown.

Issues with Java SE 6 Update 10 on Vista SP1

On my computer running Windows Vista SP1, I encountered the following issues:

1. Each time I open IE 7 or open a new tab or window in IE 7, User Account Control will be activated to ask me about ssvagent. Disabling the add-ons do not help.
   

2. I can't disable the option to Check for Updates Automatically as shown.

I don't have such issues in Jave SE 6 Update 7.

In fact, Java SE 6 Update 10 does not contain any new fixes for security vulnerabilities to its previous release, Java SE 6 Update 7. Users who have Java SE 6 Update 7 have the latest security fixes and do not need to upgrade to this release to be current on security fixes. I decided to revert back to Java SE 6 Update 7.

Java Runtime Environment (JRE) Version 6 Update 10

Sun has updated the version of JRE from Version 6 Update 7 to Version 6 Update 10. There is no mention of the changes and the sudden jump from 7 to 10. The only thing mentioned during installation is JavaFX.

During installation on a computer running Windows XP SP3, it encountered the error as shown. This is puzzling as there is no other installation going on at the same time. But, it worked on another computer running Windows Vista SP1.

Java Runtime Environment (JRE) Version 6 Update 7

After installing the latest JRE Version 6 Update 7, I found that the older Version 6 Update 5 & 6 are not automatically removed.

Uninstalling the older versions to save disk space caused the errors as shown. In Mozilla Firefox 3, it is a runtime error but application error in IE 6 SP2. But, doing a reboot resolved all errors.

Java Runtime Environment JRE 6 Update 3

I downloaded the latest JRE 6 Update 3 as it fixed some security issues. For details, please refer to the following links:

Java Runtime Environment (JRE) Bugs Let Remote Users Bypass Network Access Restrictions

Java Web Start Bugs Let Remote Users Read/Write Files on the Target User's System

Java Runtime Environment (JRE) Lets Remote Applets Obscure the Untrusted Applet Warning Banner Display

During installation, I found that the update is trying to contact Sun. Please see the screen capture below. This is really intrusive. Anyway, I answered No and the installation was completed successfully.