Oracle states the following: This tells us that some attackers have been successful in infiltrating consumer PCs. Therefore, it is important to update your Java version to the latest update using the guide below. Oracle has changed the Java Runtime license so that it is free for use only for non-commercial and personal usage. You will need to accept the license agreement before installing Java on your computer.
Quick facts
Latest Java Version: Java 8 Update 271-b09Release date: October 20th, 2020 (All version release dates here)Last stable version: Java 8 Update 261Compatible OS: Windows 10, Windows 8 and Windows 7, macOS, Linux, and SolarisLicense: Free
Please note that Java 8 only runs on Internet Explorer as a browser extension.
Quick facts New features and bug fixes How to update Java Runtime Environment to version 8 Update 271 Closing words
New features and bug fixes
Java 8 Update 271 comes with the following updates:
A new security property, jdk.disabled.namedCurves, is implemented to list the named curves common to all of the disabledAlgorithms properties at once. Use the new property in the disabledAlgorithms properties, precede the full property name with the keyword included.The Kerberos client can now take advantage of more dynamic environment configurations and do not necessarily need to know (in advance) how to reach the realm of a target principal, thanks to enhancements made to the Kerberos client with the support of principal name canonicalization and cross-realm referrals.A new environment property, jdk.jndi.ldap.mechsAllowedToSendCredentials, has been added to control which LDAP authentication mechanisms are allowed to send credentials over clear LDAP connections
With this new update, Oracle has also started to remove the Java Plugin from JDK 8u for Linux, Solaris, and macOS platforms, since the NPAPI plugin is considered vulnerable and has been disabled by the majority of the browsers. You can read the complete change log in the release notes here. Here is the list of Oracle Java SE risk matrix that gives details about each vulnerability like affected Java version, affected component of Java, the type of exploit possible, and its scope. You can read more about this matrix here.
How to update Java Runtime Environment to version 8 Update 271
Updating to the latest version is quite easy. But if you want to know what version of Java is already installed on your computer, you can follow our tutorial about Java here. But if you want to download the latest version of Java, you can use the following links. These links will point you to Java 8 Update 271 offline installer downloads. Note that you will need to be logged in to Oracle’s website to download the latest Java update.
Closing words
Although it is important to update your Java version as soon as possible to avoid any attacks, updates can cause some applications to stop working. Hence, it is recommended to create a restore point before doing so.