SecurityTube

Java 7 update 10 introduces important new security controls

JB

Oracle only patches Java for security vulnerabilities three (?) times a year, but that doesn't mean it doesn't release other bug fix and feature releases of the nearly ubiquitous runtime environment.

Last week Oracle shipped Java 7 update 10 (Java 7u10), the latest in the Java 7 series, which includes new security controls in addition to a bug fix and updated timezone data.

What are these new controls?

The first one, my favourite, allows you to disable the Java web plugin by unchecking a single tick-box. After installing Java 7u10 you can open the Java control panel and uncheck the option "Enable Java content in the browser".