Which Patch and how to install it on a windows server?

User_V36M7

Hi,

I am fairly new to the forum and don't have much of technical expertise. Recently was assigned the task to take care of few security vulnerabilities on one of the windows server. Current version: jre1.8.0_60

Below is what the scan highlighted:

Questions:

1. Will installing Oracle Java SE Critical Patch Update - October 2021 (CPUOCT2021) update take care of rest of the vulnerabilities given these patches are cumulative?
2. Are there silent install instructions available somewhere? Planning to add a package to Big Fix instead of manually installing it all the time.

Quentin van Heerden

1. They will patch up to the vulnerabilities found and fixed on October 2021. But it would be better to use a later one like the one released in JUL 2022 as more included. but you can check the oracle site for all the details on the latest patches with links on where to download. Critical Patch Updates, Security Alerts and Bulletins (oracle.com)
2. A quick search and i found what looks to be the official page with the instructions:

How do I arrange a silent (unattended) Java installation?

/s option allow for silent.

REMOVEOUTOFDATEJRES=1 option would also remove the old version.

See Windows JRE 8 installer options (docs.oracle.com) for more information.

Hope this guides you in the right direction.