Over the last few months Mojang has been testing a new launcher for the Windows PC Edition of Minecraft (an OS X launcher is in the works and expected by the end of the year).The primary (and newsworthy) change in the launcher is that it now downloads a stand alone version of Java that is independent of the general local installation of Java on the host machine. Java is notorious for zero day exploits and vulnerabilities.Unlike many other languages, as for example C , Java does not run directly on the hardware, but in a virtual machine, called JVM.Minecraft is written in Java, and uses it for all game logic. The latest versions of Java contain important enhancements to help improve performance, stability and security of the Java applications that run on your machine.For more information on Java applet vulnerabilities and how to disable Java applets in your web browser, see
Since launcher version 1.6.11, the Minecraft launcher is bundled with Java version 1.8.0_25, which is used by default.
We’ve written extensively about Java and the problems with the platform over the years; if you need a solid primer on why exactly Java is such a problem we’d strongly suggest reading over Java Is Awful and Insecure, It’s Time to Disable It, Here’s How.
As awful as Java is and as prone to zero day exploits as it may be, it’s also the magic that drives Minecraft, for better or worse.
If you have an affirmative use for Java, please update to the latest version; if you’re not sure why you have Java installed, it’s high time to remove the program once and for all.
According to Oracle’s release notes, seven of the eight vulnerabilities may be remotely exploitable without authentication — meaning they could be exploited over a network by malware or miscreants without the need for a username and password. Updates also should be available via the Java Control Panel or from