In light of the recent java security debacle, Oracle has released a critical patch update advisory. The patch contains over 50 new security fixes, the vast majority of them having the highest-possible severity score of 10.
Note: For the casual web user, please note that Java is not JavaScript. Java is a separate install/plug-in. If you don’t know you need Java you probably don’t, and you should disable it in your browser.