New version of Java to install

[taouja]

Hello,

I have a question please.

We use the tool Nessus which detect the security failure, and it find that the version "Oracle Java SE" represents à risk for Mantis
(Oracle Java SE Multiple Vulnerabilities (July 2014 CPU)).

The security message :
The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is prior to 8 Update 5, 7 Update 55, 6 Update 75, or 5 Update 65. It is, therefore, affected by security issues in the following components : - Deployment - Hotspot - JavaFX - JMX - Libraries - Security - Serviceability - Swing

The proposed solution:
Update to JDK / JRE 8 Update 11, 7 Update 65, 6 Update 81, or 5 Update 71 or later and, if necessary, remove any affected versions. Note that an extended support contract with Oracle is needed to obt

I checked, the version of java installed in the server is 1.6 update 16.
Which highest version can we update ? must we update both JDK and JRE ?

Thank you for your quick response

Regards

[atrol]

Java can't be a risk for MantisBT as we don't use Java for it.
Maybe there is another product with name Mantis that uses Java.