Sun Microsystems has issued updates for its ubiquitous Java software to plug multiple security holes. Of particular interest in this bundle is a fix that prevents attackers from exploiting vulnerabilities in older versions of the software. Why is this a big deal, you ask? Aren’t patches designed to fix vulnerabilities in older versions of the software? Well, yes, but as Security Fix has lamented time and again, Sun’s updates are notorious for leaving older versions of the software lying all over the user’s machine. If this conundrum sounds familiar, you’re not crazy (although you might be a geek). Roughly two years ago, Sun quietly acknowledged in a security update that it had fixed a very similar flaw — even if the latest, patched version was installed and set as the authoritative version to be used by both the operating system and the user’s default Web browser. A PR firm, hired