Java SE updates fix critical security holes