Completely redundant warning:

Reports have begun to come in about scams using popups urging you to immediately "click here to save yourself from the Java curse" or things similar. Of course clicking will install a "back door" that allows installation of about anything the criminal wants to put on your computer, with keystroke loggers (to steal passwords) being right up front in the payload.

Typical note at Bogus Java patch drops malware on your PC.

This article recommends getting the Java patch only from Oracle. This link does have a short "which Java do I need" bit that may be helpful in deciding what version(s) you want, but may not make things much clearer since the download it says you need doesn't obviously have the same name on the download button as what it's called in the "explanation." Maybe Oracle is a under a little pressure(?).

John