Java

The idea is to not use Java at all if possible. It is full of holes and vulnerabilities. Don't have it enabled when you don't need it.

If needed, always be at the latest version. Vulnerabilities in one version often times extend to any previous version.

Yes Java might be required for some functionality in Open/LibreOffice but that can be used still without exposing yourself to vulnerabilities online.
The exploits are only exposed through a web browser, so by disabling the plugin's/addons that grant the ability to use the Java functionality through a browser you can maintain the functionality needed for other products, such as the mentioned office suites.

Also if you ensure a portable browser is only using the portable version of Java, then you can toggle it on or off using JPortable Browser Switch (https://portableapps.com/news/2013-01-12--jportable-browser-switch-1.0-r...) so that you can turn on Java should you wish only when you come across a site you trust, which actually requires it.

While that can no doubt be done manually through the browser itself, this is a simpler approach which (I assume) does not modify the configuration of the browser itself but enables or disables it at the Plugin itself.