Technical Discussion
  >> Windows Issues


Register (or login) on our website and you will not see this ad.


Pages in this thread: 1 | 2 | 3 | 4 | (show all)   Print Thread
Standard User NICK_ADSL_UK
(fountain of knowledge) Sun 13-Jan-13 22:47:16
Print Post

Java 7u11 now available for download


[link to this post]
 
Release Notes:
Bug Fixes
This release contains fixes for security vulnerabilities. For more information, see Oracle Security Alert for CVE-2013-0422.
http://www.oracle.com/technetwork/topics/security/al...
In addition, the following change has been made:
Area: deploy
Synopsis: Default Security Level Setting Changed to High
The default security level for Java applets and web start applications has been increased from "Medium" to "High". This affects the conditions under which unsigned (sandboxed) Java web applications can run. Previously, as long as you had the latest secure Java release installed applets and web start applications would continue to run as always. With the "High" setting the user is always warned before any unsigned application is run to prevent silent exploitation.
http://www.oracle.com/technetwork/java/javase/7u11-r...
http://www.oracle.com/technetwork/java/javase/downlo...

Wilders Security Admin
Microsoft MVP - Consumer Security


For the latest in virus software signatures
From the Security specialists
Wilders security

Keep Your Security /Software Current
Upgrades, Updates & Definitions
Major Geeks

Microsoft Security Advisories
Standard User Banger
(eat-sleep-adslguide) Mon 14-Jan-13 03:31:18
Print Post

Re: Java 7u11 now available for download


[re: NICK_ADSL_UK] [link to this post]
 
I installed the offline and online package and no firefox plugin. FF is telling me to install the 7u10 plugin which of course fails because its blocked. Done on 3 machines.

Tim
www.vivaciti.net & freenetname
Billion 7800 on 24 Meg Variety LLU
My Broadband Speed Test
Standard User Chrysalis
(eat-sleep-adslguide) Mon 14-Jan-13 11:43:45
Print Post

Re: Java 7u11 now available for download


[re: Banger] [link to this post]
 
yeah its a mess of a situation.

I think having things like blocklists when the new one doesnt work or not available is a big fail, no need for such hand holding.

BT Infinity 2 Since Dec 2012 - Estimate 65.9/20 - Attainable peak 110/36 - Current Sync 71/20


Register (or login) on our website and you will not see this ad.

Standard User Chrysalis
(eat-sleep-adslguide) Tue 15-Jan-13 19:29:23
Print Post

Re: Java 7u11 now available for download


[re: Banger] [link to this post]
 
I got it working by disabling the plugin blocker in about:config then reinstalling the latest java manually. If I just reinstalled the java and left the blocker on it didnt install to firefox, so seems that blocker is blocking the latest java on my machine.

java is heavily used in corporate environments so I think any auto blocking like this is a bad idea.

BT Infinity 2 Since Dec 2012 - Estimate 65.9/20 - Attainable peak 110/36 - Current Sync 71/20
Standard User Banger
(eat-sleep-adslguide) Tue 15-Jan-13 20:10:57
Print Post

Re: Java 7u11 now available for download


[re: Chrysalis] [link to this post]
 
Thanks for the tip. Funny thing is it has installed in win 8 just not xp.

Tim
www.vivaciti.net & freenetname
Billion 7800 on 24 Meg Variety LLU
My Broadband Speed Test
Standard User Zadeks
(experienced) Sun 27-Jan-13 21:45:00
Print Post

Re: Java 7u11 now available for download


[re: Chrysalis] [link to this post]
 
User security > temporary inconvenience.
Standard User Chrysalis
(eat-sleep-adslguide) Mon 28-Jan-13 00:52:26
Print Post

Re: Java 7u11 now available for download


[re: Zadeks] [link to this post]
 
major inconveniance when work apps use java.

java is a largely used app, eg. its commonly used for kvm access.

In my line of business I cant simply turn java off.

Also the fact having a version of java installed with a security vuln doesnt automatically mean bam exposed. Thats the problem with baby sitting type security that forces disabling software.

BT Infinity 2 Since Dec 2012 - Estimate 65.9/20 - Attainable peak 110/36 - Current Sync 71/20
Standard User David_W
(experienced) Mon 28-Jan-13 01:49:52
Print Post

Re: Java 7u11 now available for download


[re: Chrysalis] [link to this post]
 
If you have a recent version of Firefox (certainly 18 and up, possibly 17 and up), you will get a red Lego brick at the left of the address bar when navigating to a page that needs Java. Click this and you get a drop down allowing you to activate Java one time or always for the site.

This seems a reasonable balance of security and convenience.


If this is too much hassle, find the XML blocklist in your Firefox profile (I think it's blocklist.xml but haven't checked), edit out the Java entry and make it read only to stop it being overwritten by a fresh copy from the Mozilla servers.

Standard User Zadeks
(experienced) Mon 28-Jan-13 09:22:56
Print Post

Re: Java 7u11 now available for download


[re: Chrysalis] [link to this post]
 
It's common for enterprise to whitelist Java sites at firewall level. This helps prevent infected/hacked sites from serving .jar with malicious payloads to vulnerable versions of Java.

90% of Java exploits are pure drive-by with zero user interaction required.

The "baby sitting" is required because, unlike Windows & Adobe products, Java doesn't have an automatic background update facility and as a result, many users are stuck on old versions of Java.
Standard User Chrysalis
(eat-sleep-adslguide) Mon 28-Jan-13 19:14:12
Print Post

Re: Java 7u11 now available for download


[re: David_W] [link to this post]
 
yes and that works fine for me thats how it works now.

But previously with that blocklist enabled, it blocked install of the latest java (the fixed one). Also firefox itself then would try to download an older version of java.

I cant afford for firefox to periodically disable java, and since I know what I am doing (only let it run when specifically approved) I just disabled the blocklist.

BT Infinity 2 Since Dec 2012 - Estimate 65.9/20 - Attainable peak 110/36 - Current Sync 71/20
Pages in this thread: 1 | 2 | 3 | 4 | (show all)   Print Thread

Jump to