+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 17
Downloads Thread, Oracle Java 7 Update 15 Released in Links, Downloads and Scripts; Update time! Java SE 7 Update 15 Download ( Windows : 32-bit , 64-bit ) / Release Notes / Security ...
  1. #1


    Join Date
    Feb 2007
    Location
    51.403651, -0.515458
    Posts
    9,390
    Thank Post
    241
    Thanked 2,817 Times in 2,078 Posts
    Rep Power
    813

    Oracle Java 7 Update 15 Released

    Update time!

    Java SE 7 Update 15
    Download (Windows: 32-bit, 64-bit) / Release Notes / Security Advisory

    Due to the severity of the vulnerabilities fixed in this Critical Patch Update, Oracle recommends that these fixes be applied as soon as possible.
    Oracle today released the updated February 2013 Critical Patch Update for Java SE. As discussed in a previous blog entry, the purpose of this update is to deliver 5 additional fixes which could not be included when Oracle accelerated the release of the Critical Patch Update by publishing it on February 1st instead of February 19th. Note that since Critical Patch Updates for Java SE are cumulative, this Critical Patch Update release also includes all previously-released Java SE security fixes.

    All but one of the vulnerabilities fixed today apply to client deployment of Java. This means that these 4 vulnerabilities can be exploited through Java Web Start applications on desktops and Java applets in Internet browsers. Three of these vulnerabilities received a CVSS Base Score of 10.0. As I stated before, Oracle reports the most severe CVSS Base Score, and these CVSS 10.0s assume that the user running the malicious Java Applet or Java Web Start application has administrator privileges (as is typical on Windows XP). However, when the user does not run with administrator privileges (as is typical on Solaris and Linux), the corresponding CVSS impact scores for Confidentiality, Integrity, and Availability are "Partial" instead of "Complete", typically lowering the CVSS Base Score to 7.5 denoting that the compromise does not extend to the underlying Operating System.

    The last security fix added by this updated Critical Patch Update release applies to server deployments of the Java Secure Socket Extension (JSSE). This fix is for a vulnerability commonly referred as the “Lucky Thirteen” vulnerability in SSL/TLS (CVE-2013-0169). This vulnerability has received a CVSS Base Score of 4.3.

    Finally, note that Oracle’s intent is to continue to accelerate the release of Java fixes, particularly to help address the security worthiness of the Java Runtime Environment (JRE) in desktop browsers. As a result, we will be issuing a Critical Patch Update for Java SE on April 16, 2013 at the same time as the normally scheduled Critical Patch Update for all non-Java products. The next scheduled release dates for the Critical Patch Update for Java SE are therefore: April 16, 2013; June 18, 2013; October 15, 2013; and January 14, 2014. (Source)
    Last edited by Arthur; 20th February 2013 at 07:27 AM.

  2. #2

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,240
    Thank Post
    882
    Thanked 2,742 Times in 2,316 Posts
    Blog Entries
    11
    Rep Power
    784
    For once I pushed it a day after it came out rather than before, Yay. Watch them pull it in an hours time because of some horrible flaw they knew about but thought would not affect anyone.

  3. Thanks to SYNACK from:

    john (20th February 2013)

  4. #3


    Join Date
    Feb 2007
    Location
    51.403651, -0.515458
    Posts
    9,390
    Thank Post
    241
    Thanked 2,817 Times in 2,078 Posts
    Rep Power
    813

  5. #4

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,212 Times in 761 Posts
    Rep Power
    395
    I'm thinking of advertising for a new position here of "Java and Flash Update Technician", it's starting to feel like a full time job.

  6. Thanks to AngryTechnician from:

    elsiegee40 (28th February 2013)

  7. #5
    DrCheese's Avatar
    Join Date
    Apr 2008
    Posts
    1,035
    Thank Post
    97
    Thanked 161 Times in 110 Posts
    Rep Power
    60
    ^ haha yup. I update it one week & check the next week only to find it's jumped 4 versions in the meantime. Madness.

    Is annoying as our remote access system uses java (SSL explorer)

  8. #6

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,265
    Thank Post
    242
    Thanked 1,575 Times in 1,254 Posts
    Rep Power
    341
    Love the logo Arthur! Java's literally got to be the buggiest language in active use today!

  9. #7


    Join Date
    Feb 2007
    Location
    51.403651, -0.515458
    Posts
    9,390
    Thank Post
    241
    Thanked 2,817 Times in 2,078 Posts
    Rep Power
    813
    Quote Originally Posted by Michael View Post
    Love the logo Arthur! Java's literally got to be the buggiest language in active use today!
    Oracle should replace the cup of Java in their logo with a colander (or perhaps a cafetière made of chocolate).

  10. #8

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,265
    Thank Post
    242
    Thanked 1,575 Times in 1,254 Posts
    Rep Power
    341
    Quote Originally Posted by Arthur View Post
    Oracle should replace the cup of Java in their logo with a colander (or perhaps a cafetière made of chocolate).
    I couldn't agree more. I keep it off all default images and have done for sometime now. The MSI's themselves are also growing. They should release smaller cumulative updates rather than the whole application everytime.

  11. #9

    vikpaw's Avatar
    Join Date
    Sep 2006
    Location
    Saudi Arabia
    Posts
    5,784
    Thank Post
    715
    Thanked 1,439 Times in 1,192 Posts
    Rep Power
    359
    Quote Originally Posted by Michael View Post
    Love the logo Arthur! Java's literally got to be the buggiest language in active use today!
    Quote Originally Posted by Arthur View Post
    Oracle should replace the cup of Java in their logo with a colander (or perhaps a cafetière made of chocolate).
    You'll like the new installer screen then Java 7 Update 17

  12. Thanks to vikpaw from:

    Arthur (5th March 2013)

  13. #10
    BarryBKS's Avatar
    Join Date
    Dec 2011
    Location
    Bournemouth, UK
    Posts
    14
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Just out of interest,

    Has anyone had major issues with updating Java via Silent deployment recently.

    I pushed out 7u9 silently and it worked like a dream, (well it installed OK and showed as working).

    My next update was 7u11, which I pushed out silently over the top of 7u9, but after going out, discovered the new security feature which stopped everything from working!

    Investigated the required switches to deal with the security 'feature' and created an MST, tested and deployed. Once shipped out, I discovered that although no errors were reported during the install, it appeared that 7u11 wouldn't install over a previous version. Reason unknown.

    Now have over 300 PCs with a falled install of Java 7u11! Tried to auto-removed the deployment, but this caused an error. Did a manual un-install and got an error box complaining of a missing un-install file, but this made sense as the installer had just finished un-installing and deleting the jre7 folder, so the file it was looking for no longer existed! Thanks Java.
    OK, so 7u11 doesn't install correctly and you can't un-install the failed package due to the un-installer looking for a file after it has been deleted. On over 300 PCs!

    Repaired the important PCs by manually un-installing 7u11, clearing the error message and then manually installing 7u11 with MST. But this was not a practical solution for the amount of machines needed to cover.

    Then 7u15 is released. OK, tested installer. Works over existing 7u11 manual install. Created required MST, no, applied MST to msi using Orca as advised that his was more stable. Tested new 7u15 msi file on several machines randomly picked. Installs fine over manual 7u11. Ran several of the Java based packages which are used throughout the school and these worked fine.

    Excellent, or not. Deployed edited msi silently across network. Install shows as successful, but software doesn't work. Error message that no Java Runtime is installed.
    OK, auto-uninstall. No, same error message as before. Manual un-install and manual re-install. No java installed. Egh!!!!

    Installed Revo, (Revo Uninstaller Pro), used Revo to uninstall Java package, scan for remaining registry keys, (some PCs had over 2000!), deleted keys and stray folders.

    Manually installed edited 7u15 msi and Java now works! Still have the remaining 250 PCs to manually repair.

    Question 1: Has anyone else had this issue?

    Question 2: Has anyone had this or similar with 7u17, which I have just noticed, is now out?

    Your thoughts would be appreciated.
    Last edited by BarryBKS; 5th March 2013 at 12:00 PM.

  14. #11

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,227
    Thank Post
    894
    Thanked 1,776 Times in 1,532 Posts
    Blog Entries
    12
    Rep Power
    461
    Quote Originally Posted by BarryBKS View Post
    Just out of interest,

    Has anyone had major issues with updating Java via Silent deployment recently.

    I pushed out 7u9 silently and it worked like a dream, (well it installed OK and showed as working).

    My next update was 7u11, which I pushed out silently over the top of 7u9, but after going out, discovered the new security feature which stopped everything from working!

    Investigated the required switches to deal with the security 'feature' and created an MST, tested and deployed. Once shipped out, I discovered that although no errors were reported during the install, it appeared that 7u11 wouldn't install over a previous version. Reason unknown.

    Now have over 300 PCs with a falled install of Java 7u11! Tried to auto-removed the deployment, but this caused an error. Did a manual deployment and got an error box complaining of a missing un-install file, but this made sense as the installer had just finished un-installing and deleting the jre7 folder, so the file it was looking for no longer existed! Thanks Java.
    OK, so 7u11 doesn't install correctly and you can't un-install the failed package due to the un-installer looking for a file after it has been deleted. On over 300 PCs!

    Repaired the important PCs by manually un-installing 7u11, clearing the error message and then manually installing 7u11 with MST. But this was not a practical solution for the amount of machines needed to cover.

    Then 7u15 is released. OK, tested installer. Works over existing 7u11 manual install. Created required MST, no, applied MST to msi using Orca as advised that his was more stable. Tested new 7u15 msi file on several machines randomly picked. Installs fine over manual 7u11. Ran several of the Java based packages which are used throughout the school and these worked fine.

    Excellent, or not. Deployed edited msi silently across network. Install shows as successful, but software doesn't work. Error message that no Java Runtime is installed.
    OK, auto-uninstall. No, same error message as before. Manual un-install and manual re-install. No java installed. Egh!!!!

    Installed Revo, (Revo Uninstaller Pro), used Revo to uninstall Java package, scan for remaining registry keys, (some PCs had over 2000!), deleted keys and stray folders.

    Manually installed edited 7u15 msi and Java now works! Still have the remaining 250 PCs to manually repair.

    Question 1: Has anyone else had this issue?

    Question 2: Has anyone had this or similar with 7u17, which I have just noticed, is now out?

    Your thoughts would be appreciated.
    Had problems in the past. When i deploy Java i first use the script in the link to remove all previous versions then do a clean install. I haven't had any issues at all doing it this way.

    http://www.edugeek.net/forums/securi...tml#post916245

  15. Thanks to FN-GM from:

    BarryBKS (5th March 2013)

  16. #12
    BarryBKS's Avatar
    Join Date
    Dec 2011
    Location
    Bournemouth, UK
    Posts
    14
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Thanks FN-GM,

    The script looks like it could be quite useful, but if it only runs the standard un-installer process, then I think it will probably fail with the missing un-installer file. Once the network is tidied up with respect to Java installs, I will certainly look at it as an option to keeping it tidy.

    Cheers,

    Barry.

  17. #13


    Join Date
    Feb 2007
    Location
    51.403651, -0.515458
    Posts
    9,390
    Thank Post
    241
    Thanked 2,817 Times in 2,078 Posts
    Rep Power
    813
    Quote Originally Posted by BarryBKS View Post
    Has anyone else had this issue?
    The best way to avoid problems I have found is to always uninstall the old version before you install the latest and edit the MST to prevent the JQS service from being installed.

  18. #14
    ADMaster's Avatar
    Join Date
    May 2012
    Posts
    348
    Thank Post
    5
    Thanked 38 Times in 33 Posts
    Rep Power
    24
    @BarryBKS
    Java update 15 was a nightmare for me. I tested on a few random machines they reported no problems. I also deployed a JNLP reg fix I found on another thread here.
    I then deployed java across the network, they reported a successful install, however looking in program files the .exe’s and several other files just were not there. Along with program files the exe are copied to system32 or syswow64 depending on your system.
    I use pdq deploy and I noticed in the package library java 15 and java 15 alternate. They said there were issues upgrading from java 11. The alternate installer included a couple commands to delete the iava 11 installer information from the registry.
    I modified this to delete the installer information for java update 15. Then on all the effected computers I ran the alternate installer to reinstall the update. This worked for most of them.
    I had one computer that did not copy the needed files to system32, which is where the jnlp fix looks for the exes. I had to copy the files manually. I now have everyone on Java 7u15
    Java updates are chaos because our grade book system uses java, and if the install breaks you have a mob of teachers that can’t do grades.
    Now I find out another critical update was just released.

  19. #15

    sonofsanta's Avatar
    Join Date
    Dec 2009
    Location
    Lincolnshire, UK
    Posts
    5,123
    Thank Post
    911
    Thanked 1,511 Times in 1,032 Posts
    Blog Entries
    47
    Rep Power
    653
    And lo and behold, just as you've all got Java 7u15 out the door...

    Quote Originally Posted by US-CERT Alerts
    Overview

    Oracle Java 7 update 15, Java 6 update 41, Java 5.0 update 40, and
    earlier versions of Java contain a vulnerability that can allow a
    remote, unauthenticated attacker to execute arbitrary code on a
    vulnerable system.

    Solution

    Update Java
    Oracle Security Alert for CVE-2013-1493 states that Java 7 Update 17
    (7u17) and and Java 6 Update 43 address this vulnerability (CVE-2013-
    1493) and a different but equally severe vulnerability (CVE-2013-0809).
    Java 7 Update 17 sets the default Java security settings to "High" so
    that users will be prompted before running unsigned or self-signed Java
    applets.
    (full text of alert)

    I just checked the dates on my SCCM source folders, and 7u17 will be the 4th version I've pushed out this year:
    * 7u11 - 2013-01-14
    * 7u13 - 2013-02-05
    * 7u15 - 2013-02-26
    * 7u17 - 2013-03-07
    If we didn't need the software for ECDL testing it'd be disabled right now.
    Last edited by sonofsanta; 7th March 2013 at 08:28 AM. Reason: link to full text of alert

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Replies: 3
    Last Post: 28th April 2012, 07:31 PM
  2. Sun Java Runtime Environment 6 Update 21
    By Arthur in forum Downloads
    Replies: 3
    Last Post: 9th July 2010, 04:00 PM
  3. Replies: 2
    Last Post: 9th April 2010, 08:37 PM
  4. Replies: 0
    Last Post: 16th June 2006, 09:00 PM
  5. Updating Java Runtime
    By ITWombat in forum Windows
    Replies: 3
    Last Post: 18th May 2006, 12:44 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •