Arthur Posted October 15, 2013 Posted October 15, 2013 Time for another update. Java SE 7 Update 45 (expires 14th February 2014) Download (Windows: 32-bit, 64-bit / OS X: 64-bit) / Release Notes October 2013 Critical Patch Update Released 50 of the Java SE vulnerabilities fixed in this Critical patch Update are remotely exploitable without authentication. The maximum CVSS Base Score for these Java SE vulnerabilities is 10.0, which denotes a complete takeover of the targeted system (down to the operating system) in instances where Java executes with administrative privileges (i.e. system privileges). Out of these 51 Java vulnerabilities, only 8 are applicable to client and server deployments of Java. 40 apply to client deployment of Java, including one which is only exploitable during Java client deployment. One of the vulnerabilities applies to the JHat developer tool. The last 2 vulnerabilities apply to sites that run the Javadoc tool as a service. For more information about these Java vulnerabilities, see the security matrix for Java SE located on the Critical Patch Update Advisory. (Source) http://i.imgur.com/ed63Nxc.jpg 3
free780 Posted October 16, 2013 Posted October 16, 2013 Just deployed u40. Sigh. Java more holes than swiss cheese!
plexer Posted October 16, 2013 Posted October 16, 2013 Newpersn msi is available by the normal methods with java. I'm sick of java which is why I removed it completely but put it back with 7 update 20 I think. Ben 1
newpersn Posted October 16, 2013 Posted October 16, 2013 Newpersn msi is available by the normal methods with java. I'm sick of java which is why I removed it completely but put it back with 7 update 20 I think. Ben Got it now... Couldn't find it. (I think its this one)
AngryTechnician Posted October 16, 2013 Posted October 16, 2013 Even Oracle can't keep up with their own updates now. Just installed 7u45 and this is the message I get when running the official Java test app (note warning in yellow).
sonofsanta Posted October 17, 2013 Posted October 17, 2013 For the love of... I wouldn't mind so much if recent updates hadn't enforced a big stupid warning saying YOUR JAVA IS OUT OF DATE, UPDATE, UPDATE the very minute a new version is released, thus causing all users to panic and ECDL testing to collapse entirely. A bit of a grace period on that one would be nice to save us having to rush deploy updates during ECDL season - as it happens, I was off yesterday and the seven minute warning one of my techs had to do this job in my place ended up with him inadvertantly typing the domain admin password in plain text where students could see it. Thanks a lot, Oracle. /sigh Is there a mailing list or something I can get on to get immediate notification of these updates? If I have an email when I get in at 8am I can at least push it out in a more orderly fashion in the time before school starts.
sted Posted October 17, 2013 Posted October 17, 2013 there is a switch in the msi to stop it doing the warning warning im old i believe
Arthur Posted October 17, 2013 Author Posted October 17, 2013 (edited) Is there a mailing list or something I can get on to get immediate notification of these updates? You can subscribe to the RSS feeds on the following websites to get a notification as soon as updates are available... Critical Patch Updates, Security Alerts and Third Party Bulletins (RSS) Oracle Software Security Assurance Blog (RSS) To disable the update warning message, you need to add deployment.expiration.check.enabled=false to your deployment.properties file. Details below. www.edugeek.net/forums/downloads/123291-java-runtime-environment-7-update-40-released-update-warning-can-now-disabled.html#post1053798 www.edugeek.net/forums/downloads/123291-java-runtime-environment-7-update-40-released-update-warning-can-now-disabled.html#post1065466 Edited October 18, 2013 by Arthur 1
chrbb Posted November 5, 2013 Posted November 5, 2013 Just installed 7.40, will now replace it with 7.45, which probably was released a day later I'm going to attempt to update the disable warning notice, but not sure what to do about the security level, set it to medium for everyone or what? I did my updates of adobe reader, that need an extra script to get rid of a certificate message, the latest flash made hector the saftey dolphin disappear, now java's causing the next headache!
sted Posted November 5, 2013 Posted November 5, 2013 Just installed 7.40, will now replace it with 7.45, which probably was released a day later I'm going to attempt to update the disable warning notice, but not sure what to do about the security level, set it to medium for everyone or what? I did my updates of adobe reader, that need an extra script to get rid of a certificate message, the latest flash made hector the saftey dolphin disappear, now java's causing the next headache! id be more worried about flash and smart notebook latest flash stops flash animation in notebook so no dice etc
sted Posted November 12, 2013 Posted November 12, 2013 (edited) right been having a go at this and i cant get java to deploy the msi runs fine manually but using a script (prior to using gpo for testing) it just wont deploy. i get an event id of 1033 in event viewer success or error status 1603 tried from network drive/dfs/c same issue any ideas? even via gpo it does the same a quick scan says im missing data1.cab but its there and seems intact (24,478k) tried reextracingfrom the exe (28,360k) no joy any ideas as im stumped i hate java looks like java 7u9 wont go away sigh dosent show in add remove progs but windows installer cleanup shows it Edited November 12, 2013 by sted
sted Posted November 12, 2013 Posted November 12, 2013 now ive got it instalkled on 1 test pc it works fine as admin but not as a user i get tried deployment.config/properties files below properties deployment.javaws.autodownload="NEVER" deployment.javaws.shortcut="NEVER" deployment.system.tray.icon=false deployment.webjava.enabled=true deployment.insecure.jres=always deployment.expiration.check.enabled=false deployment.security.level=MEDIUM config deployment.system.config=\\domain.local\dfs\packages\Java\jre1.7.0_45\deployment.properties deployment.system.config.mandatory=true have i mentioned i hate java and it 'ing well works in chrome so mi have a solution but id rather it worked in ie as well
free780 Posted November 12, 2013 Posted November 12, 2013 Why not push out the deployment . properties to the local pc using gpp.
EvLPhenom Posted November 12, 2013 Posted November 12, 2013 Sick of the amount of updates java release, not long deploy u40 to our machines!!
sted Posted November 12, 2013 Posted November 12, 2013 Why not push out the deployment . properties to the local pc using gpp. when it works i will
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now