Java Runtime Environment 8 Update 31 (and 7 Update 75/76) released

Arthur · January 21, 2015

It's that time again!

Java SE 8 Update 31 (expires 14 April 2015) (Recommended)

Download (Windows: 32-bit, 64-bit / OS X: 64-bit) / Release Notes / Bug Fixes / Risk Matrix

Java SE 7 Update 75 (CPU) / 76 (PSU) (expires 14 April 2015)

Download / Release Notes / Bug Fixes / Risk Matrix

January 2015 Critical Patch Update Released
This Critical Patch Update delivers 19 new security fixes for Oracle Java SE. The most severe of these vulnerabilities received a CVSS Base Score of 10.0. This score is reported for 4 distinct Java SE client-only vulnerabilities (CVE-2014-6601; CVE-2015-0412; CVE-2014-6549; and CVE-2015-0408). Out of these 19 vulnerabilities, 15 affect client-only installations, 2 affect client and server installations, and 2 affect JSSE installations. This relatively low historical number for Oracle Java SE fixes reflect the results of Oracle’s strategy for addressing security bugs affecting Java clients and improving security development practices in the Java development organization.

It is very important to note that, with this Critical Patch Update, Oracle will change the behavior of Java SE in regards to SSL. This Critical Patch Update will disable by default the use of SSL version 3.0. SSL v3.0 is widely regarded as an obsolete protocol, and this situation is aggravated by the POODLE vulnerability (CVE-2014-3566). As a result, this protocol is being widely targeted by malicious hackers.

Organizations should disable the use of all versions of SSL as they can no longer rely on SSL to ensure secure communications between systems.

Customers should update their custom code to switch to a more resilient protocol (e.g., TLS 1.2). They should also expect that all versions of SSL be disabled in all Oracle software moving forward. A manual configuration change can allow Java SE clients and server endpoints, which have been updated with this Critical Patch Update, to continue to temporarily use SSL v3.0. However, Oracle strongly recommends organizations to phase out their use of SSL v3.0 as soon as possible. (Source)

Arthur · January 21, 2015

Bump...

Norphy · January 21, 2015

Oh how I hate Java...

X-13 · January 21, 2015

[ATTACH=CONFIG]28605[/ATTACH]

Oh how I hate Java...

And flash.

And any other piece of software that seems to have an update every couple of days...

Norphy · January 21, 2015

At least the Flash update mechanism seems to work reasonably reliably. I download the Flash MSIs from the Adobe distribution pages and assign them to my PCs and they get Flash updated on them. In contrast, Java is a monumental pain in the

to get updated.

sted · January 21, 2015

At least the Flash update mechanism seems to work reasonably reliably. I download the Flash MSIs from the Adobe distribution pages and assign them to my PCs and they get Flash updated on them. In contrast, Java is a monumental pain in the to get updated.

apart from when the old version decides it doesn't want to uninstall or the new version decides its installed but wont work or that theres an old version there still

X-13 · January 21, 2015

apart from when the old version decides it doesn't want to uninstall or the new version decides its installed but wont work or that theres an old version there still

I'm always tempted to just let it auto update...

sted · January 21, 2015

I'm always tempted to just let it auto update...

does that work if you arnt an admin?

LeMarchand · January 21, 2015

I'm always tempted to just let it auto update...

Then you have to rely on the users clicking a button and it working. For some reason they seem to be able to install (and do) all sorts of noxious c**pware but policies prevent stuff like Flash that they (unfortunately) need.

win · January 21, 2015

if not an admin I think flash will auto-update but not java

depending on your policies

kennysarmy · January 21, 2015

Just created and tested my MSI for pushing this out, but going to wait till tomorrow as I've already updated FLASH and SKETCHUP today and don't like doing too much in one day

X-13 · January 21, 2015

Just created and tested my MSI for pushing this out, but going to wait till tomorrow as I've already updated FLASH and SKETCHUP today and don't like doing too much in one day

Can you share the MSI? I've just had a look about and Orca isn't available any more.

[Also, Oracle only releasing EXEs. The is wrong with them?]

3s-gtech · January 21, 2015

My cunning plan goes as follows:

Don't install it on images or roll it out via Group Policy, only install it where a member of staff requests a piece of software that needs it.

Update it on that PC for six months until they stop using the new piece of software.

Uninstall Java.

If they request it again, reinstall.

Means I have Java on about five PCs at present. Wish I could say the same for Flash though.

X-13 · January 21, 2015

My cunning plan goes as follows:

Don't install it on images or roll it out via Group Policy, only install it where a member of staff requests a piece of software that needs it.
Update it on that PC for six months until they stop using the new piece of software.
Uninstall Java.
If they request it again, reinstall.

Means I have Java on about five PCs at present. Wish I could say the same for Flash though.

Saying that... What actually uses Java?

All I can think of is Minecraft and the web interface on our switches... neither of which are accessible, no matter what I do.

Edited January 21, 2015 by X-13

3s-gtech · January 21, 2015

Exactly. We need it for our boiler interface, and a server uses it for remote access. GanttProject uses it, but we really should just buy Project instead - Java alone is reason enough.

X-13 · January 21, 2015

Yeah... I think Java is getting dropped when I redo the images.

sted · January 21, 2015

just about to test this looks like the iexplore and mozilla options that i usually set to 1 in orca have gone infact quite a lot of options in the properties section have gone (i had been using 7 but ive decided to try 8)

Norphy · January 21, 2015

Wish I could drop Java. Unfortunately there is a wealth of crappy educational software which insists on using it, not to mention several components of ActivInspire.

X-13 · January 21, 2015

Wish I could drop Java. Unfortunately there is a wealth of crappy educational software which insists on using it, not to mention several components of ActivInspire.

Drop it and say it doesn't work any more.

LeMarchand · January 21, 2015

just about to test this looks like the iexplore and mozilla options that i usually set to 1 in orca have gone infact quite a lot of options in the properties section have gone (i had been using 7 but ive decided to try 8)

This is what I've been using - seems to work and doesn't involve messing about with the MSI:

msiexec /i "\\f\Java\8.25\jre1.8.0_25.msi" JU=0 JAVAUPDATE=0 AUTOUPDATECHECK=0 RebootYesNo=No WEB_JAVA=1 /q

Wish I could drop Java. Unfortunately there is a wealth of crappy educational software which insists on using it, not to mention several components of ActivInspire.

Exactly! Plus a lot of our LEA finance stuff needs it - alas!

kennysarmy · January 21, 2015

Can you share the MSI? I've just had a look about and Orca isn't available any more.

[Also, Oracle only releasing EXEs. The is wrong with them?]

I just extract the MSI from the downloaded EXE.

My notes which may be a little out of date are:

Extract the .msi file from the installer

Follow these steps to extract the .msi file from the installer for deployment through Active Directory based network:

1. Download and launch in GUI mode the Windows Offline Installation executable (.exe) file.

(GUI mode is active by default unless silent mode option '/s' is specified)

2. When Welcome to Java window appears do not click Install button and navigate to LocalAppData folder (the user Application Data folder). The location of the LocalAppData folder differs for each Windows platform.

Note: You can also navigate directly to APPData folder by typing : %APPDATA% in Windows Explorer Address Bar or Run.

○ Windows Vista and Windows 7

C:\Users\\AppData\LocalLow\Sun\Java\jre

○ Windows XP

C:\Documents and Settings\\Local Settings\ApplicationData\Sun\Java\jre

○ Windows 2000

C:\Documents and Settings\\ApplicationData\Sun\Java\jre

jre folder contains two files:

Data1.cab and

jre.msi

Example: For jre 6u43, jre is 1.6.0_43 so Sun\Java folder contains

jre1.6.0_43\Data1.cab and

jre1.6.0_43\jre1.6.0_43.msi

3. Copy *.msi and *.cab files to your temp location.

4. Click Cancel button in Welcome to Java window. There is no need to continue installation after msi and cab files got extracted.

From your temp location, you can use Active Directory to distribute the Java msi and cab files to as many client Windows platforms as you want.

Things to note during deploy process:

1. Cab file just needs to be in the same directory as msi file. For example to run msi installation for jre 6u43 with msiexec.exe tool, admin user just needs to specify a location of msi file:

msiexec.exe /i c:\msi_temp_dir\jre1.6.0_43.msi and Cab file needs to be in the same directory.

2. For jre older than 6u10 Sun\Java\jre\jre folder contains msi file only. cab file is packed inside msi file.

3. For jre older than 6u34 build 03 msi and cab files don't get deleted from ApplicationData\Sun\Java after completed installation so there is no need to extract msi and cab files when Welcome to Java window waits for user input.

sted · January 21, 2015

This is what I've been using - seems to work and doesn't involve messing about with the MSI:
msiexec /i "\\f\Java\8.25\jre1.8.0_25.msi" JU=0 JAVAUPDATE=0 AUTOUPDATECHECK=0 RebootYesNo=No WEB_JAVA=1 /q 
Exactly! Plus a lot of our LEA finance stuff needs it - alas!

it actually works if i make the same alterations i did to 7 and installs but unless a site is in an allowed list (or at least when using javatester.org you just get a java says no message so i need to work out how to drop security from high to allow things to work

X-13 · January 21, 2015

I just extract the MSI from the downloaded EXE.

My notes which may be a little out of date are:

Extract the .msi file from the installer
Follow these steps to extract the .msi file from the installer for deployment through Active Directory based network:
1. Download and launch in GUI mode the Windows Offline Installation executable (.exe) file.
(GUI mode is active by default unless silent mode option '/s' is specified)
2. When Welcome to Java window appears do not click Install button and navigate to LocalAppData folder (the user Application Data folder). The location of the LocalAppData folder differs for each Windows platform.

Note: You can also navigate directly to APPData folder by typing : %APPDATA% in Windows Explorer Address Bar or Run.
○ Windows Vista and Windows 7
C:\Users\\AppData\LocalLow\Sun\Java\jre
○ Windows XP
C:\Documents and Settings\\Local Settings\ApplicationData\Sun\Java\jre
○ Windows 2000
C:\Documents and Settings\\ApplicationData\Sun\Java\jre
jre folder contains two files:
Data1.cab and
jre.msi
Example: For jre 6u43, jre is 1.6.0_43 so Sun\Java folder contains
jre1.6.0_43\Data1.cab and
jre1.6.0_43\jre1.6.0_43.msi
3. Copy *.msi and *.cab files to your temp location.
4. Click Cancel button in Welcome to Java window. There is no need to continue installation after msi and cab files got extracted.
From your temp location, you can use Active Directory to distribute the Java msi and cab files to as many client Windows platforms as you want.
Things to note during deploy process:
1. Cab file just needs to be in the same directory as msi file. For example to run msi installation for jre 6u43 with msiexec.exe tool, admin user just needs to specify a location of msi file:
msiexec.exe /i c:\msi_temp_dir\jre1.6.0_43.msi and Cab file needs to be in the same directory.
2. For jre older than 6u10 Sun\Java\jre\jre folder contains msi file only. cab file is packed inside msi file.
3. For jre older than 6u34 build 03 msi and cab files don't get deleted from ApplicationData\Sun\Java after completed installation so there is no need to extract msi and cab files when Welcome to Java window waits for user input.

Interesting... There's no .cab file.

sted · January 21, 2015

Interesting... There's no .cab file.

nope just a 20mb msi for x86 and 80mb for x64

Arthur · January 21, 2015

Interesting... There's no .cab file.

It has been that way for a few versions now.

Java Runtime Environment 8 Update 31 (and 7 Update 75/76) released

Recommended Posts

Arthur

Arthur

Norphy

X-13

Norphy

sted

X-13

sted

LeMarchand

win

kennysarmy

X-13

3s-gtech

X-13

3s-gtech

X-13

sted

Norphy

X-13

LeMarchand

kennysarmy

sted

X-13

sted

Arthur

Create an account or sign in to comment

Create an account

Sign in

Recent Threads

iOS 27 BYOD and Smoothwall web filtering - Connectivity Assist causing issues?

3rd Party Warranty on Existing Panels

Edge Auto Sign in Broken / Cloud Filter

Home

Forums

What's New