Jump to content

Java Runtime Environment 7 Update 45 released. This one is critical!


Recommended Posts

Posted

Time for another update.

 

Java SE 7 Update 45 (expires 14th February 2014)

Download (Windows: 32-bit, 64-bit / OS X: 64-bit) / Release Notes

 

October 2013 Critical Patch Update Released

50 of the Java SE vulnerabilities fixed in this Critical patch Update are remotely exploitable without authentication. The maximum CVSS Base Score for these Java SE vulnerabilities is 10.0, which denotes a complete takeover of the targeted system (down to the operating system) in instances where Java executes with administrative privileges (i.e. system privileges). Out of these 51 Java vulnerabilities, only 8 are applicable to client and server deployments of Java. 40 apply to client deployment of Java, including one which is only exploitable during Java client deployment. One of the vulnerabilities applies to the JHat developer tool. The last 2 vulnerabilities apply to sites that run the Javadoc tool as a service. For more information about these Java vulnerabilities, see the security matrix for Java SE located on the Critical Patch Update Advisory. (Source)

 

http://i.imgur.com/ed63Nxc.jpg

  • Thanks 3
Posted

Newpersn msi is available by the normal methods with java.

 

I'm sick of java which is why I removed it completely but put it back with 7 update 20 I think.

 

Ben

  • Thanks 1
Posted
Newpersn msi is available by the normal methods with java.

 

I'm sick of java which is why I removed it completely but put it back with 7 update 20 I think.

 

Ben

 

Got it now... Couldn't find it. (I think its this one)

Posted

For the love of...

 

I wouldn't mind so much if recent updates hadn't enforced a big stupid warning saying YOUR JAVA IS OUT OF DATE, UPDATE, UPDATE the very minute a new version is released, thus causing all users to panic and ECDL testing to collapse entirely. A bit of a grace period on that one would be nice to save us having to rush deploy updates during ECDL season - as it happens, I was off yesterday and the seven minute warning one of my techs had to do this job in my place ended up with him inadvertantly typing the domain admin password in plain text where students could see it. Thanks a lot, Oracle.

 

/sigh

 

Is there a mailing list or something I can get on to get immediate notification of these updates? If I have an email when I get in at 8am I can at least push it out in a more orderly fashion in the time before school starts.

Posted (edited)
Is there a mailing list or something I can get on to get immediate notification of these updates?

You can subscribe to the RSS feeds on the following websites to get a notification as soon as updates are available...

 

To disable the update warning message, you need to add deployment.expiration.check.enabled=false to your deployment.properties file. Details below.

 

Edited by Arthur
  • Thanks 1
  • 3 weeks later...
Posted

Just installed 7.40, will now replace it with 7.45, which probably was released a day later ;)

I'm going to attempt to update the disable warning notice, but not sure what to do about the security level, set it to medium for everyone or what?

 

I did my updates of adobe reader, that need an extra script to get rid of a certificate message, the latest flash made hector the saftey dolphin disappear, now java's causing the next headache!

Posted
Just installed 7.40, will now replace it with 7.45, which probably was released a day later ;)

I'm going to attempt to update the disable warning notice, but not sure what to do about the security level, set it to medium for everyone or what?

 

I did my updates of adobe reader, that need an extra script to get rid of a certificate message, the latest flash made hector the saftey dolphin disappear, now java's causing the next headache!

id be more worried about flash and smart notebook latest flash stops flash animation in notebook so no dice etc

Posted (edited)

right been having a go at this and i cant get java to deploy the msi runs fine manually but using a script (prior to using gpo for testing) it just wont deploy. i get an event id of 1033 in event viewer success or error status 1603

 

tried from network drive/dfs/c same issue any ideas? even via gpo it does the same a quick scan says im missing data1.cab but its there and seems intact (24,478k) tried reextracingfrom the exe (28,360k) no joy any ideas as im stumped

 

i hate java

 

looks like java 7u9 wont go away sigh dosent show in add remove progs but windows installer cleanup shows it

Edited by sted
Posted

now ive got it instalkled on 1 test pc it works fine as admin but not as a user i get

 

java.jpg

 

tried deployment.config/properties files below

 

properties

 

deployment.javaws.autodownload="NEVER"

deployment.javaws.shortcut="NEVER"

deployment.system.tray.icon=false

deployment.webjava.enabled=true

deployment.insecure.jres=always

deployment.expiration.check.enabled=false

deployment.security.level=MEDIUM

 

config

 

deployment.system.config=\\domain.local\dfs\packages\Java\jre1.7.0_45\deployment.properties

deployment.system.config.mandatory=true

 

have i mentioned i hate java and it 'ing well works in chrome so mi have a solution but id rather it worked in ie as well

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...