Arthur Posted January 21, 2015 Posted January 21, 2015 It's that time again! Java SE 8 Update 31 (expires 14 April 2015) (Recommended) Download (Windows: 32-bit, 64-bit / OS X: 64-bit) / Release Notes / Bug Fixes / Risk Matrix Java SE 7 Update 75 (CPU) / 76 (PSU) (expires 14 April 2015) Download / Release Notes / Bug Fixes / Risk Matrix January 2015 Critical Patch Update Released This Critical Patch Update delivers 19 new security fixes for Oracle Java SE. The most severe of these vulnerabilities received a CVSS Base Score of 10.0. This score is reported for 4 distinct Java SE client-only vulnerabilities (CVE-2014-6601; CVE-2015-0412; CVE-2014-6549; and CVE-2015-0408). Out of these 19 vulnerabilities, 15 affect client-only installations, 2 affect client and server installations, and 2 affect JSSE installations. This relatively low historical number for Oracle Java SE fixes reflect the results of Oracle’s strategy for addressing security bugs affecting Java clients and improving security development practices in the Java development organization. It is very important to note that, with this Critical Patch Update, Oracle will change the behavior of Java SE in regards to SSL. This Critical Patch Update will disable by default the use of SSL version 3.0. SSL v3.0 is widely regarded as an obsolete protocol, and this situation is aggravated by the POODLE vulnerability (CVE-2014-3566). As a result, this protocol is being widely targeted by malicious hackers. Organizations should disable the use of all versions of SSL as they can no longer rely on SSL to ensure secure communications between systems. Customers should update their custom code to switch to a more resilient protocol (e.g., TLS 1.2). They should also expect that all versions of SSL be disabled in all Oracle software moving forward. A manual configuration change can allow Java SE clients and server endpoints, which have been updated with this Critical Patch Update, to continue to temporarily use SSL v3.0. However, Oracle strongly recommends organizations to phase out their use of SSL v3.0 as soon as possible. (Source) 2
X-13 Posted January 21, 2015 Posted January 21, 2015 [ATTACH=CONFIG]28605[/ATTACH] Oh how I hate Java... And flash. And any other piece of software that seems to have an update every couple of days...
Norphy Posted January 21, 2015 Posted January 21, 2015 At least the Flash update mechanism seems to work reasonably reliably. I download the Flash MSIs from the Adobe distribution pages and assign them to my PCs and they get Flash updated on them. In contrast, Java is a monumental pain in the to get updated.
sted Posted January 21, 2015 Posted January 21, 2015 At least the Flash update mechanism seems to work reasonably reliably. I download the Flash MSIs from the Adobe distribution pages and assign them to my PCs and they get Flash updated on them. In contrast, Java is a monumental pain in the to get updated. apart from when the old version decides it doesn't want to uninstall or the new version decides its installed but wont work or that theres an old version there still
X-13 Posted January 21, 2015 Posted January 21, 2015 apart from when the old version decides it doesn't want to uninstall or the new version decides its installed but wont work or that theres an old version there still I'm always tempted to just let it auto update...
sted Posted January 21, 2015 Posted January 21, 2015 I'm always tempted to just let it auto update... does that work if you arnt an admin?
LeMarchand Posted January 21, 2015 Posted January 21, 2015 I'm always tempted to just let it auto update... Then you have to rely on the users clicking a button and it working. For some reason they seem to be able to install (and do) all sorts of noxious c**pware but policies prevent stuff like Flash that they (unfortunately) need.
win Posted January 21, 2015 Posted January 21, 2015 if not an admin I think flash will auto-update but not java depending on your policies
kennysarmy Posted January 21, 2015 Posted January 21, 2015 Just created and tested my MSI for pushing this out, but going to wait till tomorrow as I've already updated FLASH and SKETCHUP today and don't like doing too much in one day
X-13 Posted January 21, 2015 Posted January 21, 2015 Just created and tested my MSI for pushing this out, but going to wait till tomorrow as I've already updated FLASH and SKETCHUP today and don't like doing too much in one day Can you share the MSI? I've just had a look about and Orca isn't available any more. [Also, Oracle only releasing EXEs. The is wrong with them?]
3s-gtech Posted January 21, 2015 Posted January 21, 2015 My cunning plan goes as follows: Don't install it on images or roll it out via Group Policy, only install it where a member of staff requests a piece of software that needs it. Update it on that PC for six months until they stop using the new piece of software. Uninstall Java. If they request it again, reinstall. Means I have Java on about five PCs at present. Wish I could say the same for Flash though.
X-13 Posted January 21, 2015 Posted January 21, 2015 (edited) My cunning plan goes as follows: Don't install it on images or roll it out via Group Policy, only install it where a member of staff requests a piece of software that needs it. Update it on that PC for six months until they stop using the new piece of software. Uninstall Java. If they request it again, reinstall. Means I have Java on about five PCs at present. Wish I could say the same for Flash though. Saying that... What actually uses Java? All I can think of is Minecraft and the web interface on our switches... neither of which are accessible, no matter what I do. Edited January 21, 2015 by X-13
3s-gtech Posted January 21, 2015 Posted January 21, 2015 Exactly. We need it for our boiler interface, and a server uses it for remote access. GanttProject uses it, but we really should just buy Project instead - Java alone is reason enough.
X-13 Posted January 21, 2015 Posted January 21, 2015 Yeah... I think Java is getting dropped when I redo the images.
sted Posted January 21, 2015 Posted January 21, 2015 just about to test this looks like the iexplore and mozilla options that i usually set to 1 in orca have gone infact quite a lot of options in the properties section have gone (i had been using 7 but ive decided to try 8)
Norphy Posted January 21, 2015 Posted January 21, 2015 Wish I could drop Java. Unfortunately there is a wealth of crappy educational software which insists on using it, not to mention several components of ActivInspire.
X-13 Posted January 21, 2015 Posted January 21, 2015 Wish I could drop Java. Unfortunately there is a wealth of crappy educational software which insists on using it, not to mention several components of ActivInspire. Drop it and say it doesn't work any more.
LeMarchand Posted January 21, 2015 Posted January 21, 2015 just about to test this looks like the iexplore and mozilla options that i usually set to 1 in orca have gone infact quite a lot of options in the properties section have gone (i had been using 7 but ive decided to try 8) This is what I've been using - seems to work and doesn't involve messing about with the MSI: msiexec /i "\\f\Java\8.25\jre1.8.0_25.msi" JU=0 JAVAUPDATE=0 AUTOUPDATECHECK=0 RebootYesNo=No WEB_JAVA=1 /q Wish I could drop Java. Unfortunately there is a wealth of crappy educational software which insists on using it, not to mention several components of ActivInspire. Exactly! Plus a lot of our LEA finance stuff needs it - alas!
kennysarmy Posted January 21, 2015 Posted January 21, 2015 Can you share the MSI? I've just had a look about and Orca isn't available any more. [Also, Oracle only releasing EXEs. The is wrong with them?] I just extract the MSI from the downloaded EXE. My notes which may be a little out of date are: Extract the .msi file from the installer Follow these steps to extract the .msi file from the installer for deployment through Active Directory based network: 1. Download and launch in GUI mode the Windows Offline Installation executable (.exe) file. (GUI mode is active by default unless silent mode option '/s' is specified) 2. When Welcome to Java window appears do not click Install button and navigate to LocalAppData folder (the user Application Data folder). The location of the LocalAppData folder differs for each Windows platform. Note: You can also navigate directly to APPData folder by typing : %APPDATA% in Windows Explorer Address Bar or Run. ○ Windows Vista and Windows 7 C:\Users\\AppData\LocalLow\Sun\Java\jre ○ Windows XP C:\Documents and Settings\\Local Settings\ApplicationData\Sun\Java\jre ○ Windows 2000 C:\Documents and Settings\\ApplicationData\Sun\Java\jre jre folder contains two files: Data1.cab and jre.msi Example: For jre 6u43, jre is 1.6.0_43 so Sun\Java folder contains jre1.6.0_43\Data1.cab and jre1.6.0_43\jre1.6.0_43.msi 3. Copy *.msi and *.cab files to your temp location. 4. Click Cancel button in Welcome to Java window. There is no need to continue installation after msi and cab files got extracted. From your temp location, you can use Active Directory to distribute the Java msi and cab files to as many client Windows platforms as you want. Things to note during deploy process: 1. Cab file just needs to be in the same directory as msi file. For example to run msi installation for jre 6u43 with msiexec.exe tool, admin user just needs to specify a location of msi file: msiexec.exe /i c:\msi_temp_dir\jre1.6.0_43.msi and Cab file needs to be in the same directory. 2. For jre older than 6u10 Sun\Java\jre\jre folder contains msi file only. cab file is packed inside msi file. 3. For jre older than 6u34 build 03 msi and cab files don't get deleted from ApplicationData\Sun\Java after completed installation so there is no need to extract msi and cab files when Welcome to Java window waits for user input.
sted Posted January 21, 2015 Posted January 21, 2015 This is what I've been using - seems to work and doesn't involve messing about with the MSI: msiexec /i "\\f\Java\8.25\jre1.8.0_25.msi" JU=0 JAVAUPDATE=0 AUTOUPDATECHECK=0 RebootYesNo=No WEB_JAVA=1 /q Exactly! Plus a lot of our LEA finance stuff needs it - alas! it actually works if i make the same alterations i did to 7 and installs but unless a site is in an allowed list (or at least when using javatester.org you just get a java says no message so i need to work out how to drop security from high to allow things to work
X-13 Posted January 21, 2015 Posted January 21, 2015 I just extract the MSI from the downloaded EXE. My notes which may be a little out of date are: Extract the .msi file from the installer Follow these steps to extract the .msi file from the installer for deployment through Active Directory based network: 1. Download and launch in GUI mode the Windows Offline Installation executable (.exe) file. (GUI mode is active by default unless silent mode option '/s' is specified) 2. When Welcome to Java window appears do not click Install button and navigate to LocalAppData folder (the user Application Data folder). The location of the LocalAppData folder differs for each Windows platform. Note: You can also navigate directly to APPData folder by typing : %APPDATA% in Windows Explorer Address Bar or Run. ○ Windows Vista and Windows 7 C:\Users\\AppData\LocalLow\Sun\Java\jre ○ Windows XP C:\Documents and Settings\\Local Settings\ApplicationData\Sun\Java\jre ○ Windows 2000 C:\Documents and Settings\\ApplicationData\Sun\Java\jre jre folder contains two files: Data1.cab and jre.msi Example: For jre 6u43, jre is 1.6.0_43 so Sun\Java folder contains jre1.6.0_43\Data1.cab and jre1.6.0_43\jre1.6.0_43.msi 3. Copy *.msi and *.cab files to your temp location. 4. Click Cancel button in Welcome to Java window. There is no need to continue installation after msi and cab files got extracted. From your temp location, you can use Active Directory to distribute the Java msi and cab files to as many client Windows platforms as you want. Things to note during deploy process: 1. Cab file just needs to be in the same directory as msi file. For example to run msi installation for jre 6u43 with msiexec.exe tool, admin user just needs to specify a location of msi file: msiexec.exe /i c:\msi_temp_dir\jre1.6.0_43.msi and Cab file needs to be in the same directory. 2. For jre older than 6u10 Sun\Java\jre\jre folder contains msi file only. cab file is packed inside msi file. 3. For jre older than 6u34 build 03 msi and cab files don't get deleted from ApplicationData\Sun\Java after completed installation so there is no need to extract msi and cab files when Welcome to Java window waits for user input. Interesting... There's no .cab file.
sted Posted January 21, 2015 Posted January 21, 2015 Interesting... There's no .cab file. nope just a 20mb msi for x86 and 80mb for x64
Arthur Posted January 21, 2015 Author Posted January 21, 2015 Interesting... There's no .cab file. It has been that way for a few versions now.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now