PDA

View Full Version : Apple Updates Java for Lion and Snow Leopard in Sync with Oracle




MacRumors
Jun 13, 2012, 01:09 PM
http://images.macrumors.com/im/macrumorsthreadlogo.gif (http://www.macrumors.com/2012/06/13/apple-updates-java-for-lion-and-snow-leopard-in-sync-with-oracle/)


http://images.macrumors.com/article-new/2012/04/Java_Web-165-150x109.png

Apple yesterday released a pair of software updates for Java, issuing versions for both Lion (http://support.apple.com/kb/DL1515) and Snow Leopard (http://support.apple.com/kb/DL1550). The update in part builds upon an earlier Java update for Lion (http://www.macrumors.com/2012/04/12/apple-releases-java-update-to-remove-flashback-malware/) that disabled automatic execution of Java applets in an attempt to minimize the impact of Java-based malware threats like Flashback.This update configures web browsers to not automatically run Java applets. Java applets may be re-enabled by clicking the region labeled "Inactive plug-in" on a web page. If no applets have been run for an extended period of time, the Java web plug-in will deactivate.As noted by Krebs on Security (https://krebsonsecurity.com/2012/06/apple-oracle-ship-java-security-updates/), the release is notable because it came on the same day that Oracle released updates for Java on other platforms. Apple has long been criticized for lagging on Java updates, a policy which allowed the Flashback malware to flourish as Mac systems remained unprotected against the threat even though Oracle had patched the vulnerability on other systems several months before.The update Oracle released yesterday, Java 6 Update 33 and Java 7 Update 5, fixes at least 14 security flaws in the oft-attacked software that is installed on more than three billion devices worldwide. Apple's Java update brings Java on the Mac to 1.6.0_33, and patches 11 of the 14 security vulnerabilities that Oracle fixed in Tuesday's release. It's unclear whether those other three flaws simply don't exist in the Mac version of Java, but we'll take progress where we can get it.With Java SE 7 set to come to the Mac later this year, control over updates is transitioning from Apple to the OpenJDK project, with both Apple and Oracle providing expertise to ensure that updates for Mac roll out on a timely basis. That transition was begun back in late 2010, with Steve Jobs noting (http://www.macrumors.com/2010/10/22/steve-jobs-comments-on-apples-java-discontinuation/) at the time that having Apple responsible for Java updates on the Mac "may not be the best way to do it."

Article Link: Apple Updates Java for Lion and Snow Leopard in Sync with Oracle (http://www.macrumors.com/2012/06/13/apple-updates-java-for-lion-and-snow-leopard-in-sync-with-oracle/)



ghostlines
Jun 13, 2012, 01:20 PM
I see your 'taking security more seriously' and raise u 'make OS X updates more stable'!

dokujaryu
Jun 13, 2012, 01:20 PM
Updating now. I use JDeveloper with Mac OS X which requires a symbolic link from classes.jar to the nonexistent on Mac rt.jar. The OpenJDK Mac OS X (http://openjdk.java.net/projects/macosx-port/) initiative is using the traditional jar names, so I hope this persists when Apple goes 7. (which it should since they are using OpenJDK)

TwinMonkeys
Jun 13, 2012, 01:24 PM
The JVM is a good platform for some kinds of software development (as long as you're not using Java lol) but its a good move to dump it from web browsers by default. I have not even seen a Java Applet in years - most people will never require this for common uses. In a corporate environment it might be necessary, but not for normal daily users.

gotluck
Jun 13, 2012, 01:29 PM
some of the surf cams in my area use applets!

dokujaryu
Jun 13, 2012, 01:48 PM
Every IDE I use except X Code (Eclipse, NetBeans, JDeveloper) is written in Java for platform independence.

I do a lot of server side work in Java EE. It's a pretty common technology behind the websites you use. A lot of in-house applications are written and maintained in Java in big companies as well. (it's sort of the "new" Visual Basic if you will. Some places still use .NET and VB.NET heavily tho)

Personally I believe Java is getting better rather than worse. EE especially has come a long way since 1.4.2.

Winni
Jun 13, 2012, 01:53 PM
some of the surf cams in my area use applets!

The video surveillance server at my company uses Java, too. And so does my old Photoshop Extended CS3, by the way. And eclipse, of course.

50548
Jun 13, 2012, 02:00 PM
Who cares about Java anyway/nowadays?

ristlin
Jun 13, 2012, 02:04 PM
Who cares about Java anyway/nowadays?

I wait feverishly every month for new Java updates.

jerryobr
Jun 13, 2012, 02:14 PM
Hi. I was wondering how many of you actually had an instance of the Flashback virus on your Mac's? I understand the importance of taking action to prevent its occurrence. I have a number of Macs, and none of them were ever infected. Same for many friends' Macs. Curious how widespread the infestation really turned out to be, versus the potential that security firms were touting.

Codyak
Jun 13, 2012, 02:15 PM
Hi. I was wondering how many of you actually had an instance of the Flashback virus on your Mac's? I understand the importance of taking action to prevent its occurrence. I have a number of Macs, and none of them were ever infected. Same for many friends' Macs. Curious how widespread the infestation really turned out to be, versus the potential that security firms were touting.

I also didn't personally know anyone who got it.

50548
Jun 13, 2012, 02:16 PM
Hi. I was wondering how many of you actually had an instance of the Flashback virus on your Mac's? I understand the importance of taking action to prevent its occurrence. I have a number of Macs, and none of them were ever infected. Same for many friends' Macs. Curious how widespread the infestation really turned out to be, versus the potential that security firms were touting.

None here (or ever for that matter) - AND none for all my friends as well. Even after 10 years, there are still no viruses on OS X.

r.harris1
Jun 13, 2012, 02:28 PM
Who cares about Java anyway/nowadays?

A tremendous amount of enterprise server-side development is Java-based. This means things like provisioning systems in telecom, billing systems, customer chat, preference management, identity management, etc behind a lot of the web sites you use will very likely have a strong Java presence, among many other things.

So the answer is "Lots of people and companies".

Morod
Jun 13, 2012, 02:29 PM
Got the SL update yesterday. No problems at all here.

macsmurf
Jun 13, 2012, 02:32 PM
Who cares about Java anyway/nowadays?

Given that Java is one of the most popular programming language in the world, at lot of developers (including me) care. It means I can use my mac at work.

Also, due to a rather stupid decision on a national scale, Java is required for logging into banks in Denmark.

brdeveloper
Jun 13, 2012, 02:57 PM
Who cares about Java anyway/nowadays?

Java developers mainly. "Facebook For Every Phone" app is in Java ME (mobile). A lot of corporate systems are Java SE and EE and sites are Java EE (server-side).

Java SE was never broadly adopted for the common user, although an operating system that wants to support corporative software (usage and development) must run Java apps.

klamse25
Jun 13, 2012, 03:02 PM
Who cares about Java anyway/nowadays?

You're completely ignorant.
Java is the most widely used cross-platform language today.

PS: Ever heard of Minecraft? That game is based on Java.
So millions of people are "who care about Java."

TwinMonkeys
Jun 13, 2012, 03:02 PM
Who cares about Java anyway/nowadays?

The Java language is horrible for many purposes where you have a small team and want to get stuff done quickly, agreed. However, Java powers a lot of infrastructure around the world and is useful for many large services and will be important for a long time.

Additionally, the JVM is a proven and great overall platform for software development. Look at Clojure, Scala, Groovy, JRuby, plenty of others. All of these run on the JVM and there's a lot of very interesting software development possible through this even if you never directly touch Java.

juliazo
Jun 13, 2012, 03:20 PM
Is anyone else redirected to the older version of the update when clicking on the Lion (http://support.apple.com/kb/DL1515) link? Trying to get the package separately to deploy over the network.

Thanks!

50548
Jun 13, 2012, 03:31 PM
A tremendous amount of enterprise server-side development is Java-based. This means things like provisioning systems in telecom, billing systems, customer chat, preference management, identity management, etc behind a lot of the web sites you use will very likely have a strong Java presence, among many other things.

So the answer is "Lots of people and companies".

Interestingly, it seems like I am not part of "lots of people" - Java has been deactivated on my Safari for months now, and I haven't even noticed it. :rolleyes:

----------

You're completely ignorant.
Java is the most widely used cross-platform language today.

PS: Ever heard of Minecraft? That game is based on Java.
So millions of people are "who care about Java."

Minecraft is available for iOS and does NOT require Java on the client side...not that I will ever play that POS, of course.

Again, my point was: From an end user's perspective, Java is close to irrelevant nowadays. I don't care if it is still widely used in the back office (programming languages and habits can always change anyway).

Biolizard
Jun 13, 2012, 03:35 PM
Who cares about Java anyway/nowadays?

Last I heard Apple still uses WebObjects as its web application server technology to power both the Apple Online Store and the iTunes Store.

Want to take a bet at what WebObjects is written in? That's right; Java.

iDuel
Jun 13, 2012, 03:50 PM
Minecraft is available for iOS and does NOT require Java on the client side...not that I will ever play that POS, of course.


That isn't the point. The fact of the matter is that many consumers use Java for playing Java-based browser games. (i.e. Minecraft for PC & Mac which does require Java to be played in the web browser) I could also name off a few more browser-based Java games which are played by millions of users.

r.harris1
Jun 13, 2012, 03:57 PM
Interestingly, it seems like I am not part of "lots of people" - Java has been deactivated on my Safari for months now, and I haven't even noticed it. :rolleyes:

----------



Minecraft is available for iOS and does NOT require Java on the client side...not that I will ever play that POS, of course.

Again, my point was: From an end user's perspective, Java is close to irrelevant nowadays. I don't care if it is still widely used in the back office (programming languages and habits can always change anyway).

Not really sure what your particular point is commenting in this thread if it has no relevance to you, though hey, your time is your own. I'm also not sure whether anyone cares, really, if you use it on your Mac or if you've shut down access, or whatever (but maybe that's just me :)) but to call it irrelevant is to perhaps not see the bigger picture. It's out there running a lot of stuff you interact with on a daily basis, as mentioned previously.

mgol
Jun 13, 2012, 04:19 PM
Updating now. I use JDeveloper with Mac OS X which requires a symbolic link from classes.jar to the nonexistent on Mac rt.jar. The OpenJDK Mac OS X (http://openjdk.java.net/projects/macosx-port/) initiative is using the traditional jar names, so I hope this persists when Apple goes 7. (which it should since they are using OpenJDK)

Apple won't "go 7". It's Oracle who will go 7 on OS X. Apple has nothing to do with Java 7 themselves, their support ends with version 6.

dokujaryu
Jun 13, 2012, 04:29 PM
Apple won't "go 7". It's Oracle who will go 7 on OS X. Apple has nothing to do with Java 7 themselves, their support ends with version 6.

Well, we'll see. I wouldn't be surprised if Software Update and Mac OS X's JVM selector is still in play, even after the OpenJDK becomes the source. Honestly I hope this is the case because the alternative is multiple update mechanisms like on Windows, which blows.

brdeveloper
Jun 13, 2012, 05:09 PM
Again, my point was: From an end user's perspective, Java is close to irrelevant nowadays. I don't care if it is still widely used in the back office (programming languages and habits can always change anyway).

From an end user perspective, a Mac is close to irrelevant too. In the iStuff era, creating content is irrelevant. All an end user need is a good consuming platform.

Java is very relevant in the production side. Almost everything a browser runs is generated by server-side applications written primarily in PHP, Java, .NET, Python and Ruby. Also, a lot of useful mobile apps are written in Java ME (of course, not the iPhone ones which doesn't support it). Java SE (standalone desktop apps) are successful in the academy and corporations.

Bear in mind that a Mac is generally a workstation, focused on the production side while iStuff devices are for the end-user.

DoubleDose
Jun 13, 2012, 05:49 PM
Damn it. Updated and now it's flagging my Final Cut server app as a threat with no way to allow it. Any ideas? other than not using FCS :p?

Renzatic
Jun 13, 2012, 07:10 PM
Interestingly, it seems like I am not part of "lots of people" - Java has been deactivated on my Safari for months now, and I haven't even noticed it. :rolleyes:

Minecraft is available for iOS and does NOT require Java on the client side...not that I will ever play that POS, of course.

Again, my point was: From an end user's perspective, Java is close to irrelevant nowadays. I don't care if it is still widely used in the back office (programming languages and habits can always change anyway).

Have you ever made a post here that wasn't some vitriolic diatribe on how something is stupid or how all people are idiots? Have you ever gone three posts in a row without using a :rolleyes: emote?

Why are you so internet angry?

waldobushman
Jun 13, 2012, 09:39 PM
Updating now. I use JDeveloper with Mac OS X which requires a symbolic link from classes.jar to the nonexistent on Mac rt.jar. The OpenJDK Mac OS X (http://openjdk.java.net/projects/macosx-port/) initiative is using the traditional jar names, so I hope this persists when Apple goes 7. (which it should since they are using OpenJDK)

Not without problems, but openJDK version 7 does install on osx. I installed OpenJDK immediately after the hole was plugged to ensure I would not be so vulnerable. No need to wait for Apple.

Paul McG
Jun 14, 2012, 01:23 AM
I wonder if anyone is working on Retina support for Java UI bits and pieces.
The high res of the Retina Macbook Pro could be attractive to people using the various Java based IDEs but not if the rendering is rubbish.

dokujaryu
Jun 14, 2012, 08:07 AM
Not without problems, but openJDK version 7 does install on osx. I installed OpenJDK immediately after the hole was plugged to ensure I would not be so vulnerable. No need to wait for Apple.

I know. I have the source and JTReg (http://openjdk.java.net/jtreg/) installed locally. I really wanted to contribute whatever I could to the effort of porting. Unfortunately, I've had no time. :(

The product at my company isn't designed to work on JDK 7, and we've already had problems with devs doing things like switching on strings (only a feature in JDK 7) and breaking the product in prod. Also, JDev is extremely finicky. So, I had to stick with Apple's 6 as my default.

cprof
Jun 14, 2012, 08:58 AM
Installed upgrades, now java applets for banking site to scan and deposit checks now not working. Evidently no one told the bank that it needed to update its side of java too.

50548
Jun 14, 2012, 04:06 PM
Have you ever made a post here that wasn't some vitriolic diatribe on how something is stupid or how all people are idiots? Have you ever gone three posts in a row without using a :rolleyes: emote?

Why are you so internet angry?

Me, angry? Where have I said that "people are idiots" or whatever nonsense you're blabbing about? My post was about the irrelevance of Java for an end user, something that nobody here is able to demonstrate against (unless you like to play Java games, of course).

Your reaction seems pretty emotional to me - you should take a green tea and go to bed, Sir.

r.harris1
Jun 14, 2012, 04:36 PM
Me, angry? Where have I said that "people are idiots" or whatever nonsense you're blabbing about? My post was about the irrelevance of Java for an end user, something that nobody here is able to demonstrate against (unless you like to play Java games, of course).

Your reaction seems pretty emotional to me - you should take a green tea and go to bed, Sir.

I personally haven't seen you demonstrate for the irrelevance of Java to the end-user. You've only demonstrated that you've got it disabled/removed on your machine, which has absolutely nothing to do with relevance. There's a lot of stuff I don't use on my machines either. To generalize from you to "the end user" is rather a large step, no?

codymac
Jun 14, 2012, 11:38 PM
Is anyone else redirected to the older version of the update when clicking on the Lion (http://support.apple.com/kb/DL1515) link? Trying to get the package separately to deploy over the network.

Thanks!

Same issue here.
:confused: