Go Back   MacRumors Forums > News and Article Discussion > MacRumors.com News Discussion

Reply
 
Thread Tools Search this Thread Display Modes
Old Feb 1, 2013, 03:01 PM   #1
MacRumors
macrumors bot
 
Join Date: Apr 2001
Oracle Releases Java 7 Update 13 to Address Security Issues, Reenable Web Plug-in on OS X




Less than two days after Apple once again blocked Java 7 web plug-ins on OS X, Oracle has released an updated version of Java 7 to address certain security vulnerabilities.

The new Java 7 arrives as Update 13 and carries a version number of 1.7.0_13-b20, meeting Apple's requirement for a minimum of 1.7.0_11-b22. Oracle has also released an updated version of Java 6, although Apple was not blocking the previous version of the plug-in.

Oracle notes that the new update contains fixes for over 50 issues and that the launch was accelerated by several weeks in order to address a vulnerability that was being exploited in the wild.
Quote:
The original Critical Patch Update for Java SE - February 2013 was scheduled to be released on February 19th, but Oracle decided to accelerate the release of this Critical Patch Update because active exploitation "in the wild" of one of the vulnerabilities affecting the Java Runtime Environment (JRE) in desktop browsers, was addressed with this Critical Patch Update. [...]

Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply CPU fixes as soon as possible. This Critical Patch Update contains 50 new security fixes across Java SE products.
The latest versions of all Java SE packages are available through Oracle's support site.

(Thanks, Flemming!)

Article Link: Oracle Releases Java 7 Update 13 to Address Security Issues, Reenable Web Plug-in on OS X
MacRumors is offline   0 Reply With Quote
Old Feb 1, 2013, 03:04 PM   #2
pgiguere1
macrumors 68000
 
pgiguere1's Avatar
 
Join Date: May 2009
Location: Montreal, Canada
Direct link to update.
pgiguere1 is offline   4 Reply With Quote
Old Feb 1, 2013, 03:06 PM   #3
RayK
macrumors 6502
 
Join Date: Oct 2005
I want a new Java 6 from Apple.
__________________
24" iMac Early 2009, iPad 2 64GB VZW, iPhone 5 Verizon
Apple Certified Macintosh Technician
RayK is offline   3 Reply With Quote
Old Feb 1, 2013, 03:06 PM   #4
Northgrove
macrumors 6502a
 
Join Date: Aug 2010
It's Java updates all the way down.
__________________
iPhone 5 rMBP 15" (2012)
Northgrove is offline   4 Reply With Quote
Old Feb 1, 2013, 03:08 PM   #5
mrsir2009
macrumors 604
 
mrsir2009's Avatar
 
Join Date: Sep 2009
Location: Melbourne, Australia
Great
mrsir2009 is offline   0 Reply With Quote
Old Feb 1, 2013, 03:09 PM   #6
laudern
macrumors 6502
 
Join Date: Jan 2011
This is a complete no0b question and feel free to pay me out, but how do I know if I have Java installed on my OS?
laudern is offline   0 Reply With Quote
Old Feb 1, 2013, 03:18 PM   #7
Northgrove
macrumors 6502a
 
Join Date: Aug 2010
Quote:
Originally Posted by laudern View Post
This is a complete no0b question and feel free to pay me out, but how do I know if I have Java installed on my OS?
I just tried by opening a Terminal window (Applications -> Utilities) and typed "java -v". It'll display the Java version if installed. At this point, OS X actually showed a window saying "Java Runtime 6 is not installed. Do you want to install it?", at which point I clicked NO NOOO.

Edit: Ah right. "Undecided"'s reply above is a better than mine to check for Java installed as an actual browser plugin.
__________________
iPhone 5 rMBP 15" (2012)
Northgrove is offline   1 Reply With Quote
Old Feb 1, 2013, 03:33 PM   #8
Shrink
macrumors Demi-God
 
Shrink's Avatar
 
Join Date: Feb 2011
Location: New England, USA
Quote:
Originally Posted by laudern View Post
This is a complete no0b question and feel free to pay me out, but how do I know if I have Java installed on my OS?
I spoke with Apple about this very question. If you are running an OS X version 10.7 or earlier, you check in your Applications folder. If you have it installed, it will show up there.

If you are running 10.8, open the System Preferences window. If you have Java, it will show up at the bottom of the window (5 lines down), under "Other".

Also, you can make sure it's not enabled, whether you have it or not, by going into Safari Preference > Security, and make sure "Enable Java" is Unchecked.
__________________
Two things are infinite, the universe and human stupidity; and I'm not sure about the universe. -- Albert Einstein
Shrink is offline   2 Reply With Quote
Old Feb 1, 2013, 03:53 PM   #9
Nermal
Moderator
 
Nermal's Avatar
 
Join Date: Dec 2002
Location: Whakatane, New Zealand
Quote:
Originally Posted by laudern View Post
This is a complete no0b question and feel free to pay me out, but how do I know if I have Java installed on my OS?
The official Java test will verify whether it's working or not. Shrink's post above will help determine whether you actually have it installed in the first place.
Nermal is offline   0 Reply With Quote
Old Feb 1, 2013, 03:10 PM   #10
FloatingBones
macrumors 65816
 
FloatingBones's Avatar
 
Join Date: Jul 2006
At least Oracle doesn't bundle deceptive spam-ware with their Mac updates like they do with their PC updates.

Last edited by FloatingBones; Feb 1, 2013 at 03:34 PM.
FloatingBones is offline   4 Reply With Quote
Old Feb 1, 2013, 03:11 PM   #11
unplugme71
macrumors 65816
 
Join Date: May 2011
I give it 24 hours before a new flaw is found and Apple blocks it again.
unplugme71 is offline   12 Reply With Quote
Old Feb 1, 2013, 05:37 PM   #12
OrganMusic
macrumors 6502
 
Join Date: Sep 2008
Location: Western IL
Quote:
Originally Posted by FloatingBones View Post
At least Oracle doesn't bundle deceptive spam-ware with their Mac updates like they do with their PC updates.
Amen to that. Nice link too. Every time I have to fix someone's PC they usually have toolbars taking up half the screen.
__________________
Mac hater ~1995-2008; Mac user and enthusiast since 2008
OrganMusic is offline   2 Reply With Quote
Old Feb 1, 2013, 08:40 PM   #13
gotluck
macrumors 68040
 
gotluck's Avatar
 
Join Date: Dec 2011
Location: East Central Florida
Quote:
Originally Posted by FloatingBones View Post
At least Oracle doesn't bundle deceptive spam-ware with their Mac updates like they do with their PC updates.
I hate this on windows.
__________________
iPad Air LTE 7.1.2 JB (T-Mobile) - GS 4 Google Edition 4.4.4 ART (AT&T) - Windows 7 PC's - iPhone 4 6.1 JB
gotluck is offline   1 Reply With Quote
Old Feb 4, 2013, 03:48 AM   #14
Rygaard
macrumors member
 
Join Date: Jun 2010
Location: Denmark
Quote:
Originally Posted by Northgrove View Post
It's Java updates all the way down.
you are very clever young man, but its Java updates alle the way down
Rygaard is offline   0 Reply With Quote
Old Feb 2, 2013, 04:10 PM   #15
MagnusVonMagnum
macrumors 68040
 
MagnusVonMagnum's Avatar
 
Join Date: Jun 2007
Quote:
Originally Posted by RayK View Post
I want a new Java 6 from Apple.
Given the onerous requirements of Java 7 (i.e. no Snow Leopard support despite the large numbers of people still using it), I think Apple SHOULD release a security update in this case or get Oracle to make Java 7 Snow Leopard compatible (although somehow I get the feeling that was more Apple's idea seeing how they want to push people to upgrade the OS...except that SOME Intel Macs can't be updated to Mountain Lion).

Quote:
Originally Posted by gregpod9 View Post
Java 7 Update 13 is still buggy as like the previous Java 7 versions. Java 7's print applet does not print properly. Its too bad that Apple blocked Java 6 on Mountain Lion. I have to bootcamp to Windows 7 to use the less buggy version of Java 7.
I agree it really IS buggy. If I play Scrabble on Pogo.com, the keyboard will work for about the first two rounds for chat and typing letters onto the screen and then simply stop working (it never works for the dictionary). These inputs work fine on my Macbook Pro still running Snow Leopard and Java6.

Quote:
Originally Posted by justperry View Post
WTF does THAT have to do with security vulnerabilities in things like Flash, Java or even web browsers? Not everything in this world that can harm you or your computer is a virus or trojan, after all and Macs are not invulnerable to exploits in these areas (and hacking contests have shown this again and again as the Mac/Safari is usually the one to win the prize since security hasn't been very high on Apple's agenda in the past.

In other words, I don't recall ANYONE saying a security exploit was a virus here but that's all your page is about (and shows a certain arrogance in assuming there will NEVER be a virus in the future with the, It's NOT a virus headline) and thus I must conclude the poster was spot-on with his original naive comment.

Quote:
Originally Posted by BornAgainMac View Post
Every update fixes some security flaw. Maybe it is time to just give up on Java and focus on other products.
Do you have any idea how many security patches OSX gets every update (and I think we all know how many Windows has gotten over the years)? If having a security vulnerability were a fatal flaw for any platform, there would be NO platforms out there.
__________________
Mac Mini Server 2012 (2.3GHz Quad i7, 8GB, 2x1TB RAID 0) ; External 12x Memorex Blu-Ray USB3, External WD 3x3TB,1x2TB HD USB3)
15" Matte MBP 2.4GHz, 4GB/500GB, NVidia 8600M GT; 3 ATV; 2 iPod Touch

Last edited by MagnusVonMagnum; Feb 2, 2013 at 04:28 PM.
MagnusVonMagnum is offline   1 Reply With Quote
Old Feb 2, 2013, 05:43 PM   #16
summitscout
macrumors newbie
 
Join Date: Mar 2009
Is anyone able to run Java Web Start?

I am trying to run a .jnlp file via Java Web Start version 6 (update 12 provided by Apple.)

Code:
$ java -version
java version "1.6.0_37"
Java(TM) SE Runtime Environment (build 1.6.0_37-b06-434-11M3909)
Java HotSpot(TM) 64-Bit Server VM (build 20.12-b01-434, mixed mode)

On 3 different Macs running 10.8, it will not start and I get the redirect notice above from Apple. On two of these, Java 7 needed to be uninstalled. On one, Java 7 was never installed. It seems like Apple is also blocking Java 6, though there is no notice of it. This is the first thread I've found all week with others claiming Java 6 is blocked.

Going through user logs, I did find plenty of users running the app with Mac OS 10.6 and one with 10.7. Anyone else able to run Web Start on 10.7 or 10.8?

Also, I tried removing the Java references from the XProtect.plist and the XProtect.meta.plist files, but no go on Java 6 even after a reboot. Anyone know where else Apple is blocking Java 6 from starting? Thanks!
__________________
Mid 2010 MacBook Pro 15" Core i7
Early 2009 Mac Pro 2 x 2.26 GHz, ATI Radeon HD 4870, 6 GB, 20" Apple Cinema Display
CommunityMX
summitscout is offline   0 Reply With Quote
Old Feb 3, 2013, 09:38 AM   #17
justperry
macrumors 603
 
justperry's Avatar
 
Join Date: Aug 2007
Location: 7 Km South of an active upside down (boat) volcano.
Quote:
Originally Posted by MagnusVonMagnum View Post
WTF does THAT have to do with security vulnerabilities in things like Flash, Java or even web browsers? Not everything in this world that can harm you or your computer is a virus or trojan, after all and Macs are not invulnerable to exploits in these areas (and hacking contests have shown this again and again as the Mac/Safari is usually the one to win the prize since security hasn't been very high on Apple's agenda in the past.

In other words, I don't recall ANYONE saying a security exploit was a virus here but that's all your page is about (and shows a certain arrogance in assuming there will NEVER be a virus in the future with the, It's NOT a virus headline) and thus I must conclude the poster was spot-on with his original naive comment.
Several reasons I linked him to that page.

1. A newbie, newbies tend to get all paranoid about Virus/Malware.(might be ex PC/Windows)

2. On that page it explains that you don't need to be paranoid as long as you follow some guidelines, one of them is to disable Java in Safari, it's all under "What security steps should I take?"

3. I am on OS X since the beginning and never had anything on my mac, so again why write in a post "naive" when the chance is soooooo low it won't affect you if you follow that page.

4 Oh, and the is this post from munkery a few places below yours (#87) which explains why Macs are much more secure.
justperry is offline   0 Reply With Quote
Old Feb 3, 2013, 03:12 PM   #18
MagnusVonMagnum
macrumors 68040
 
MagnusVonMagnum's Avatar
 
Join Date: Jun 2007
Quote:
Originally Posted by justperry View Post
Several reasons I linked him to that page.
3. I am on OS X since the beginning and never had anything on my mac, so again why write in a post "naive" when the chance is soooooo low it won't affect you if you follow that page.
I've never had a virus or hack or most other malware (and only one trojan that AVG caught immediately that I shouldn't have downloaded from an untrusted source) on Windows in the past 14 years either. That alone doesn't mean threats don't or cannot exist. I'm not saying OSX isn't reasonably secure, but invulnerable? It's the attitude I don't like seeing. It doesn't hurt to be cautious and aware (if I had been either I wouldn't have downloaded a trojan in Windows that one time in 14 years either).

But hacking is another matter altogether. Despite someone pointing out Safari didn't get hacked the last time, it HAS been hacked several times before. Flash has had known vulnerabilities along with (obviously) Java. OSX itself has had numerous security patches over the years. Those were real vulnerabilities that could have been exploited. That doesn't mean YOUR computer will get hacked (if this were true, everyone's computer running Windows would be toast), but it does mean it's not invulnerable just because it hasn't happened yet.

A lot of hacking probably doesn't happen to OSX simply because hardly anyone uses OSX as a commercial web or file server so what incentive is there to hack it? You don't hack your neighbors Mac if you're a criminal (that's for phishing). You go after big fish like credit card companies and what not. They're not likely to be running Macs. If they were, they'd get targeted too.

One only need look to jailbreaking and other hacking tools that use exploits in iOS or OSX and its associated hardware (in the case of AppleTV Generation 1) in order to install custom software that Apple really doesn't want you installing (e.g. XBMC and other media programs that support more than just Apple codecs).
__________________
Mac Mini Server 2012 (2.3GHz Quad i7, 8GB, 2x1TB RAID 0) ; External 12x Memorex Blu-Ray USB3, External WD 3x3TB,1x2TB HD USB3)
15" Matte MBP 2.4GHz, 4GB/500GB, NVidia 8600M GT; 3 ATV; 2 iPod Touch
MagnusVonMagnum is offline   1 Reply With Quote
Old Feb 3, 2013, 04:44 AM   #19
Negritude
macrumors regular
 
Join Date: Jul 2011
Quote:
Originally Posted by RayK View Post
I want a new Java 6 from Apple.
Java 6 is EOL. The update they just issued for SL is most likely the last one.

If you're using Lion or ML, you should disable Java 6 completely.

If you're using SL, you should figure out a way to install Java 7.
Negritude is offline   0 Reply With Quote
Old Feb 3, 2013, 09:05 AM   #20
Rocketman
macrumors 603
 
Rocketman's Avatar
 
Join Date: Dec 2001
Location: Claremont, CA
I have no objection to Apple not supporting older Java installs. But actively disabling them with no opt out provision "is" support. If you "are" going to "support" (cripple) it, at least make it possible on some level to run the Java apps we have been all along on older OS versions. Java will run on essentially any *nix, so pretty much any version of OSX ever should be compatible with whatever update is needed. Just set the update servers to install it.
__________________
Think Different-ly!
All 357 R or D House jobs bills over 4 years died in the D Senate, ordered by the D President. Buy a model rocket here: http://v-serv.com/usr/instaship-visual.htm Thanks.
Rocketman is offline   0 Reply With Quote
Old Feb 4, 2013, 01:55 PM   #21
celavato
macrumors regular
 
Join Date: Oct 2005
Quote:
Originally Posted by RayK View Post
I want a new Java 6 from Apple.
Is there a way to use Java 6 in Mountain Lion? We remain stuck with Lion and Safari 5.x for the time being. I don't mind Safari 5.x since I prefer the separate search area but I'd like to have the Reminders app on my Mac.
celavato is offline   0 Reply With Quote
Old Feb 4, 2013, 02:16 PM   #22
Negritude
macrumors regular
 
Join Date: Jul 2011
Quote:
Originally Posted by TechnoLawyer View Post
Is there a way to use Java 6 in Mountain Lion?
You can install Java 6 in Mountain Lion, but it will be the out of date version with security holes. There is no updated and patched version for anything beyond Snow Leopard. There never will be. Apple and Oracle want you to use Java 7, period.
Negritude is offline   0 Reply With Quote
Old Feb 1, 2013, 04:34 PM   #23
lkrupp
macrumors 6502
 
Join Date: Jul 2004
Quote:
Originally Posted by pgiguere1 View Post
Why? You can easily update from the Java preference panel. No hassles.

----------

Quote:
Originally Posted by KevinMHC View Post
I spent all morning fixing this and right when I fixed it apple releases an update :@

A LITTLE NOTICE NEXT TIME WOULD BE NICE :@
Apple didn't release it, Oracle did. If you don't know how it works then don't install it.
lkrupp is offline   6 Reply With Quote
Old Feb 2, 2013, 01:43 AM   #24
ipetro
macrumors newbie
 
Join Date: Feb 2013
Quote:
Originally Posted by pgiguere1 View Post
This does not work.
You need to navigate to http://www.java.com/en/download/testjava.jsp
here you can test if you have it.
ipetro is offline   0 Reply With Quote
Old Feb 1, 2013, 03:06 PM   #25
iMikeT
macrumors 68020
 
Join Date: Jul 2006
Location: California
Are we good, for real this time?
iMikeT is offline   3 Reply With Quote

Reply
MacRumors Forums > News and Article Discussion > MacRumors.com News Discussion

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Similar Threads
thread Thread Starter Forum Replies Last Post
Apple Releases New Java 6 Updates With Enhanced Security, Uninstalls Apple-Provided Java Applet Plug-in MacRumors Mac Blog Discussion 49 Oct 22, 2013 09:58 AM
Apple Releases Safari and Java Updates With Plug-In and Security Improvements MacRumors MacRumors.com News Discussion 77 Apr 23, 2013 03:09 PM
Oracle Updates Java 7 to Address Security Vulnerability MacRumors MacRumors.com News Discussion 72 Jan 19, 2013 11:00 AM
Oracle Releases Patch to Address Security Vulnerability in Java 7 MacRumors MacRumors.com News Discussion 63 Sep 5, 2012 01:02 PM
Oracle releases Java 7 update 6, bringing full OS X support for the first time wrldwzrd89 Apple, Industry and Internet Discussion 1 Aug 14, 2012 05:46 PM

Forum Jump

All times are GMT -5. The time now is 04:13 PM.

Mac Rumors | Mac | iPhone | iPhone Game Reviews | iPhone Apps