Oracle Releases Java 7 Update 13 to Address Security Issues, Reenable Web Plug-in on OS X

MacRumors · Feb 1, 2013, 03:01 PM

Less than two days after Apple once again blocked Java 7 web plug-ins on OS X, Oracle has released an updated version of Java 7 to address certain security vulnerabilities.

The new Java 7 arrives as Update 13 and carries a version number of 1.7.0_13-b20, meeting Apple's requirement for a minimum of 1.7.0_11-b22. Oracle has also released an updated version of Java 6, although Apple was not blocking the previous version of the plug-in.

Oracle notes that the new update contains fixes for over 50 issues and that the launch was accelerated by several weeks in order to address a vulnerability that was being exploited in the wild.

Quote:

The original Critical Patch Update for Java SE - February 2013 was scheduled to be released on February 19th, but Oracle decided to accelerate the release of this Critical Patch Update because active exploitation "in the wild" of one of the vulnerabilities affecting the Java Runtime Environment (JRE) in desktop browsers, was addressed with this Critical Patch Update. [...]

Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply CPU fixes as soon as possible. This Critical Patch Update contains 50 new security fixes across Java SE products.

The latest versions of all Java SE packages are available through Oracle's support site.

(Thanks, Flemming!)

Article Link: Oracle Releases Java 7 Update 13 to Address Security Issues, Reenable Web Plug-in on OS X

pgiguere1 · Feb 1, 2013, 03:04 PM

Direct link to update.

iMikeT · Feb 1, 2013, 03:06 PM

Are we good, for real this time?

RayK · Feb 1, 2013, 03:06 PM

I want a new Java 6 from Apple.

Northgrove · Feb 1, 2013, 03:06 PM

It's Java updates all the way down.

mrsir2009 · Feb 1, 2013, 03:08 PM

Great

laudern · Feb 1, 2013, 03:09 PM

This is a complete no0b question and feel free to pay me out, but how do I know if I have Java installed on my OS?

FloatingBones · 03:34 PM

At least Oracle doesn't bundle deceptive spam-ware with their Mac updates like they do with their PC updates.

unplugme71 · Feb 1, 2013, 03:11 PM

I give it 24 hours before a new flaw is found and Apple blocks it again.

Northgrove · Feb 1, 2013, 03:18 PM

Quote:

Originally Posted by laudern

This is a complete no0b question and feel free to pay me out, but how do I know if I have Java installed on my OS?

I just tried by opening a Terminal window (Applications -> Utilities) and typed "java -v". It'll display the Java version if installed. At this point, OS X actually showed a window saying "Java Runtime 6 is not installed. Do you want to install it?", at which point I clicked NO NOOO.

Edit: Ah right. "Undecided"'s reply above is a better than mine to check for Java installed as an actual browser plugin.

Peace · Feb 1, 2013, 03:19 PM

Well cool. Maybe Apple will release 10.8.3 now.

Badagri · Feb 1, 2013, 03:27 PM

Quote:

Originally Posted by iMikeT

Are we good, for real this time?

Be amusing reading the people that have to disable it again. When did Java have a good record?

photographypro · Feb 1, 2013, 03:32 PM

I have it if I need it, but with all the multiple problems, plus after the 1st problem that Apple blocked, Java had NOTHING on their website about potential problems, so I'm not sure if I can trust Java.

Shrink · Feb 1, 2013, 03:33 PM

Quote:

Originally Posted by laudern

This is a complete no0b question and feel free to pay me out, but how do I know if I have Java installed on my OS?

I spoke with Apple about this very question. If you are running an OS X version 10.7 or earlier, you check in your Applications folder. If you have it installed, it will show up there.

If you are running 10.8, open the System Preferences window. If you have Java, it will show up at the bottom of the window (5 lines down), under "Other".

Also, you can make sure it's not enabled, whether you have it or not, by going into Safari Preference > Security, and make sure "Enable Java" is Unchecked.

Verbatim Cookie · Feb 1, 2013, 03:42 PM

We are never, ever getting back together, Java.

Sayer · Feb 1, 2013, 03:51 PM

At least I can use a Mac to do 99% of my work making a Java-based hybrid web app with a J2EE backend and Mac/iOS client front end. Using the Java-based Eclipse on a Mac is a good thing, otherwise I'd have to use the crappy WinXP (yes, XP) company laptops to get some of my work done. Yuck.

Nermal · Feb 1, 2013, 03:53 PM

Quote:

Originally Posted by laudern

This is a complete no0b question and feel free to pay me out, but how do I know if I have Java installed on my OS?

The official Java test will verify whether it's working or not. Shrink's post above will help determine whether you actually have it installed in the first place.

ConCat · Feb 1, 2013, 03:53 PM

See, here's the problem. Clearly Apple knows when these patches are going to be released otherwise they wouldn't know what version it's going to be or when to block the old version. Problem is, they have to stop preempting Oracle. There is an order to things in life Apple, this isn't it.

KevinMHC · Feb 1, 2013, 03:58 PM

I spent all morning fixing this and right when I fixed it apple releases an update :@

A LITTLE NOTICE NEXT TIME WOULD BE NICE :@

C DM · Feb 1, 2013, 04:00 PM

Quote:

Originally Posted by ConCat

See, here's the problem. Clearly Apple knows when these patches are going to be released otherwise they wouldn't know what version it's going to be or when to block the old version. Problem is, they have to stop preempting Oracle. There is an order to things in life Apple, this isn't it.

There's nothing clear about that kind of a theory. Apple blocks it when it feels there's enough justification out there for it to be a threat. They simply block the highest version that is available and have no clue what the next released version will be, but anything higher than the highest version at the time of blocking will supersede the block and work. Fairly straightforward and completely doesn't involve any prior knowledge of anything at all.

Undecided · Feb 1, 2013, 04:02 PM

Quote:

Originally Posted by Northgrove

Edit: Ah right. "Undecided"'s reply above is a better than mine to check for Java installed as an actual browser plugin.

So, uh, someone blew away my response.....

robb1068 · Feb 1, 2013, 04:12 PM

"Oracle has also released an updated version of Java 6, although Apple was not blocking the previous version of the plug-in. "

This is from the XProtect.meta.plist file:

<key>JavaWebComponentVersionMinimum</key>
<string>1.6.0_37-b06-435</string>

Safari in our Snow Leopard clients are showing the JRE plug-in as inactive (even though it's enabled in Java prefs and Safari's security prefs). Unfortunately OS X 10.6 can only run Java 1.6 which is dependent on being updated from Apple. Here's hoping there's a quick approval.

Windlasher · Feb 1, 2013, 04:24 PM

It's not you Java it's me.....I'm seeing someone else. No, don't cry. HTML 5 really understand me.....

lkrupp · Feb 1, 2013, 04:34 PM

Quote:

Originally Posted by pgiguere1

Direct link to update.

Why? You can easily update from the Java preference panel. No hassles.

----------

Quote:

Originally Posted by KevinMHC

I spent all morning fixing this and right when I fixed it apple releases an update :@

A LITTLE NOTICE NEXT TIME WOULD BE NICE :@

Apple didn't release it, Oracle did. If you don't know how it works then don't install it.

mrkgoo · Feb 1, 2013, 04:49 PM

Do we get informed to update java 6? I think I as prompted to install a java runtime and mountain lion grabbed their java 6 b

Feb 1, 2013, 03:06 PM	#4
RayK macrumors 6502 Join Date: Oct 2005	I want a new Java 6 from Apple. __________________ 24" iMac Early 2009, iPad 2 64GB VZW, iPhone 5 Verizon Apple Certified Macintosh Technician
	3

Feb 1, 2013, 03:06 PM	#5
Northgrove macrumors 6502a Join Date: Aug 2010	It's Java updates all the way down. __________________ iPhone 5 • rMBP 15" (2012)
	4

Feb 1, 2013, 03:08 PM	#6
mrsir2009 macrumors 604 Join Date: Sep 2009 Location: Wellington, New Zealand	Great __________________ How to Prevent your Mac from Overheating
	0

Feb 1, 2013, 03:10 PM	#8
FloatingBones macrumors 6502a Join Date: Jul 2006	At least Oracle doesn't bundle deceptive spam-ware with their Mac updates like they do with their PC updates. Last edited by FloatingBones; Feb 1, 2013 at 03:34 PM.
	4

Feb 1, 2013, 03:11 PM	#9
unplugme71 macrumors 6502 Join Date: May 2011	I give it 24 hours before a new flaw is found and Apple blocks it again. __________________ Mid-2010 15" MBP ML, 64GB iPhone 5 (AT&T), 64GB iPad Mini (AT&T), 8GB iPod Nano
	12

Feb 1, 2013, 03:04 PM	#2
pgiguere1 macrumors 65816 Join Date: May 2009 Location: Montreal, Canada	Direct link to update.
	4

Feb 1, 2013, 03:06 PM	#3
iMikeT macrumors 68020 Join Date: Jul 2006 Location: California	Are we good, for real this time?
	3

Feb 1, 2013, 03:09 PM	#7
laudern macrumors regular Join Date: Jan 2011	This is a complete no0b question and feel free to pay me out, but how do I know if I have Java installed on my OS?
	0

Feb 1, 2013, 03:19 PM	#11
Peace macrumors P6 Join Date: Apr 2005 Location: Space--The ONLY Frontier	Well cool. Maybe Apple will release 10.8.3 now.
	0

Feb 1, 2013, 03:32 PM	#13
photographypro macrumors regular Join Date: Jul 2010 Location: American in Pisa (Italy)	Updated it, but I still have it off. I have it if I need it, but with all the multiple problems, plus after the 1st problem that Apple blocked, Java had NOTHING on their website about potential problems, so I'm not sure if I can trust Java.
	0

Feb 1, 2013, 03:42 PM	#15
Verbatim Cookie macrumors member Join Date: Mar 2012	We are never, ever getting back together, Java. __________________ *Remember the Liberty!*
	4

Feb 1, 2013, 03:51 PM	#16
Sayer macrumors 6502a Join Date: Jan 2002 Location: Austin, TX	At least I can use a Mac to do 99% of my work making a Java-based hybrid web app with a J2EE backend and Mac/iOS client front end. Using the Java-based Eclipse on a Mac is a good thing, otherwise I'd have to use the crappy WinXP (yes, XP) company laptops to get some of my work done. Yuck. __________________ Obama is a true statesman whose experience as a state senator, half-term US Senator & guest lecturer in a Constitutional Law class has fully prepared him to take control of our nuclear arsenal.-Me
	0

Feb 1, 2013, 03:53 PM	#18
ConCat macrumors 6502a Join Date: Jul 2012 Location: behind you. No, seriously.	See, here's the problem. Clearly Apple knows when these patches are going to be released otherwise they wouldn't know what version it's going to be or when to block the old version. Problem is, they have to stop preempting Oracle. There is an order to things in life Apple, this isn't it. __________________ Con + Cat
	1

Feb 1, 2013, 03:58 PM	#19
KevinMHC macrumors newbie Join Date: Nov 2012	I spent all morning fixing this and right when I fixed it apple releases an update :@ A LITTLE NOTICE NEXT TIME WOULD BE NICE :@
	3

Feb 1, 2013, 04:12 PM	#22
robb1068 macrumors newbie Join Date: Oct 2011	"Oracle has also released an updated version of Java 6, although Apple was not blocking the previous version of the plug-in. " This is from the XProtect.meta.plist file: <key>JavaWebComponentVersionMinimum</key> <string>1.6.0_37-b06-435</string> Safari in our Snow Leopard clients are showing the JRE plug-in as inactive (even though it's enabled in Java prefs and Safari's security prefs). Unfortunately OS X 10.6 can only run Java 1.6 which is dependent on being updated from Apple. Here's hoping there's a quick approval.
	1

Feb 1, 2013, 04:24 PM	#23
Windlasher macrumors regular Join Date: Jan 2011	It's not you Java it's me.....I'm seeing someone else. No, don't cry. HTML 5 really understand me..... __________________ --- the box said windows XP or better, so I bought a mac. --- I am dyslexic of BORG. Your ass will be laminated.
	4

Feb 1, 2013, 04:49 PM	#25
mrkgoo macrumors 65816 Join Date: Aug 2005	Do we get informed to update java 6? I think I as prompted to install a java runtime and mountain lion grabbed their java 6 b
	0

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode