Page 2 of 2
Posted: Sun 20 Jan 2013, 00:17
by Q5sys
James C wrote:http://arstechnica.com/security/2013/01 ... t-version/
Java 6, which Oracle is still supporting for the time being, hasn't been vulnerable to most of the recent exploits, although security experts remain mixed on whether it is a more secure alternative to Java 7. Gowdiak said one of the vulnerabilities Security Explorations discovered this week works on both versions while the other works only on Java 7.
Added section about Legacy 6u38 release in first post. It appears the bug that didnt get patched is the one that only affects v7.
Posted: Sun 20 Jan 2013, 01:49
by 8-bit
From what I have read so far on the net, javascript is not prone to the security risks that java 7 is.
Also installing an earlier version of java is not the answer as they also had security problems.
Posted: Sun 20 Jan 2013, 02:37
by jpeps
8-bit wrote:From what I have read so far on the net, javascript is not prone to the security risks that java 7 is.
Also installing an earlier version of java is not the answer as they also had security problems.
When was the last time you needed a java plugin?
Posted: Mon 21 Jan 2013, 03:24
by 8-bit
In the versions of Puppy I run with Seamonkey as the browser, I have looked and I can find JavaScript, but not Java.
So, does that mean that to have Java (full), one needs to install it?
I run Seamonkey and have never missed not having Java as JavaScript seems to handle most everything.
If I am wrong, please correct me.
Posted: Mon 21 Jan 2013, 04:11
by jpeps
8-bit wrote:In the versions of Puppy I run with Seamonkey as the browser, I have looked and I can find JavaScript, but not Java.
So, does that mean that to have Java (full), one needs to install it?
I run Seamonkey and have never missed not having Java as JavaScript seems to handle most everything.
If I am wrong, please correct me.
I thought you asked that in another thread; they're two different things with similar names. Web developers generally stopped using Java years ago. It's being used for other purposes. Javascript is an interpreted language coded into the web page; Java is a compiled language that runs applets on computers that have the JRE installed. Many developers switched to Flash (since the user doesn't have to have any preloaded software). I don't know if anyone has a linux browser that loads a java plugin; Firefox certainly doesn't and mozilla blocks java. * I just tested a chrome browser...plugins are only available for windows and mac.
Yes, you'd have to install it. I installed updated binaries as an SFS. Why? Because I can run very complex accounting software, etc., statically....everything works everywhere. Java used to be slow, but both computers and the JRE have improved, so that's no longer an issue. I expect that process to continue. Security? Well, if you get computer viruses that can run your java software, that wouldn't be very good. Systems like puppy are the most ideal, because getting viruses are rare (never heard of it) in addition to offering plenty of protections. So you can have the best of both worlds.
Posted: Sat 02 Feb 2013, 14:53
by Q5sys
Updated
Posted: Sat 02 Feb 2013, 16:44
by jpeps
Q5sys wrote:Updated
I'm guessing that it's extremely unlikely that Oracle could prevent all exploits without completely rewriting the entire language from scratch....and perhaps not even then.
Notice how numerous exploits in Chrome were produced by teenagers when a cash reward was offered.
Personally, I'll continue to use Java for apps without any Java browser plugins (if any are available to begin with).
Posted: Sat 02 Feb 2013, 18:26
by amigo
javascript is completely unrelated to java -it's just an unfortunate mistake in naming...
Posted: Sat 02 Feb 2013, 18:30
by jpeps
amigo wrote:javascript is completely unrelated to java -it's just an unfortunate mistake in naming...
Nobody was talking about javascript...we're updating the jre
Posted: Sat 16 Feb 2013, 02:43
by Semme
Does the symlink exist- yes or no? Maybe check
Shinobars`instructions..
Makoto wrote:I only install TheAsterisk!'s SFS versions of the JRE - no idea whether or not it creates that symlink. Wouldn't it have a bearing on the Mozilla Plugin Check page, too, though? You'd think that if the Mozilla page can find it, the Java page would...
This with
the Asterisk!s`jre-1.7u13-i586.sfs loaded. NO problem..
Posted: Sat 16 Feb 2013, 09:51
by amigo
@jpeps, someone said: "I can find JavaScript, but not Java." I was just responding to that. You seem a bit touchy with me, lately...
Posted: Sat 16 Feb 2013, 10:19
by Makoto
Semme: Not entirely sure why you moved this; my 'issue' isn't really security-related.
See my post in the original thread
here. (I posted while you were moving the discussion, apparently.)
That page still doesn't work for me, but
this page does:
http://www.java.com/en/download/testjava.jsp
As far as I can tell, I have all of the necessary symlinks (
TheAsterisk!'s package actually appears to create them for ALL possible Mozilla browsers, including the Ice series), and I even briefly changed the Java console to show, rather than hide (as the Java website advises). Same results as above.
(Edit: Okay, that's weird. I just checked
http://www.java.com/en/download/install ... detect=jre again, after posting this, and NOW, it's working.
)
Posted: Sat 16 Feb 2013, 11:20
by Semme
Nooo.. but it's not about Flash either. At any rate- good to hear you finally got it.
Posted: Sun 17 Feb 2013, 01:07
by Makoto
I'm surprised it only decided to start working because I posted about it.
Posted: Thu 21 Feb 2013, 01:40
by Q5sys
OP Updated.
Java released a patch for 7u13 release, which is numbered 7u15
http://www.oracle.com/technetwork/topic ... PatchTable
No 6uX release, as it has reached End of Life.
Posted: Thu 21 Feb 2013, 16:04
by Hogweed
The mystery of why Java plugin sometimes works in Seamonkey and sometimes doesn't
https://bugzilla.mozilla.org/show_bug.cgi?id=754622
Bug 754622 -
Summary: [linux] Oracle/Sun Java jre1.7.0_04 and later does not work in SeaMonkey
Common on Linux,. Importance P5 Major but nobody seems to be able to fix the damn thing and they have been at it for months. Works fine on Firefox with latest Java 7 Update 15 but now will not work for me under Seamonkey again. When it did last week. Yes plugin is in the right place but it is marked as "Invalid" in pluginreg.dat. The suggested workarounds in the Seamonkey open bug report (including disabling the blocklist) don't help in my case either.
Seamonkey just marks the plugin as invalid then you are stuffed.
Code: Select all
[INVALID]
/usr/java/jre1.7.0_15/lib/i386/libnpjp2.so:$
1360964494000:$
Doubtless it will work for some (as it did for me with 13) but not for others.
In Firefox 19 the exact same plugin works and is marked
Code: Select all
[PLUGINS]
libnpjp2.so:$
/usr/java/jre1.7.0_15/lib/i386/libnpjp2.so:$
:$
1360964494000:0:5:$
<a href="http://java.sun.com">Java</a> plug-in for NPAPI-based browsers.:$
Java(TM) Plug-in 1.7.0_15:$
...
...
Posted: Thu 21 Feb 2013, 22:50
by Hogweed
Gets stranger. Just installed 5.4.93 Precise beta - Installed Java on it and this time it works with the pre-installed Seamonkey 2.15.2.
Posted: Thu 07 Mar 2013, 00:59
by Q5sys