9 ms·

JDK 7u11 Release Notes

51 points by benmmurphy 14y ago

reaperhulk 14y ago
Java update process on my 10.8 Mac: 1) Open Java Control Panel, see it says I have an update. Click "OK". 2) Reopen Java Control Panel because OK closes the window. This time click "Update Now" 3) After downloading 50MB another installer opens. Notice that it says 7u10 and not 7u11 (I was running 7u9). 4) Look back at Java Control Panel and see that it claims "Java Update was last run at 5:03 PM". 5) Reopen the JCP several times to try to force it to recognize that 7u11 is the latest, not 7u10. 6) Give up and install 7u10 7) Reopen JCP yet again. Success, 7u11 is available! 8) Click "Update Now" (not falling for your tricks again "OK" button) 9) http://d.pr/i/9UdC http://d.pr/i/9UdC 10) Curse and post this.
- martinced 14y ago
  On a Mac, find the JavaAppletPlugin.plugin file and move it to trash. That when, next month, the next 0-day exploit targetting Java applets comes out you'll be safe. It only disable applets, nothing else.
- revelation 14y ago
  Java update process on my Windows 7 machine: 1) Be notified of an update through the automatically running update check (probably with weak crypto and verification, given their track record...) 2) Clicking launches the MSI installer 3) "Java is wasting cycles on 6 billion (right now) insecure devices. Update now." 4) Remember to uncheck the Ask.com toolbar installer (Are you even trying at this point Oracle? Just kill it outright) 5) Installing 6) "Remember, Java is awesome, and for the moment its secure again" (Not a comparison, just to make the point that the "experience" is equally great on the other side)
  - manishsharan 14y ago
    Cry me a river ! This is how we do it in Ubuntu land http://www.wikihow.com/Upgrade-Oracle-Java-on-Ubuntu-Linux http://www.wikihow.com/Upgrade-Oracle-Java-on-Ubuntu-Linux.
    - foohbarbaz 14y ago
      Nothing easier than Linux. 1. Download zip archive 2. Install into $HOME. 3. Switch symlink from old version to new. Done. I have 3 different JDKs installed at the moment.
      - deleted 14y ago
        [deleted]
    - tacticus 14y ago
      there are PPAs out there for oracle java
      - drivebyacct2 14y ago
        Appears they're still on 7u10 though: https://launchpad.net/~webupd8team/+archive/java https://launchpad.net/~webupd8team/+archive/java Unfortunate that they're dragging their feet on this.
  - joenathan 14y ago
    Including a toolbar with your product, especially with an update is like giving your customers the finger.
  - Silhouette 14y ago
    Java update process on my Windows 7 machine: 1. Run "Ninite Java installer.exe". 2. Control panel -> Programs and Features -> Uninstall any old versions, if applicable. If anyone on Windows doesn't know about www.ninite.com, it's probably worth your time to take a look.
  - pasbesoin 14y ago
    Hyperbole. IIRC, the installer dialog said "3 billion". ;-) I am happy for one thing. After having used the Control Panel feature introduced in 7u10 to allow disabling Java in all browsers via one checkbox, when I ran the 7u11 update and subsequently -- carefully! -- checked, I found that Java remained disabled in all the browsers on the system. Hallelujah! Finally -- much too late, IMO -- one can apparently (I'd continue to manually verify, for the near if not foreseeable future) disable Java in the browser(s), and the setting sticks. Prior to this, after each update, I'd have to go into all the browsers on the system and manually disable the Java plugins -- at least I had to until some, but not all, of the browser makers got smart and started ensuring that disabled Java plugins remained disabled, despite the Java installer's attempts. And even disabling the browser plug-ins was apparently not sufficient, for IE: http://krebsonsecurity.com/how-to-unplug-java-from-the-browser/ http://krebsonsecurity.com/how-to-unplug-java-from-the-brows... (see the section on Internet Explorer)
frendiversity 14y ago
That was actually a pretty fast response, considering the behemoth Java is and that the team is fractured since the acquisition. Things will get better, the websites are not even fully transitioned yet. Wish people would cut Oracle a little slack here, although they really need to improve the Java update process. They could and should learn something from Flash (as depressing as that is to say!)
- pekk 14y ago
  I can cut Oracle some slack when black hats can cut me some slack.
- dnu 14y ago
  Well, I see that they offer to "Install the Ask toolbar" by default. I don't remember Sun doing this. http://www.java.com/en/download/faq/ask_toolbar.xml http://www.java.com/en/download/faq/ask_toolbar.xml
  - frendiversity 14y ago
    This I am genuinely annoyed with. I am going to start a petition to Oracle for these points, the Java community is extremely large and valuable and it's a disgrace to treat the platform this way.
    - frendiversity 14y ago
      I am doing some research, apparently this is only for the online JRE install, and it's been there since 2011. Sun JRE install once peddled OpenOffice and Google Toolbar, but at least OO is better than Ask. Ugh. They need to get rid of this, it's an embarrassment.
      - mhurron 14y ago
        I got a McAfee something or other offer bundled with the installer. I don't know why Sun and Oracle did this, it gives the installer the look of shady shareware shit.
hughw 14y ago
"Installing this update will ensure that your Java applications continue to run as safely and efficiently as always." Thanks for the warning.
drivebyacct2 14y ago
I'm rather disappointed to see that Ubuntu's stuck at openjdk-7-jdk:amd64 7u9-2.3.3-0ubuntu1~12.10.1 currently.
- josteink 14y ago
  At least OpenJDK doesn't include 0-day exploits featured in Oracle's JVM. You don't need the update this instant.
  - frendiversity 14y ago
    Oracle JVM is based on OpenJDK now. The difference is in the IcedTea plugin, which is lacking a lot of features.
pootch 14y ago
Why have applets not been deprecated? Nobody uses Java in the browser for anything. Also before anyone gets too high on their anti-oracle rant. Java is maintained by fewer than 5 people.
josteink 14y ago
Every time I'm asked to update Java, I can't wait for the day it goes away. Then I remember awesome stuff like clojure runs on top of the JVM. Hopefully more browsers will stop blocking Java applets by default, as only they seem to be the cause of troubles at this point.

51 points by benmmurphy 14y ago

Java update process on my 10.8 Mac: 1) Open Java Control Panel, see it says I have an update. Click "OK". 2) Reopen Java Control Panel because OK closes the window. This time click "Update Now" 3) After downloading 50MB another installer opens. Notice that it says 7u10 and not 7u11 (I was running 7u9). 4) Look back at Java Control Panel and see that it claims "Java Update was last run at 5:03 PM". 5) Reopen the JCP several times to try to force it to recognize that 7u11 is the latest, not 7u10. 6) Give up and install 7u10 7) Reopen JCP yet again. Success, 7u11 is available! 8) Click "Update Now" (not falling for your tricks again "OK" button) 9) http://d.pr/i/9UdC http://d.pr/i/9UdC 10) Curse and post this.

martinced 14y ago
On a Mac, find the JavaAppletPlugin.plugin file and move it to trash. That when, next month, the next 0-day exploit targetting Java applets comes out you'll be safe. It only disable applets, nothing else.
revelation 14y ago
Java update process on my Windows 7 machine: 1) Be notified of an update through the automatically running update check (probably with weak crypto and verification, given their track record...) 2) Clicking launches the MSI installer 3) "Java is wasting cycles on 6 billion (right now) insecure devices. Update now." 4) Remember to uncheck the Ask.com toolbar installer (Are you even trying at this point Oracle? Just kill it outright) 5) Installing 6) "Remember, Java is awesome, and for the moment its secure again" (Not a comparison, just to make the point that the "experience" is equally great on the other side)
- manishsharan 14y ago
  Cry me a river ! This is how we do it in Ubuntu land http://www.wikihow.com/Upgrade-Oracle-Java-on-Ubuntu-Linux http://www.wikihow.com/Upgrade-Oracle-Java-on-Ubuntu-Linux.
  - foohbarbaz 14y ago
    Nothing easier than Linux. 1. Download zip archive 2. Install into $HOME. 3. Switch symlink from old version to new. Done. I have 3 different JDKs installed at the moment.
    - deleted 14y ago
      [deleted]
  - tacticus 14y ago
    there are PPAs out there for oracle java
    - drivebyacct2 14y ago
      Appears they're still on 7u10 though: https://launchpad.net/~webupd8team/+archive/java https://launchpad.net/~webupd8team/+archive/java Unfortunate that they're dragging their feet on this.
- joenathan 14y ago
  Including a toolbar with your product, especially with an update is like giving your customers the finger.
- Silhouette 14y ago
  Java update process on my Windows 7 machine: 1. Run "Ninite Java installer.exe". 2. Control panel -> Programs and Features -> Uninstall any old versions, if applicable. If anyone on Windows doesn't know about www.ninite.com, it's probably worth your time to take a look.
- pasbesoin 14y ago
  Hyperbole. IIRC, the installer dialog said "3 billion". ;-) I am happy for one thing. After having used the Control Panel feature introduced in 7u10 to allow disabling Java in all browsers via one checkbox, when I ran the 7u11 update and subsequently -- carefully! -- checked, I found that Java remained disabled in all the browsers on the system. Hallelujah! Finally -- much too late, IMO -- one can apparently (I'd continue to manually verify, for the near if not foreseeable future) disable Java in the browser(s), and the setting sticks. Prior to this, after each update, I'd have to go into all the browsers on the system and manually disable the Java plugins -- at least I had to until some, but not all, of the browser makers got smart and started ensuring that disabled Java plugins remained disabled, despite the Java installer's attempts. And even disabling the browser plug-ins was apparently not sufficient, for IE: http://krebsonsecurity.com/how-to-unplug-java-from-the-browser/ http://krebsonsecurity.com/how-to-unplug-java-from-the-brows... (see the section on Internet Explorer)

frendiversity 14y ago

That was actually a pretty fast response, considering the behemoth Java is and that the team is fractured since the acquisition. Things will get better, the websites are not even fully transitioned yet. Wish people would cut Oracle a little slack here, although they really need to improve the Java update process. They could and should learn something from Flash (as depressing as that is to say!)

pekk 14y ago
I can cut Oracle some slack when black hats can cut me some slack.
dnu 14y ago
Well, I see that they offer to "Install the Ask toolbar" by default. I don't remember Sun doing this. http://www.java.com/en/download/faq/ask_toolbar.xml http://www.java.com/en/download/faq/ask_toolbar.xml
- frendiversity 14y ago
  This I am genuinely annoyed with. I am going to start a petition to Oracle for these points, the Java community is extremely large and valuable and it's a disgrace to treat the platform this way.
  - frendiversity 14y ago
    I am doing some research, apparently this is only for the online JRE install, and it's been there since 2011. Sun JRE install once peddled OpenOffice and Google Toolbar, but at least OO is better than Ask. Ugh. They need to get rid of this, it's an embarrassment.
    - mhurron 14y ago
      I got a McAfee something or other offer bundled with the installer. I don't know why Sun and Oracle did this, it gives the installer the look of shady shareware shit.

hughw 14y ago

"Installing this update will ensure that your Java applications continue to run as safely and efficiently as always." Thanks for the warning.

drivebyacct2 14y ago

I'm rather disappointed to see that Ubuntu's stuck at openjdk-7-jdk:amd64 7u9-2.3.3-0ubuntu1~12.10.1 currently.

josteink 14y ago
At least OpenJDK doesn't include 0-day exploits featured in Oracle's JVM. You don't need the update this instant.
- frendiversity 14y ago
  Oracle JVM is based on OpenJDK now. The difference is in the IcedTea plugin, which is lacking a lot of features.

pootch 14y ago

Why have applets not been deprecated? Nobody uses Java in the browser for anything. Also before anyone gets too high on their anti-oracle rant. Java is maintained by fewer than 5 people.

josteink 14y ago

Every time I'm asked to update Java, I can't wait for the day it goes away. Then I remember awesome stuff like clojure runs on top of the JVM. Hopefully more browsers will stop blocking Java applets by default, as only they seem to be the cause of troubles at this point.