Java and Firefox

[kes]

I am running the latest FF (17.0.1) and the latest Java (1.7._10).

However, when I check under FF plugins, I see "Java (TM) Platform SE 7
U5 10.5.1.255", with the ominous warning "Java (TM) Platform SE 7 U5 ...
is known to cause security or stability problems"

I've tried re-installing Java, but the [old?] plugin persists. (As far
as I am aware, this issue has been addressed in the latest version of Java.)

Kes

[David H. Lipman]

From: "kes" <k...@127.0.0.1>

V7 update 10 is a develepor's review and not a "released" version.

The latest Oracle JRE is v7 update 9.

--
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp

[Ron Hunter]

Run the program Java Ra first.

[Sjouke Burry]

Ron Hunter <rphu...@charter.net> wrote in
news:stSdnZYIdbCeq1vN...@mozilla.org:

Run the program javara first(see google).

[kes]

Thanks Ron, I think the problem was re-installing the old version on top
of the existing one. I uninstalled first, ran JavaRa, then did a fresh
install. I have a more secure (ha ha!) Java plugin now. Until next time.

[Ron Hunter]

Until next exploit. I deleted Java a couple of months ago, and haven't
seen a need for it yet. YMMV.

[Christoph Schmees]

On 11.12.2012 10:08, Ron Hunter wrote:
> ...

>>
>> Thanks Ron, I think the problem was re-installing the old
>> version on top
>> of the existing one. I uninstalled first, ran JavaRa, then did
>> a fresh
>> install. I have a more secure (ha ha!) Java plugin now. Until
>> next time.
>>
> Until next exploit. I deleted Java a couple of months ago, and
> haven't seen a need for it yet. YMMV.
>

well, there are cross-platform applications that require JRE. Bur
you can still (and should) *disable the Java Plug-Ins* in you
browser(s).

Christoph

--
email:
nurfuerspam -> gmx
de -> net

[kes]

My online bank accounts (different banks, different countries) require
the Java plugin to work. Remembering to disable and enable every time I
want to log in to them would a recurring annoyance. Not an option.

[Je...@nospam.fake]

[I am sorry to intrude on this thread but reading it got me to look at
my own Firefox 17.0.1 plugins. I am not sure if netiquette requires me
to start another thread or just ask here. I apologize if I am doing the
wrong thing.]

Finding that I too had the dangerous disabled java plugin, I ran javaRa
and then installed the latest java version.

But .....
I now have the following --2-- java related plugins:

Java Deployment Toolkit 7.0.90.5 10.9.2.5
(NPRuntime Script Plug-in Library for Java Deploy)

and a disabled

Java(TM) Platform SE 7 U9 10.9.2.5 (disabled)
(Next generation Java Plug-in 10.9.2 for Mozilla browsers)

I assume I goofed somewhere and do not need both plugins especially as I
do not write java apps. How do I get rid of the unnecessary one? There
is no option to "remove" a plugin.

Thank you.

Jeff

[Christoph Schmees]

you could set up a separate profile and adjust that accordingly.
That is how I do it: one profile /banking/ and one /default/ for
the rest. When I start FF I am asked which profile to use.

[rebro]

Am 11.12.2012 16:31, schrieb Je...@nospam.fake:
> On 12/10/2012 2:20 PM, Ron Hunter wrote:
>> On 12/10/2012 6:26 AM, kes wrote:
>>> I am running the latest FF (17.0.1) and the latest Java (1.7._10).
>>>
>>> However, when I check under FF plugins, I see "Java (TM) Platform SE 7
>>> U5 10.5.1.255", with the ominous warning "Java (TM) Platform SE 7 U5 ...
>>> is known to cause security or stability problems"
>>>
>>> I've tried re-installing Java, but the [old?] plugin persists. (As far
>>> as I am aware, this issue has been addressed in the latest version of
>>> Java.)
>>>
>>> Kes
>>>
>> Run the program Java Ra first.
>>
> [I am sorry to intrude on this thread but reading it got me to look at
> my own Firefox 17.0.1 plugins. I am not sure if netiquette requires me
> to start another thread or just ask here. I apologize if I am doing the
> wrong thing.]
>
> Finding that I too had the dangerous disabled java plugin, I ran javaRa
> and then installed the latest java version.
>
> But .....
> I now have the following --2-- java related plugins:
>
> Java Deployment Toolkit 7.0.90.5 10.9.2.5
> (NPRuntime Script Plug-in Library for Java Deploy)

= C:\Windows\system32\npDeployJava1.dll

>
> and a disabled
>
> Java(TM) Platform SE 7 U9 10.9.2.5 (disabled)
> (Next generation Java Plug-in 10.9.2 for Mozilla browsers)

= C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

> I assume I goofed somewhere and do not need both plugins especially as I
> do not write java apps. How do I get rid of the unnecessary one? There
> is no option to "remove" a plugin.
>

You can delete npjp2.dll
-rebro

[Ron Hunter]

Considering the security problems with Java, I wouldn't feel too
comfortable with a bank that needed you to use it for their website to
function. Javascript, yes, Java no.

[Beauregard T. Shagnasty]

Ron Hunter wrote:

> kes wrote:
>> Christoph Schmees wrote:
>>> Ron Hunter wrote:
>>>> [kes wrote:]

>>>>> Thanks Ron, I think the problem was re-installing the old version on
>>>>> top of the existing one. I uninstalled first, ran JavaRa, then did a
>>>>> fresh install. I have a more secure (ha ha!) Java plugin now. Until
>>>>> next time.
>>>>>
>>>> Until next exploit. I deleted Java a couple of months ago, and
>>>> haven't seen a need for it yet. YMMV.
>>>>
>>> well, there are cross-platform applications that require JRE. Bur you
>>> can still (and should) *disable the Java Plug-Ins* in you browser(s).
>>
>> My online bank accounts (different banks, different countries) require
>> the Java plugin to work. Remembering to disable and enable every time I
>> want to log in to them would a recurring annoyance. Not an option.
>
> Considering the security problems with Java, I wouldn't feel too
> comfortable with a bank that needed you to use it for their website to
> function. Javascript, yes, Java no.

I use two different online banking accounts. Neither uses Java. One of
them does not even need *JavaScript*. I don't even have Java installed on
this computer.

--
-bts
-This space for rent, but the price is high

[Je...@nospam.fake]

Thank you.
I searched for npjp2.dll on my pc and found 3 instances of it:

c:\Program Files\jre7\bin\plugin2\
c:\Program Files (x86)\Java\jre6\bin\plugin2\
c:\Program Files (x86)\Java\jre7\bin\plugin2\

Looks like javaRa did not remove the early versions (jre6).

I suppose I can delete all 3 npjp2.dll files but it seems uninstalling
the plugin and earl versions would be a better option. How do I do that
and then where do I re-install only the latest version plugin?

Thanks for helping.
Jeff

[rebro]

Two of the three instances belong to these notorious remnants of older
versions which finally lead to a situation in which each attempt to
update/install JRE is blocked.
To my knowledge simply deleting them will do. Though it would be
interesting to know if the older version of JavaRa (1.16)
<http://javara.en.malavida.com/> is able to remove them.

BTW the current version is JRE 7u10 from today on.
-rebro

[kes]

Actually, both in my case. It is their problem (the bank's) not mine. If
any online transaction is hacked into, they get to pay for the consequences.

[Ron Hunter]

But if they require a program that is known to be plagued by such
security issues, and they still use it, how careful are they about other
security measures?

[kes]

Ron, when was the last time you turned up at your bank and asked to see
their physical security measures - locks, safes, alarms, etc? Me, never
:-). I let them worry about it - it is their business.

[Je...@nospam.fake]

Thank you.
Will play around and see.

[Je...@nospam.fake]

Thanks. I needed to run javaRa in administrator mode for it to work.
It got rid of all jre except jre 6 where it stops with

Error 1723: There is a problem with this Windows installer package. A
DLL required for this install to complete could not be run.

What else to do to get rid of JRE 6?

[Je...@nospam.fake]

On 12/12/2012 1:48 PM, Je...@nospam.fake wrote:
> Error 1723
solved:

There actually is no jre6 folder anymore on my PC. Only jre7.
I must have deleted or uninstalled jre6 in the past.

JavaRa and/or the windows installer thinks jre6 is still there and tries
to uninstall it and of course cannot do so because it is not there to
uninstall.

(Found the solution on the web).

[Thai Guy]

Arrgh! I used Rebro and got rid of Java entirely - every version on my
machine. I rebooted, and install JRE7U10 (as you say above). When I
started FF and went to the plugin checker the very first thing I saw was
"Missing Java?"

No flavor of Java was showing anywhere in my plugins, nor was it seen in
the Programs and Features list. It DID install, but apparently my
system (and FF) don't know about it.

My attempt to fall back to 7U9 is now telling me that both Toolkit and
Runtime are "out of date" and I need the latest version.

What the heck?

[rebro]

Are there possibly still remnants of jre6 in
<C:\Users\[user]\AppData\LocalLow\Sun\Java>?
-rebro

[rebro]

Did the jre7u10 installation "successfully" finish and did the wizard
explicitly say so?

> When I started FF and went to the plugin checker the very first thing I saw was
> "Missing Java?"
>
> No flavor of Java was showing anywhere in my plugins, nor was it seen in
> the Programs and Features list. It DID install, but apparently my
> system (and FF) don't know about it.

I doubt that this was a clean install, e.g. is there a
<C:\Users\[user]\AppData\LocalLow\Sun\Java\jre1.7.0_10> entry (I refer
to a 32bit OS) on your machine? And, of course, jre7u10 should be listed
in the Programs and Features list after a successful install.

>
> My attempt to fall back to 7U9 is now telling me that both Toolkit and
> Runtime are "out of date" and I need the latest version.
>
> What the heck?

In your case I'd clean up (i.e. remove previous versions) as carefully
as possible: For instance I'd use the Revo uninstaller as long as there
is still any JRE entry in the Programs and Features list before I
applied JavaRa. If necessary I'd additionally check the registry for Sun
Java / JRE leftovers.
Installing jre7u10 anew I'd patiently wait till the wizard tells me that
the installation was successfully finished.
Good luck.
-rebro

[Thai Guy]

Yes

>
>
>> When I started FF and went to the plugin checker the very first
>> thing I saw was "Missing Java?"
>>
>> No flavor of Java was showing anywhere in my plugins, nor was it
>> seen in the Programs and Features list. It DID install, but
>> apparently my system (and FF) don't know about it.
>
> I doubt that this was a clean install, e.g. is there a
> <C:\Users\[user]\AppData\LocalLow\Sun\Java\jre1.7.0_10> entry (I
> refer to a 32bit OS) on your machine? And, of course, jre7u10 should
> be listed in the Programs and Features list after a successful
> install.
>

yes. There is a jre directory for both 9 and 10 in AppData & Programs
and Features.

>>
>> My attempt to fall back to 7U9 is now telling me that both Toolkit
>> and Runtime are "out of date" and I need the latest version.
>>
>> What the heck?
>
> In your case I'd clean up (i.e. remove previous versions) as
> carefully as possible: For instance I'd use the Revo uninstaller as
> long as there is still any JRE entry in the Programs and Features
> list before I applied JavaRa. If necessary I'd additionally check the
> registry for Sun Java / JRE leftovers. Installing jre7u10 anew I'd
> patiently wait till the wizard tells me that the installation was
> successfully finished. Good luck. -rebro
>
>

I have, once again, used JavaRa and killed every stupid version of Java
I could find. I even had Revo Uninstaller take a look. NOTHING was left
of Java anywhere.

The re-install (of 9) went to full completion and the wizard said so.
FF again tells me that my Java install is "Outdated".

I am NOT going to go through this yet again. If Java wants up update,
it can jolly well do it itself!

[Dave Pyles]

I think there is something not working correctly with the update
checking wizard. I'm getting the same thing and other people are as well.

Dave Pyles

[Thai Guy]

I hope it gets fixed sometime soon.

[Chris Ilias]

> I hope it gets fixed sometime soon.

If you're having issues with Java, it's best to tell them about it.
<http://bugreport.sun.com/bugreport/main.jsp>

--
Chris Ilias <http://ilias.ca>
Mailing list/Newsgroup moderator

[Je...@nospam.fake]

Yes there were. I thought they had finally fixed the problem of leaving
old versions behind. Guess not.

[Je...@nospam.fake]

On 12/12/2012 4:46 PM, Thai Guy wrote:

I know exactly how you feel!

[Thai Guy]

Chris Ilias wrote, On 12/12/2012 18:01:
> On 12-12-12 5:37 PM, Thai Guy wrote:
>> Dave Pyles wrote, On 12/12/2012 16:57:
>>
>>> I think there is something not working correctly with the update
>>> checking wizard. I'm getting the same thing and other people are
>>> as well.
>>
>> I hope it gets fixed sometime soon.
>
> If you're having issues with Java, it's best to tell them about it.
> <http://bugreport.sun.com/bugreport/main.jsp>
>

Been there, done that, got no responses

[Dave Pyles]

On 12/12/2012 6:01 PM, Chris Ilias wrote:
> On 12-12-12 5:37 PM, Thai Guy wrote:
>> Dave Pyles wrote, On 12/12/2012 16:57:
>>
>>> I think there is something not working correctly with the update
>>> checking wizard. I'm getting the same thing and other people are as
>>> well.
>>
>> I hope it gets fixed sometime soon.
>
> If you're having issues with Java, it's best to tell them about it.
> <http://bugreport.sun.com/bugreport/main.jsp>
>

I think the issue is with the plugin check wizard at
https://www.mozilla.org/en-US/plugincheck/

I can update Java and get the version that I should be getting, but the
plugin checker says it's out dated.

Dave Pyles

[goodwin]

On 12/12/2012 03:01 PM, Chris Ilias wrote:

> If you're having issues with Java, it's best to tell them about it.
> <http://bugreport.sun.com/bugreport/main.jsp>

most of us here can figure out how to file a bug - your response is
non-constructive.

And the devs should know by now since it seems a wide variety of users
have the same issue, including myself in linux.

Seems Oracle has a new vers 10 which they have hidden for some reason
(their main page, the one FF sends you to, still has 7.9 as latest).

And the new vers 10 doesn't work either.

[Thai Guy]

This I can verify. Version 10 simply seems to install, and then quietly
disappears.

[goodwin]

It has the same plugin that 7.9 had - no change.

So it seems to be the blind leading the blind here...

[Chris Ilias]

If anyone viewed my post as non-constructive, then let me explain. :)

Posting "I hope it gets fixed sometime soon" about a problem with the
Java update system is not user-support, nor is it about Firefox. It
doesn't belong here. Thai Guy was stating what he wanted, so I was
pointing him to where his message belongs and has the best chance of
accomplishing what he wants (i.e. Oracle fixing the bug).

[goodwin]

I was unaware of anyone pointing at Oracle as the source - Thai Gut
never said so. I did find that their ver 7.10, not for public
consumption, had the same plugin file as 7.9 did so that route was a
dead end.
The problem lays on Firefox/mozilla. And, yes, bugzilla might be a
useful venue for some things but in this case, where FF can't recognize
the version correctly, I'd view that as a major flaw, not a bug to be
discussed ad nauseum.

[rebro]

So the whole mess should have been tidied up now as a prerequisite for a
clean install.

> The re-install (of 9) went to full completion and the wizard said so. FF
> again tells me that my Java install is "Outdated".

Which is actually the case with jre7u9 (Having installed jre7u10 I am
told by FF 17.0.1 that my plugins are up to date).

> I am NOT going to go through this yet again. If Java wants up update,
> it can jolly well do it itself!

Don't despair. From now on every update should run according to the book
if you follow the steps suggested by JavaRa 2.0: (a) uninstall the
existing version, (b) run JavaRa *as administrator*, (c) make an
offline-install of the current version.
Good Luck again.
-rebro

[Thai Guy]

Sound thinking, but, my "hope it gets fixed sometime soon" was in
response to Dave's supposition that it was Mozilla's plug-in checker
that is in error. I happen to agree with that. But, this particular
thread branch is entirely OT now.

[Christian Riechers]

On 12/13/2012 12:01 AM, Chris Ilias wrote:
> On 12-12-12 5:37 PM, Thai Guy wrote:
>> Dave Pyles wrote, On 12/12/2012 16:57:
>>
>>> I think there is something not working correctly with the update
>>> checking wizard. I'm getting the same thing and other people are as
>>> well.
>>
>> I hope it gets fixed sometime soon.
>
> If you're having issues with Java, it's best to tell them about it.
> <http://bugreport.sun.com/bugreport/main.jsp>

The problem is not with Oracle or Java. It's FF 17.0.1 which flags Java
7 U10 as outdated.
"For your safety, Firefox has disabled your outdated version of Java.
Please upgrade to the latest version."
With FF on Windows the Java plugin doesn't even show up in the list of
installed plugins for me.
With FF on Linux the same "Firefox has disabled ..." message is shown on
the plugin check page. However, the Java plugin is visible in the list
of plugins and can be enabled. Once enabled, FF shows it as up to date.
Java 7 U9 did work just fine on both, Windows and Linux.

--
Christian

[Chris Ilias]

Okay, it looks like there's some confusion here about what Firefox does.
I'll try to clarify:

* The plugin checker does not update your plugins. It just reads what
plugins your browser (any browser) is reporting to have and cross-checks
that with a database of latest versions for each plugin. From there, it
links you to the website where the plugin is offered. Those websites are
third-party websites, not part of Mozilla. If one of those websites is
in error, Mozilla cannot correct their websites.

* Java has it's own updater in the Windows Control panel. That is not
part of Firefox either.

* Oracle released Java 7u10, The Oracle.com page said Java 7u10, but the
main page on java.com for some reason still said Java 7u9. Their "Other
Versions" page also said 7u10.

@goodwin, I pointed him to the Java "Report an issue" page, not bugzilla. ;)

Finally, this really isn't the place to voice opinions about
development. That's what the "Submit Feedback" item in the Help menu is
for.

[responder]

You bet....same here..

XP SP3 x86...My Java goes away and I don't even get the out of date message.

Then I have to download the version again and reinstall, and I had no
success with 17.0.1 so I'm running very well on 16.0.2. My Java problem
doesn't happen because I change the version or anything else with
Firefox. It does its own thing.

[goodwin]

I took down jre-7u10-linux-i586.tar.gz from the Oracle site (using
linux.) The plugin file libjavaplugin_oji.so appears to be the exact
file that was packed in vers 7u9, right down to the clock time at
creation. What details do your .so show?
Mine is 145,304k from 11/28/12@4:51.

Firefox ignores it. Over at bugzilla, the reports seem to be piling up.

[David H. Lipman]

>
> V7 update 10 is a develepor's review and not a "released" version.
>
> The latest Oracle JRE is v7 update 9.
>

Not anymore.

JRE V7 update 10 has been released.
{ as well as v6 update 38 }

--
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp

[Christian Riechers]

I installed the RPM package from Oracle. libjavaplugin_oji.so is 145304
bytes here too from Nov 28@13:51. It's not 145304k though.
I haven't checked the size of the file for Java 7u9.

> Firefox ignores it. Over at bugzilla, the reports seem to be piling up.

I've added a comment for
https://bugzilla.mozilla.org/show_bug.cgi?id=820893

--
Christian