293 replies to this topic

[ViroMan]

I don't see how anyone could think to blame us for providing the latest patch and they still get hacked.

[Whatacrock]

Well it is up to the user which updates he or she want to install....it's not like we are holding a gun to their heads to force them to install.

Shows the importance of using an up to date internet security/antivirus and even an antimalware package!!

Edited by Whatacrock, 19 January 2013 - 11:54 AM.

[DesertJerry]

Obviously what I was trying to get at was lost in translation.

I would say many people are not aware of the Java security issues and I was trying to say a security warning of some kind could be added to the Java downloads.

The Available Releases > Java *** (x**) - possible securty issue, download at own risk.

[ViroMan]

I think we understand DJ. I wouldn't put that in the java name itself but, we can put it in the description. The name can say like "Java JRE 7r11 (See Note)"

[_def_x_]

ViroMan, on 20 January 2013 - 02:28 AM, said:

I think we understand DJ. I wouldn't put that in the java name itself but, we can put it in the description. The name can say like "Java JRE 7r11 (See Note)"

This is esentially what's happening in Firefox Plugins, a big warning of the security risk with Java(JRE) and a link for more information. I would hope the rest of the browser world is doing something similar.

Honestly, anyone surfing the inter-webs and using JAVA should already know of the risks. Malware and AV tools have beem addressing it for years, browser dev teams as well. Microsoft, Sun, and Oracle have all put out notices many times over the years, tech realated forums too. If a user is unaware of the risks with JAVA they have their head in the sand at this point.

I'm not saying that a mention of it here is unneeded, I'm saying if there's anyone left out there that doesn't know has been been ignoring the numerous warnings regarding JAVA already, they will probably ignore this one too.

[ViroMan]

Well we are going to put out the latest java updates soon... today or tomorrow along with new versions of ap and apup. Had to hold on to the java updates since... well the detections fail on win7 now. Had to switch them to file detections and there just wasn't a way to detect the x64 java install until an update to AP was done.

Edited by ViroMan, 23 January 2013 - 07:13 PM.

[Whatacrock]

Since the latest version of APUP and Autopatcher are now released would be a good idea to sign and move the Java releases to the main page..

[ViroMan]

ffffffFFFFFF. I forgot about it. ok doing it.

Signed and moved to main list. Only those who have APUP 1.4.5 can see it since that would mean they also have the newer AP(1.7.5) which you NEED to have if you have an x64 OS otherwise it won't detect the x64 path correctly.

Edited by ViroMan, 31 January 2013 - 12:28 AM.

[Black Ghost]

Odd. When I go and run auto patcher it is showing me the 64 bit version of java 7 update 11. I want back to check to make sure I did not check 64 bit. The 32 bit is checked. Just odd.

[ViroMan]

I may not understand what your saying right but, you installed Java x86 and it says you have java x64 installed?

The Java x64 detection works based off of looking for c:\Program Files(or where ever that dir is according to windows registry) If you look into the javajre_x64.apm you will see this

FilePath=progfilesx64:\Java\jre7\bin

progfilesx64 means return only the x64 OS version of Program Files. It shouldn't return the x86 version. I will check the code one more time though to make sure.

edit: awww crap. it does. I must have left that in before I sent it out. I was sure I fixed that before sending it out. Ohh well. Its not a game breaker. I will add it to the list of fixes before it gets officially done.

Edited by ViroMan, 31 January 2013 - 09:43 PM.

[Black Ghost]

No. I download the 32 bit version and when I run autopatcher and it shows the 64 bit version in black. Odd cause the OS is 32 bit Windows 7. It should just show the 32 bit and not the 64 if your running 32 right? Just read the rest of the post so will wait for update.

Edited by Black Ghost, 01 February 2013 - 04:11 PM.

[_def_x_]

Right now there's no target OS so Java shows up and will attempt to install (if selected) on any OS. I guess Java(x86) installs on (x86) and (x64) OSes, but does Java(x64) install on an (x86) OS...?

[DesertJerry]

_def_x_, on 01 February 2013 - 04:45 PM, said:

Right now there's no target OS so Java shows up and will attempt to install (if selected) on any OS. I guess Java(x86) installs on (x86) and (x64) OSes, but does Java(x64) install on an (x86) OS...?

No - I just tried the x64 version on XP Pro w/SP3 - get error message of it not being a valid 32bit program

[_def_x_]

DesertJerry, on 01 February 2013 - 10:21 PM, said:

No - I just tried the x64 version on XP Pro w/SP3 - get error message of it not being a valid 32bit program

Then Java (x64) should be restricted to (x64) OSes only, mostly to keep people from being annoyed - IMO.

[Whatacrock]

A notice has been dispatched in regards to the missing section in the apms...it should be rectified in the near future..

Sorry people it appears I am the culprit for the blunder....

For those who wish to edit the apm themselves

[OperatingSystem]
WindowsVersion=XP_X64,2K3_X64,VISTA_X64,LHSERVER_X64,SEVEN_X64
SystemLanguage=ANY

[OperatingSystem]
WindowsVersion=XP_X86,2K3_X86,VISTA_X86,LHSERVER_X86,SEVEN_X86
SystemLanguage=ANY

Insert this before the [Installation] section near the end of the apm in the appropriate apm..

Edited by Whatacrock, 01 February 2013 - 11:39 PM.

[_def_x_]

Java (x86)

Spoiler

[AutoPatcher 5.6 Module]

[General]
Title=Java RE 7 Update 11 (x86) (Read note)
Description=Java is a critical part of today's web browsing experience. ** WARNING ** Java is currently experiencing a serious security problem. Use java at your own risk.
Author=Oracle
ModuleAuthor=ViroMan / Whatacrock (edit)
WebPage=http://www.oracle.com/technetwork/java/index.html
ReleaseDate=20130113

[Behavior]
ParentID=WINDOWS_ADDONS_PARENT
UniqueID=JAVA_7_11_X86
Critical=False
Recommended=True
AutoExpand=False
TimeToInstall=60
TimeToRemove=60
RequiresReboot=False
ModuleFolder=Java_Files

[DetectionRegistry]
RegistryPath=HKLM\SOFTWARE\JavaSoft\Java Runtime Environment
KeyName=Java7FamilyVersion
KeyValue=1.7.0_11

[DetectionFile]
FilePath=progfiles:\Java\jre7\bin
FileName=java.exe
FileVersion=7.0.110.21
FileMD5=87AC3175FA9C5FD5BAD55654C4E381F8

[OperatingSystem]
WindowsVersion=XP_X86,2K3_X86,VISTA_X86,LHSERVER_X86,SEVEN_X86
SystemLanguage=ANY

[Installation]
"Module:\jre-7u11-windows-i586.exe" /s /v "/qn REBOOT=Suppress"

[Removal]
"Module:\jre-7u11-windows-i586.exe" /s /v "/qn REBOOT=Suppress" /x

Java (x64)

Spoiler

[AutoPatcher 5.6 Module]

[General]
Title=Java RE 7 Update 11 (x64) (Read note)
Description=Java is a critical part of today's web browsing experience. ** WARNING ** Java is currently experiencing a serious security problem. Use java at your own risk.
Author=Oracle
ModuleAuthor=ViroMan / Whatacrock(edit)
WebPage=http://www.oracle.com/technetwork/java/index.html
ReleaseDate=20130113

[Behavior]
ParentID=WINDOWS_ADDONS_PARENT
UniqueID=JAVA_7_11_X64
Critical=False
Recommended=True
AutoExpand=False
TimeToInstall=60
TimeToRemove=60
RequiresReboot=False
ModuleFolder=Java_files

[DetectionRegistry]
RegistryPath=HKLM\SOFTWARE\Wow6432Node\JavaSoft\Java Runtime Environment
KeyName=Java7FamilyVersion
KeyValue=1.7.0_11

[DetectionFile]
FilePath=progfilesx64:\Java\jre7\bin
FileName=java.exe
FileVersion=7.0.110.21
FileMD5=95EF52E273B26FD3603B56BDCC43EEB8

[OperatingSystem]
WindowsVersion=XP_X64,2K3_X64,VISTA_X64,LHSERVER_X64,SEVEN_X64
SystemLanguage=ANY

[Installation]
"Module:\jre-7u11-windows-x64.exe" /s /v "/qn REBOOT=Suppress"

[Removal]
"Module:\jre-7u11-windows-x64.exe" /s /v "/qn REBOOT=Suppress" /x

[Whatacrock]

Thanks _def_x_ for the spoilers..

[click-click]

Java SE 7 Update 13 Released

[Whatacrock]

Thanks for the heads up click-click... will update and forward up the chain of command

[Whatacrock]

Java 7 Update 13 x86 and x64 now updated and on main list..