Hi,
the security issues with Java 1.7 also apply to the 1.6 series [0,1].
Fixes of three critical vulnerabilities in 1.7.0_7 and 1.6.0_35 at least
stop publicly available exploits, but sill contain several other holes [2].
Still afaik Java 1.7.x is (a bit) more secure than 1.6.x [0].
Oliver
[0]
http://www.h-online.com/security/news/item/Java-0Day-Turn-off-Java-applets-now-1678618.html
[1]
http://www.h-online.com/open/news/item/Oracle-releases-emergency-fixes-for-Java-0day-Update-1696132.html
[2]
http://www.h-online.com/security/news/item/Latest-Java-sandbox-is-still-vulnerable-1697550.html
On Sat, Sep 1, 2012 at 7:24 PM, Philip Bays <[email protected]> wrote:
> There have been security issues with the Oracle release of Java 1.7.
> General advice has been not to use it.
>
> On my own page I am using Jmol 12.0.43 which I understand is old. I
> access it from a MacBook Pro running OS 10.7.4 and Safari 6.0 or Firefox
> 15.0. Applae Java release 1.6.0_33. Have no problems.
>
> Phil Bays
>
>
> On Sep 1, 2012, at 9:02 PM, Eric Martz wrote:
>
> I erased (re-formatted) the (new, 0.7 terabyte) internal disk in my main
> workstation (2007 Intel MacBook Pro) and did a clean install of Snow
> Leopard 10.6 from a DVD shipped by Apple in the past week. That went
> smoothly. Migration Assistant copied nearly all of my apps, and their
> licensed status, all my files, etc. automatically from a bootable backup of
> my old Leopard (10.5) system.
>
> Afterwards, I had OS 10.6.3 and Java 1.6.0_17 and Jmol applet worked in
> both Safari and Firefox.
>
> I then did the Apple Software Updates, which included "update 9" to Java.
> After that, I have OS 10.6.8 and Java 1.6.0_33. Jmol still works in Firefox
> but NO LONGER IN SAFARI (now version 5.0.5)! Java fails to start, and the
> applet area remains blank white (no Jmol frank). There is nothing in
> Safari's Error Console. This failure occurs with Proteopedia (Jmol
> 13.0.1) and FirstGlance (Jmol 12.2.30).
>
> In Safari, Preferences, Security, both Java and Javascript are enabled. In
> Safari, Help, Installed Plug-Ins is listed "Java Applet Plug-in" with a
> long list of MIME types.
>
> The Jmol.jar Application works.
>
> Firefox has generally been flaky with Jmol. For example, as I reported
> months ago before my OS upgrade, the Jmol menus don't work in Firefox!
> Safari has been solid, so that is where I did most of my work. I
> uninstalled Chrome because its frequent checks for updates fool my outgoing
> firewall (Little Snitch) into asking for permission every single time
> (despite giving it permanent permission over and over) -- it got too
> annoying.
>
> Henry Rzepa, do you recommend that I go to Java 1.7?
>
> Thanks for any insights anyone can offer.
> Eric
> ------------------------------------------------------------------------------
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and
> threat landscape has changed and how IT managers can respond. Discussions
> will include endpoint security, mobile security and the latest in malware
> threats.
> http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/_______________________________________________
> Jmol-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/jmol-users
>
>
> J. Philip Bays
> Emeritus Professor of Chemistry
> Department of Chemistry and Physics
> Saint Mary's College
> Notre Dame, IN 46556
> [email protected]
>
>
> Jmol-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/jmol-users
>
>
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Jmol-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jmol-users
