Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8124436

Installing JavaFX runtime makes the secure jre 6ux an insecure version

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Not an Issue
    • Icon: P3 P3
    • None
    • 7u25
    • deploy
    • None

      When the system has the latest 6u45 installed and it is an secure version based on the information from the existing dynamic baseline.versions, one installs the JavaFX runtime 2.2.25 and as such, jre 6u45 becomes an insecure version


      *** Tested Configuration:
      - x86 Vistda, x86 Win 7
      - IE 8, FF 20.x, GC 26.x
      - jre 6u45, JavaFX runtime 2.2.25

      *** Step to reproduce:
      0) Uninstall all JREs from the test system
      1) Install latest released 6ux (jre 6u45)
      3 Invoke any applet to make sure it loads and jre 6u45 treated as a secure jre version
      4) Install JavaFX runtime 2.2.25-b10 from:
      http://jre.us.oracle.com/java/re/javafx/2.2.25/promoted/fcs/b10/bundles/windows-i586/javafx-2_2_25-fcs-b10-windows-i586-06_may_2013.exe
      5) If the baseline.versions does not exist on the system, run javaws -SSVBaselineUpdate
      to generate the dynamic baseline which should indicate 6u45 as the secure version of 6ux family

      6) Use any browser to invoke any applet.

      If you see the dialog about 6u45 is insecure version and an update needed, the issue is reproducible

            ngthomas Thomas Ng (Inactive)
            hungnguy Hung Nguyen (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported: