When the system has the latest 6u45 installed and it is an secure version based on the information from the existing dynamic baseline.versions, one installs the JavaFX runtime 2.2.25 and as such, jre 6u45 becomes an insecure version
*** Tested Configuration:
- x86 Vistda, x86 Win 7
- IE 8, FF 20.x, GC 26.x
- jre 6u45, JavaFX runtime 2.2.25
*** Step to reproduce:
0) Uninstall all JREs from the test system
1) Install latest released 6ux (jre 6u45)
3 Invoke any applet to make sure it loads and jre 6u45 treated as a secure jre version
4) Install JavaFX runtime 2.2.25-b10 from:
http://jre.us.oracle.com/java/re/javafx/2.2.25/promoted/fcs/b10/bundles/windows-i586/javafx-2_2_25-fcs-b10-windows-i586-06_may_2013.exe
5) If the baseline.versions does not exist on the system, run javaws -SSVBaselineUpdate
to generate the dynamic baseline which should indicate 6u45 as the secure version of 6ux family
6) Use any browser to invoke any applet.
If you see the dialog about 6u45 is insecure version and an update needed, the issue is reproducible
*** Tested Configuration:
- x86 Vistda, x86 Win 7
- IE 8, FF 20.x, GC 26.x
- jre 6u45, JavaFX runtime 2.2.25
*** Step to reproduce:
0) Uninstall all JREs from the test system
1) Install latest released 6ux (jre 6u45)
3 Invoke any applet to make sure it loads and jre 6u45 treated as a secure jre version
4) Install JavaFX runtime 2.2.25-b10 from:
http://jre.us.oracle.com/java/re/javafx/2.2.25/promoted/fcs/b10/bundles/windows-i586/javafx-2_2_25-fcs-b10-windows-i586-06_may_2013.exe
5) If the baseline.versions does not exist on the system, run javaws -SSVBaselineUpdate
to generate the dynamic baseline which should indicate 6u45 as the secure version of 6ux family
6) Use any browser to invoke any applet.
If you see the dialog about 6u45 is insecure version and an update needed, the issue is reproducible