Apple disabled Java 1.7.0_11, but the security issues are addressed in the latest release: 1.7.0_13. I have an Java applet I need to run and would like to get it working on Safari, if possible. It could be that the website I'm using to troubleshoot (Javatester.org) doesn't have a signing certificate, but I can't tell if that's the problem.
Apple barred Java from running on Macs, leaving companies that rely on Java plug-ins out in the cold.
Apple blocked Java 7 Update 11 by adding it to the banned list in XProtect.
This was the second time in two weeks that Apple has blocked Oracle's code from running on Macs. This time Java is blocked through Apple's XProtect anti-malware feature.
Java has come under fire as the means by which hackers have been able to gain control of computers. In April 2012 more than 600,000 Macs were reported to have been infected with a Flashback Trojan horse that was being installed on people's computers with the help of Java exploits. Then in August Macs were again at risk due to a flaw in Java, this time around, there was good news for Mac users: Thanks to changes Apple has made, most of us were safe from the threat.
Unwilling to leave its customers open to potential threats Apple decided it's safer to block Java entirely.
Macs running OS X Snow Leopard and beyond are affected.
UPDATE for those running Lion or Mountain Lion:
Oracle on Friday February 1 released a new version reportedly addressing vulnerabilities seen with the last build.
Apple disabled Java 7 through the OS X XProtect anti-malware system, requiring users to have at least version "1.7.0_10-b19" installed on their Macs. The release dated February 1 carries the designation "1.7.0_13-b20," meeting Apple's requirements.
Oracle "strongly recommends" applying the CPU fixes as soon as possible, saying that the latest Critical Patch Update contains 50 new security fixes across all Jave SE products.
Update for Snow Leopard users:
Apple have issued update 12 for Java for OS 10.6:
Note: On systems that have not already installed Java for Mac OS X 10.6 update 9 or later, this update will configure web browsers to not automatically run Java applets. Java applets may be re-enabled by clicking the region labeled "Inactive plug-in" on a web page. If no applets have been run for an extended period of time, the Java web plug-in will deactivate.
Thanks for the detailed background on the Java issues. I am aware of the story of why and when Apple blocked Java late last month. t was my understanding, and you confirm this in your post, that the latest version of Java (1.7.0_13), which was released on February 1, was acceptible. This is the version I have installed. I'm trying to figure out how to unblock the Java plug-in in Safari, which keeps prompting me to install the latest version, which I have--multiple times. Is there something additional I need to do in Safari to get it to recognized the version of Java installed?
Thanks in advance!
This is driving me nuts. I have "Java build 1.7.0_13-b20" installed on two different machines. Java works in Firefox on both. Java works fine in Safari on one but not on the other.
javatester.org says "missing plugin".
The one it works on is Mountain Lion, the one that doesn't is Lion (10.7.5).
Anymore ideas on where to look?
Thanks for letting me know it works on Mountain Lion. I have Lion (OS X 10.7.5). I'm on Java build 1.7.0_13-b20.
On my system in Safari, javatester.org says "Blocked Plug-in." On java.com/en/download/testjava.jsp it says: "An old version of Java has been detected on your system."
When I run the same check in Firefox, it says: "Congratulations! You have the recommended Java installed (Version 7 Update 13)."