Oracle has released Version 7 Update 13 build 1.7.0_13-b20 that addresses the security concerns outlined in this Apple KB: http://support.apple.com/kb/HT5647
The Oracle Java update can be downloaded here: http://java.com/en/download/mac_download.jsp?locale=en
Users who have been unable to access Juniper VPN and other web-based Java apps from Mac clients should download and install the patch, this should restore functionality.
Showing posts with label Oracle Java. Show all posts
Showing posts with label Oracle Java. Show all posts
Saturday, February 2, 2013
Friday, February 1, 2013
Safari Blocking Oracle 7.11.21 Plug-in: Can't Connect to Juniper VPN
The war between Apple and Java continues. Apple is blocking the latest Java saying that it is susceptible to malware.
We have received several reports that Mountain Lion clients are unable to contact the Juniper VPN launch page. The users are presented with an error that says "Blocked Plug-in":

They may also be prompted that Java is out of date and that they should download Java:
They are then redirected to the Oracle download page. Even after they download the latest Java, they will still see the "Blocked Plug-in" error. The cause of this error appears to be Apple's anti-malware protection.
The only work-around we have found is to do the following:
Go to /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/
Type "sudo pico XProtect.meta.plist"
Look for the line "MinimumPlugInBundleVersion"
Note that the version is set to 1.7.11.22 but the latest version of Oracle Java is 1.7.11.21. This prevents the browser from loading the current Oracle Java because it says the minimum version is .22 but the latest is currently .21
It is possible to edit the "MinimumPlugInBundleVersion" and change the minimum value to 1.7.11.21:

After making the change, save the file, restart Safari and go to the VPN page- you should be able to log in.
Not only is this affecting Juniper VPN but several of our other web-based Java apps.
We have received several reports that Mountain Lion clients are unable to contact the Juniper VPN launch page. The users are presented with an error that says "Blocked Plug-in":

They may also be prompted that Java is out of date and that they should download Java:
They are then redirected to the Oracle download page. Even after they download the latest Java, they will still see the "Blocked Plug-in" error. The cause of this error appears to be Apple's anti-malware protection.
The only work-around we have found is to do the following:
Go to /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/
Type "sudo pico XProtect.meta.plist"
Look for the line "
Note that the version is set to 1.7.11.22 but the latest version of Oracle Java is 1.7.11.21. This prevents the browser from loading the current Oracle Java because it says the minimum version is .22 but the latest is currently .21
It is possible to edit the "

After making the change, save the file, restart Safari and go to the VPN page- you should be able to log in.
Not only is this affecting Juniper VPN but several of our other web-based Java apps.
Subscribe to:
Posts (Atom)