Dire warnings about new JAVA vulnerability

[MiKl]

I was also able to install .41 but I am not sure if it is really working !! There are several websites to check Java but I usually go here:

http://www.chemgapedia.de/vsengine/info/de/help/requirements/java.html

There should be anything displayed. Either a Java logo with a rotating effect or, if Java 3D is also installed, a rotating cube.

I see the cube when checking Java on my XP.

Can anything be done to fix this ? Flash and Shockwave are working.

UPDATE: Deleting the next-generation plug-in from the plug-in folder made it work !! I see the cube again

Edited February 21, 2013 by MiKl

[schwups]

I was also able to install .41 but I am not sure if it is really working !! There are several websites to check Java but I usually go here:

http://www.chemgaped...ments/java.html

There should be anything displayed. Either a Java logo with a rotating effect or, if Java 3D is also installed, a rotating cube.

I see the cube when checking Java on my XP.

Can anything be done to fix this ? Flash and Shockwave are working.

Some month ago I also had checked on this website. I seem to remember me, that the test had failed, if both JRE Java 6.xx and Java 3D are installed. Maybe old Java 3D of 2003 isn't compatible with new JRE Java 6 anymore.

Edited February 21, 2013 by schwups

[jds]

The version number of my msiexec is the same and MD5 (MD5Checker9x) is different. 

6A20A72677196CC87E75681524E03773  msiexec.exe, Size 83,456; DATE Modified 26.Jan.2002

Java39:

606AAC2B60CF3E37BAEBD8A744CF300C  jre1.6.0_39.msi; Size: 905,728; Date: 4.Feb.2013

Cab: 4CE133F19D40787A5548A6AFCF15541E  Data1.cab; 13,211,806; 

I think you cleaned your registry, especially the JavaSoft Keys. Make sure that the updater and the Quickstarter is disabled. Your current KernelEX setting in the Core.ini is 0 (DCFG1)? What is listed in the Kstub822.log (stubs.log)?  

Version 41 just installed successfully, too.

Hi schwups,

Thank you for that information, it's a great help in tracking down this problem.

Our CAB and MSI files are the same, so the extraction is OK and I can rule that out. The 'msiexec.exe' file is a mystery. Mine has the same time stamp, version string and file size, yet clearly they are different. This might be the key. Note that I haven't yet managed to find your version, but I've got a number of archives to look through.

Following your suggestion, I've deleted anything Java related from the registry and the applicable drive directories. But no luck yet.

Did you verify "[Kernel32.dll] GetSystemWow64DirectoryA=z2e120" with KTree? The function isn't contained in the Kstub822 (Kext first post). You have to add it.

 "Error 26011. Unpacking rt failed" is a a widespread problem, not only for ME/98 users. Today 300MB free disk space is very little. Maybe Oracle enlarged the required space?

link

Yes, I do have the 'GetSystemWow64DirectoryA' setting (I mentioned this at the outset).

I only mentioned the 300MB figure for drive C: for completeness. The relevant figure is 2G for drive E:. Also, I would have received an appropriate pop-up warning if disk space were to run low during the installation process. I have no doubts that the "low disk space" explanation given by Sun/Oracle is not applicable, just as it isn't for many others too, as your link makes clear. BTW, depending on the KernelEx compatibility setting for 'msiexec.exe', the error can be 1723 instead.

 "Error 26011. Unpacking rt failed" is a a widespread problem, not only for ME/98 users. Today 300MB free disk space is very little. Maybe Oracle enlarged the required space?

link

I used to have this problem a while back and could never find either the cause or a fix. Now it works again and I don't know why.

There was a workaround however and that was to install the corresponding JDK which installs the JRE as a subset of its installation and whose installer didn't suffer from this issue. Perhaps this still applies today. Worth a try anyway I guess.

Good idea, loblo. Unfortunately however, I get the same error with the JDK.

Joe.

[schwups]

I also found in the installer an information that you must have more than 32MB RAM. I'm sure you have more.

"PhysicalMemory>=32  This machine does not have the recommended amount of memory to install this product."

[jds]

The version number of my msiexec is the same and MD5 (MD5Checker9x) is different. 

6A20A72677196CC87E75681524E03773  msiexec.exe, Size 83,456; DATE Modified 26.Jan.2002

I also found in the installer an information that you must have more than 32MB RAM. I'm sure you have more.

"PhysicalMemory>=32  This machine does not have the recommended amount of memory to install this product."

Hi schwups, et. al.

Well, I still haven't found a version of 'msiexec.exe' with the same MD5 hash as you, although I have found two more files with the same timestamp and version number, yet a different MD5 hash. However, this too isn't the problem, as you'll see below.

I have 512M of RAM, so that's much more than the 32M minimum figure you quote (so little RAM would be a rarity these days).

Anyway, the only real progress I've made is that I've been able to install 6u39 without difficulty on a P4 machine. I also upgraded this to 6u41 successfully, albeit with some difficulties (6u39 didn't like being uninstalled). I've transplanted 'msiexec.exe' and associated DLL's from the P4 machine to the P3 machine, transplanted the whole KernelEx directory, compared the KernelEx compatibility settings for every file that seemed relevant, all to no avail. I still can't figure why 6u39 and 6u41 fail to install on the P3 machine. This thing is driving me crazy.

Joe.

[schwups]

Hello Joe,

I don't possess a P3 machine anymore. Currently I still have one with a 478 socket (P4) and all others have a 775 socket.

[jds]

Hello Joe,

I don't possess a P3 machine anymore. Currently I still have one with a 478 socket (P4) and all others have a 775 socket.

Hi schwups,

I don't know if the CPU is a factor. Earlier, I speculated that the installation package may use SSE2 instructions that the P3 doesn't have, however, Den reported that his AMD machine which also lacks SSE2 instructions was able to install 6u39, albeit under XP. So this probably means it's not the CPU that's the problem, although I don't know if there are more subtle CPU differences (unfortunately, a search of the web only reveals a lot of misinformation and ignorance about this).

Joe.

[egrabrych]

JRE Version 6 Update 43: http://java.com/en/download/manual_v6.jsp

[CharlotteTheHarlot]

Well that didn't last long ...

Important note from the Oracle-Sun website ...

"This is the last public release of Java 6. No new public updates of Java 6 will be available after February 2013."

So much for that announcement. That was supposedly the final version ever released for Java 6 ( JRE 6 release 41 ), but as noted by egrabrych, it was quickly superceded.

Just downloaded these files ...

jre-6u43-windows-i586.exe ... Webpage ... Direct Download ( for now )

jre-6u43-windows-x64.exe .... Webpage

jre-7u17-windows-i586.exe ... Webpage ... Direct Download ( for now )

jre-7u17-windows-x64.exe .... Webpage

Note: Correct me If I'm wrong but there does not seem to have been a jre-6u42.

Note: Correct me If I'm wrong but there does not seem to have been a jre-7u16.

EDIT: added x64 links

Edited March 7, 2013 by CharlotteTheHarlot

[jaclaz]

I am not sure to understand the issue about locating the files.

Go here:

http://www.oracle.com/technetwork/java/javase/downloads/jre6downloads-1902815.html

tick the "accept agreement" radio button, and you have all static links, namely:

Windows x86 Kernel 0.87 MB jre-6u43-windows-i586-iftw-k.exe http://download.oracle.com/otn-pub/java/jdk/6u43-b01/jre-6u43-windows-i586-iftw-k.exe

Windows x86 Online 0.87 MB jre-6u43-windows-i586-iftw.exe http://download.oracle.com/otn-pub/java/jdk/6u43-b01/jre-6u43-windows-i586-iftw.exe

Windows x86 Offline 16.24 MB jre-6u43-windows-i586.exe http://download.oracle.com/otn-pub/java/jdk/6u43-b01/jre-6u43-windows-i586.exe

Windows x64 16.48 MB jre-6u43-windows-x64.exe http://download.oracle.com/otn-pub/java/jdk/6u43-b01/jre-6u43-windows-x64.exe

Same goes here:

http://www.oracle.com/technetwork/java/javase/downloads/jre7-downloads-1880261.html

Windows x86 Online 0.86 MB jre-7u17-windows-i586-iftw.exe http://download.oracle.com/otn-pub/java/jdk/7u17-b02/jre-7u17-windows-i586-iftw.exe

Windows x86 Offline 30.06 MB jre-7u17-windows-i586.exe http://download.oracle.com/otn-pub/java/jdk/7u17-b02/jre-7u17-windows-i586.exe

Windows x86 39.77 MB jre-7u17-windows-i586.tar.gz http://download.oracle.com/otn-pub/java/jdk/7u17-b02/jre-7u17-windows-i586.tar.gz

Windows x64 31.47 MB jre-7u17-windows-x64.exe http://download.oracle.com/otn-pub/java/jdk/7u17-b02/jre-7u17-windows-x64.exe

Windows x64 41.49 MB jre-7u17-windows-x64.tar.gz http://download.oracle.com/otn-pub/java/jdk/7u17-b02/jre-7u17-windows-x64.tar.gz

jaclaz

[submix8c]

@jaclaz - I guess their point is that it can't be directly downloaded WITHOUT accepting the license agreement as you'll notice (when I use Flashget) you need a Referrer to be filled out or it just doesn't work. Using you link and the link within after accepting will fill the field in Flashget and allow the download otherwise the direct link is rejected due to "agreement not yet accepted". Just an oddity - not sure what effect that would have on (e.g.) WGET...

[CharlotteTheHarlot]

I am not sure to understand the issue about locating the files.

Go here:

Windows x64 16.48 MB jre-6u43-windows-x64.exe http://download.oracle.com/otn-pub/java/jdk/6u43-b01/jre-6u43-windows-x64.exe

Same goes here:

Windows x64 31.47 MB jre-7u17-windows-x64.exe http://download.oracle.com/otn-pub/java/jdk/7u17-b02/jre-7u17-windows-x64.exe

Do either of those URLs work for you? I had no luck with Opera, FF and MSIE as of this writing.

As I have written above ( in this thread ) they use browser/system sniffing, specifically rejecting 64-bit packages for 32-bit systems.

[submix8c]

I get THIS in FF with the DIRECT link -

http://download.oracle.com/errors/download-fail-1505220.html

IF I use the Download PAGE link given and ACCEPT the Agreement (after enabling Java) I get THIS as the URL (mistaken - NOT the Referrer field) the FlashGet (FlashGot Plugin) gives THIS and it DOES work (see the AuthParam at the end?) -

http://download.oracle.com/otn-pub/java/jdk/6u43-b01/jre-6u43-windows-x64.exe?AuthParam=1362500143_daf9f756f3b90ae8001637dfb9285b94

IOW, you MUST accept the Agreement to be Authorized. It has nothing to do with "browser sniffing".

edit - ARG!!! I take that back! FG is getting "403 Forbidden". Has to do it within the Browser (see the first link about Cookies). Just downloaded both Java6. Going for the Java7 now. Done! (sigh...) NOTE: in FF11 and an x86 OS (as I had previously said)...

Edited March 5, 2013 by submix8c

[jaclaz]

I see.

No, the License Agrrement *needs* to be "ticked", but there is no restrictions (at least here in Opera) for 32 vs. 64 bit.

BUT there is a whole bunch of "mirror" sites allowing direct download, examples:

http://freewareupdate.com/browsers-plugins/8683-download-java-runtime-environment

http://files2.freewareupdate.com/download/Browsers-Plugins/jre/jre-6u43-windows-i586.exe

http://files2.freewareupdate.com/download/Browsers-Plugins/jre/jre-6u43-windows-x64.exe

http://files2.freewareupdate.com/download/Browsers-Plugins/jre/jre-7u17-windows-i586.exe

http://files2.freewareupdate.com/download/Browsers-Plugins/jre/jre-7u17-windows-x64.exe

jaclaz

[CharlotteTheHarlot]

IOW, you MUST accept the Agreement to be Authorized. It has nothing to do with "browser sniffing".

What I believe they are doing is blocking 64-bit downloads on 32-bit systems. So it is some kind of sniffing resulting in ...

... which is a classic phony page. I tried in all three: MSIE, Opera and FF with cookies and Javascript and they are simply displaying a generic useless page full of lies like they all do. My guess is that they see 32-bit, but do not have an appropriate error message to display.

But I think you and I are talking about two different pages. The sniffing I refer to is done from the main Java page for current releases: Java 6 or Java 7. From there try clicking through the links ( "Information about the 64-bit Java plug-in" ) and follow the rabbit holes and you will most likely keep going in circles.

The Solution. If you want to download the 64-bit installers using a 32-bit browser just go here as Jaclaz posted ( and as I posted for the previous release ) ...

Java 6 u43 Webpage

Java 7 u17 Webpage