Home > Java, Mac administration, XProtect > XProtect updated – now blocking Java browser plug-in versions prior to June 2013 Java updates

XProtect updated – now blocking Java browser plug-in versions prior to June 2013 Java updates

Apple put out two advisories on August 29th about Java:

Java updates available for OS X on August 28, 2013

OS X: Java Web plug-in blocked 28 August 2013

The latter advisory is especially noteworthy to Mac admins, as that means that Apple’s XProtect was updated to block older versions of Java. That said, XProtect was not updated after the latest round of updates in June 2013, so those versions were not previously set in /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta.plist as the minimum allowed versions. See below the jump for more details.

With the August 29th update, the following versions of the Java browser plug-in are now set as the minimum allowed versions:

For 10.6.x:

com.apple.java.JavaAppletPlugin13.9.7

com.apple.java.JavaPlugin2_NPAPI13.9.7

Click on the image below for comparisons of /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta.plist from before and after the August 29 XProtect update.

Screen Shot 2013-08-29 at 6.14.48 AM

For 10.7.x – 10.8.x

com.apple.java.JavaAppletPlugin14.8.0

com.apple.java.JavaPlugin2_NPAPI14.8.0

com.oracle.java.JavaAppletPlugin1.7.25.15

 

Click on the image below for comparisons of /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta.plist from before and after the August 29 XProtect update.

Screen Shot 2013-08-29 at 6.19.40 AM

These version numbers correspond to the following Java updates:

Java For Mac OSX 10.6 Update 1613.9.7

Java for OS X 2013-00414.8.0

Java 7 Update 251.7.25.15

If you’ve installed the Java updates above, you should be good. If you haven’t, install the latest Java updates and your Java browser plug-in should no longer be blocked by XProtect.

  1. Ramuntcho
    September 3, 2013 at 7:38 am

    Hello,

    It’s strange because in our macs in classrooms in 10.8, using your xprotect_re-enable_java_6_and_7.sh, we have java blocked (we use update 21). When we examine the XProtect.meta.plist, it’s version 2039 but in the field for MinimumPlugInBundeVersion, there is 1.7.21 and not 1.7.25. Or java 7 update 21 is installed, so i don’t understand why it’s blocked. An idea ?

    And second question, does your script will function now, after the upgrade to 25, or no more ?

    Thanks in advance

  2. ramuntcho
    September 10, 2013 at 7:59 am

    Hello,

    Thanks for the answer and sorry for the delay. We used also in our macs your additional scripts for Safari. But i think that the problem is different, because the java applets are blocked also in Firefox, not only in Safari. And in the XProtect.meta.plist, it’s version 2039 but in the field for MinimumPlugInBundeVersion, there is 1.7.21. So everything should be fine, your script seems to work, because we have Java 7 update 21 installed. But java applets are blocked.

    :-(( Christian

  1. No trackbacks yet.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

Follow

Get every new post delivered to your Inbox.

Join 159 other followers

%d bloggers like this: