Removing Old Version of JAVA?

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View



In dealing with the Antivirus 2008, David H. Lipman had suggested I
run the vulnerability Scan at
http://secunia.com/vulnerability_scanning/online to determine what
software has vulnerabilities and need to be updated/patched to
mitigate the exploitation of the vulnerabilities.

I ran the vulnerability scanning as he suggested and everything
checks out OK except JAVA applications.  The scan indicates that I
have 4 versions of JAVA on my system:

- Version 6.0.70.6 (the latest according to the JAVA web site and it
scans OK).
- Version 6.0.60.6 (recommends to remove via Add/Remove)
- Version 6.0.50.13 (recommends to remove)
- Version 6.0.30.5 (recommend to remove)

Before removing those via Add/Remove, I wanted to check with you all
on a couple of things.  Might there be programs on my system that
require the older versions to run -or- is the newest version
compatible with programs using previous versions.

I wonder why the JAVA update does not remove the older versions?

BTW, I'm running WinXP SP3 with all the latest updates.

Thanks for any thoughts/suggestions.

Charliec
******************************************************
Charliec

Re: Removing Old Version of JAVA?



Charliec wrote:

Quoted text here. Click to load it

"recommends to remove" is good advice.

I doubt if you have any need for the older, less secure, versions of
Java. What Java programs do you use anyway?  OpenOffice maybe? (It works
fine with the latest Java.)

Quoted text here. Click to load it

S'far as I know, it's always been that way, even though people have been
complaining for years. It is a developer error and gross oversight on
Sun's part. I've found the PCs of friends that had up to eight versions
or so, as I recall. Remove all but the newest.

You will find a separate directory under Program Files/java for each
version. Make sure the older ones are gone from there after you do your
Add/Remove removes.

--
   -bts
   -Friends don't let friends drive Windows

Re: Removing Old Version of JAVA?



On Thu, 11 Sep 2008 12:07:51 -0400, "Beauregard T. Shagnasty"

Quoted text here. Click to load it


I always uninstall a previous version of a program before installing the
latest version.
Most software does not include the uninstall of a previous version.

Why would you want Sun to be different?

--
Fred W. (NL)

Re: Removing Old Version of JAVA?




Quoted text here. Click to load it
Got it, Beauregard - will do!
******************************************************
Charliec

Re: Removing Old Version of JAVA?





Beauregard T. Shagnasty wrote:
[snip]
Quoted text here. Click to load it

Thanks. I used the JavaRa program on my Win2kPro system and it remove those
entries also.



Re: Removing Old Version of JAVA?



"Beauregard T. Shagnasty" wrote:

Quoted text here. Click to load it

It's not an error or oversight. As a one-time Java programmer I would
not want them automatically uninstalling previous versions. Even
Microsoft allow their various Visual Studio releases to co-exist side-
by-side. I've worked at a place where a specific older version of Java
was required for one application but for other development we were
using the latest version.

It's a similar situation to the redistributable runtime libraries that
MS provide. Certain apps depend on particular versions and the
binaries have different names rather than being in different
directories as with Sun.

I suppose one could make the argument for a Windows-friendly-applies-
to-average-users-Java-management-mechanism, but being of a Unix
background, I imagine Sun are used to providing software to people who
know what they're doing.



Re: Removing Old Version of JAVA?




| Charliec wrote:

Quoted text here. Click to load it



| "recommends to remove" is good advice.

| I doubt if you have any need for the older, less secure, versions of
| Java. What Java programs do you use anyway?  OpenOffice maybe? (It works
| fine with the latest Java.)

Quoted text here. Click to load it

| S'far as I know, it's always been that way, even though people have been
| complaining for years. It is a developer error and gross oversight on
| Sun's part. I've found the PCs of friends that had up to eight versions
| or so, as I recall. Remove all but the newest.

| You will find a separate directory under Program Files/java for each
| version. Make sure the older ones are gone from there after you do your
| Add/Remove removes.

| --
|    -bts
|    -Friends don't let friends drive Windows

Do NOT manually delete the remanent folders.

I had a similar query in m.p.s.v and I wrote...

You should also NOT manually delete remnant folders if you remove older versions
of Sun
Java from the the Control Panel applet "Add/Remove Programs".  Such software
such as Apple
Quicktime will drop a Java Jar in the folder and set an environemntal variable
pointing to
said Java Jar in that folder.  If you manually remove the folder [ such as
"C:\Program
Files\Java\jre1.6.0_06"  when you have v6 update 7 installed ] you will delete
the Java
Jar and break Apple Quicktime use of said Java Jar.

For example...
You installed Apple Quicktime  when you had JRE v6 update 5 installed.  Apple
Quicktime
will drop its Java Jar in "C:\Program Files\Java\jre1.6.0_05" and set and
evironmental
variable to the Java Jar in "C:\Program Files\Java\jre1.6.0_05".




--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Removing Old Version of JAVA?



On Thu, 11 Sep 2008 08:26:25 -0700, Charliec

Quoted text here. Click to load it

You may find this automated JAVA removal tool helpful

http://raproducts.org/javara.html

Re: Removing Old Version of JAVA?





Caesar Romano wrote:
Quoted text here. Click to load it

Thanks for the link. Worked great on my Win2000Pro



Re: Removing Old Version of JAVA?




Quoted text here. Click to load it
Seems to have worked very well for me also.
Thanks
******************************************************
Charliec

Re: Removing Old Version of JAVA?



On Thu, 11 Sep 2008 08:26:25 -0700, Charliec

Quoted text here. Click to load it


You have to ask the programmers at Sun.
(you could also ask them why the sun is shining)
 ;-)


Quoted text here. Click to load it


For removal of previous (and leaky) versions of Java, you can use:
- JavaRa, now at version 1.11
http://raproducts.org /
http://www.majorgeeks.com/JavaRa_d5967.html

--
Fred W. (NL)

Re: Removing Old Version of JAVA?



wrote Re Re: Removing Old Version of JAVA?:

Quoted text here. Click to load it

I read somewhere that some applications are written for a specific
version of JAVA and will not run with newer versions. I don't know if
it's true or not, but if it is true it's very bad programming.

If I have an application like that I don't mind it breaking when I
remove an older less-secure version of JAVA. By breaking, it
identifies itself and I can remove it and find an alternative.

Re: Removing Old Version of JAVA?



Caesar Romano wrote:

Quoted text here. Click to load it

It could be, but not necessarily so. For example, I use PHP and MySQL
for web sites, and I (admittedly infrequently) will have to make
programming changes or updates when a new version of either of those is
issued. Sometimes a function is dropped and replaced with something
newer, or how a function's parameters are handled is changed.

It happens.  ;-)

--
   -bts
   -Friends don't let friends drive Windows

Re: Removing Old Version of JAVA?




Quoted text here. Click to load it

Not likely, no. It's best to uninstall all previous versions of Java. You
should only be running the latest and greatest. It's very important.
Exploits in java are a major infection point.


--
Regards,
Dustin Cook,  Author of BugHunter
BugHunter - http://bughunter.it-mate.co.uk
MalwareBytes - http://www.malwarebytes.org
  


Re: Removing Old Version of JAVA?



On Thu, 11 Sep 2008 19:28:41 GMT, Dustin Cook

Quoted text here. Click to load it

I've found that the best thing to do when Java automatically indicates
that there's a new version is not to let it install automatically,
because that leaves your current version in place.  I use it as a
trigger to uninstall the current version, then go to Sun's site and
download the offline version, then install it.
--=20
Robin=20
(BrE)
Herts, England=20

Re: Removing Old Version of JAVA?




Quoted text here. Click to load it

I agree. However, it can render some programs inoperative; those that
depend on a specific version. I personally am okay with this, I'll find
something else that's okay with safer versions of Java. :)

Ant is right on the money in his post regarding the potential issues with
removing older versions.

--
Regards,
Dustin Cook,  Author of BugHunter
BugHunter - http://bughunter.it-mate.co.uk
MalwareBytes - http://www.malwarebytes.org
  


Re: Removing Old Version of JAVA?





| I agree. However, it can render some programs inoperative; those that
| depend on a specific version. I personally am okay with this, I'll find
| something else that's okay with safer versions of Java. :)

| Ant is right on the money in his post regarding the potential issues with
| removing older versions.

Maybe but...

Usually in a situation like that the software vendor will bundle Sun JRE with
the
application.
A perfect example would be the Adobe Designer componet of Adobe Acrobat
Professional v9
where they bundle an older version in...

C:\Program Files\Adobe\Acrobat 9.0\Designer 8.2\jre\bin\

That version is 1.5.0_11 (version 5 update 11) which indeed has vulnerabilities
-
http://secunia.com/advisories/31010 /


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Removing Old Version of JAVA?




Quoted text here. Click to load it

Yes... which is bad on the software developer. If a newer version of
Java is present, it shouldn't offer to load the older one. And it should
work with the new one.


--
Regards,
Dustin Cook,  Author of BugHunter
BugHunter - http://bughunter.it-mate.co.uk
MalwareBytes - http://www.malwarebytes.org
  


Re: Removing Old Version of JAVA?





Quoted text here. Click to load it






| Yes... which is bad on the software developer. If a newer version of
| Java is present, it shouldn't offer to load the older one. And it should
| work with the new one.


Dustin, it isn't offered.  It is packaged within the installer and there is NO
choice to
installit or not.

And yes, in the version 5 famility, it is up to v5 update 16
http://java.sun.com/javase/downloads/index_jdk5.jsp

Adobe Acrobat v9 is a NEW product and this is the version information of the
packaged
Java.

java version "1.5.0_11"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_11-b03)
Java HotSpot(TM) Client VM (build 1.5.0_11-b03, mixed mode)

I have an account with Adobe and posted this subject matter on the semi-private
Adobe News
Server (semi private because you need an Adobe account to post but the server is
replicated to Usenet).  I have gotten no answer so I called Adobe.  The
technician was
surprised and a Case number was issued.




--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Removing Old Version of JAVA?



"David H. Lipman" wrote:

Quoted text here. Click to load it

Did you get any feedback from that?

When vendors bundle a JRE it's their resposibility to update it. It's
not reasonable to expect Sun's update process to find other installed
software which might use its own JRE. I've seem advice from Microsoft
about their own vulnerable redistributable DLLs that are not part of
the base system, and they say vendors are resposible for notifying or
providing customers with updates.



Site Timeline