959760 - - update plugincheck to java 7u51

Status: RESOLVED FIXED

(Websites :: plugins.mozilla.org, defect, P1)

Description

[Roger]

Plugin Check Needs to be updated to 7u51. 
7u45 contains fixes for security vulnerabilities.

7u51 was released Tuesday January 14, 2014 at 11:30am PT. 

Related documents:
http://www.oracle.com/technetwork/java/javase/7u51-relnotes-2085002.html
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html

Comment 1

[Carsten Book [:Tomcat]]

did the update to plugincheck production, raymond could you do the check, thanks!

Comment 2

[Kohei Yoshino [:kohei]]

Many people are claiming wrong detections in Bug 985968. Has this really been deployed? I cannot find the version 1.7.0.51:

https://plugins.mozilla.org/pfs/v2?appID={ec8030f7-c20a-464f-9b0e-13a3a9e97384}&appRelease=29&appVersion=20140407135746&clientOS=Windows&chromeLocale=en-US&detection=original&mimetype=application%2Fx-java-applet+application&callback=C

Comment 3

[Carsten Book [:Tomcat]]

Attachment: Screen Shot 2014-04-09 at 4.55.40 PM.png

Comment 4

[Carsten Book [:Tomcat]]

(In reply to Kohei Yoshino [:kohei] from comment #2)
> Many people are claiming wrong detections in Bug 985968. Has this really
> been deployed? I cannot find the version 1.7.0.51:
> 
> https://plugins.mozilla.org/pfs/v2?appID={ec8030f7-c20a-464f-9b0e-
> 13a3a9e97384}&appRelease=29&appVersion=20140407135746&clientOS=Windows&chrome
> Locale=en-US&detection=original&mimetype=application%2Fx-java-
> applet+application&callback=C

hey Kohei, good question why this is missing in your link. Its at least deployed (as in the screenshot) and did a test on plugins.mozilla.org with windows and 7u51 and was marked as latest there

Comment 5

[Kohei Yoshino [:kohei]]

Ah, I could find a link to the 7u51 relnotes, but the version is 1.7.0.45. So something goes wrong with the saved data:

{
  "id": "4",
  "pfs_id": "java-runtime-environment",
  "name": "Java Runtime Environment",
  "vendor": "Sun Microsystems",
  "url": "http://www.java.com/en/download/manual.jsp",
  "modified": "2014-03-20T19:21:54+00:00",
  "created": "2013-10-16T13:50:50+00:00",
  "plugin_id": "7",
  "os_id": "1",
  "platform_id": "4",
  "status": "vulnerable",
  "vulnerability_description": "vendor information",
  "vulnerability_url": "http://www.oracle.com/technetwork/java/javase/7u51-relnotes-2085002.html",
  "version": "1.7.0.45",
  "detected_version": "1.7.0.45",
  "detection_type": "*",
  "os_name": "*",
  "app_id": "*",
  "app_release": "*",
  "app_version": "*",
  "locale": "*",
  "fetched": "2014-04-09T07:28:36-07:00",
  "relevance": 1
}

Comment 6

[Carsten Book [:Tomcat]]

(In reply to Kohei Yoshino [:kohei] from comment #5)
> Ah, I could find a link to the 7u51 relnotes, but the version is 1.7.0.45.
> So something goes wrong with the saved data:
> 
> {
>   "id": "4",

yeah that 1.7.0.45 is the entry below that 2 ones from the screenshot and the last one marked vulnerable

Comment 7

[Kohei Yoshino [:kohei]]

Today I revisited the API URL and found 1.7.0.51. Maybe it was a cache issue?