Issues with Marvin applets and Java 1.7.0_u45

Hi,

as the Java 1.7.0_u45 version of the Java plugin has arrived, new security warnings appear when the user loads an applet which is communicating with Javascript.

The 1.7.0_u45 version introduced three new Manifest attributes, two of them affect the behaviour of the applets severly. As the Manifest is part of the main jar files of Marvin Applets package and these jar files are signed, so we need to repack all the Marvin Applet package versions when we want to include the new Manifest attributes.

What you can do about this?

We can do this on request, and some of the vendors have already requested for the version that contains the new Manifest attributes. If you need such a version, please post a request for us with the version you would like to have repacked and resigned.

What we can offer you to avoid the security warnings?

We have started to release versions that contains this new attributes to avoid the warning with the update 45, and this solved the problem partly, but as we are getting new reports over and over again, we are still experimenting with the effects, and we still see some problems to solve.

There are some problems with this we still need to address, and solve.

The new version introduced a seemingly unwanted incompatibility with a previously introduced Manifest attribute, that needs to be included for the Java versions between 1.7.0_u25 and 1.7.0_u45.

So our current problem is to decide how to handle this situation, and create a solution that works on all the possible supported environments, otherwise we need to decrease the number of supported environments for applets on the client side. This problem is taking some time to solve, and we are trying to do our best, to solve it as soon as possible, just as all the other issues we are aware of with this java version change.

For more information:

You can find the Java 1.0.7_u45 release notes here.

Also you can find topics about the problems with the new update on the java blogs and forums here, here, and for webstart specific issues here for example.

We will notify you about any progress we made as soon as possible in this topic. In the mean time we are thankful for your patience and understanding.

Best regards,
Istvan

Hi Istvan,

You've mentioned that we will be notified of any progress regarding this issue.

I wonder how the notification will be sent, on individual basis by paying vendors, on your website or should we just monitor this post?

Thanks,

Igor

Dear All!

   Oracle is planning to release Java 1.7.0_51 soon. This release will have a new security requirement which was already applied with the updates of the 1.7.0_45 security requirements.

   However with Java 1.7.0_51 you will be able to add a security exception to the sites where you trust the applets which means that you can decide whether your system should run the applet built with an old technology or not. You can find more information here.

Regards:
Balázs 

bzaicsek wrote:

Dear All!    Oracle is planning to release Java 1.7.0_51 soon. This release will have a new security requirement which was already applied with the updates of the 1.7.0_45 security requirements.    However with Java 1.7.0_51 you will be able to add a security exception to the sites where you trust the applets which means that you can decide whether your system should run the applet built with an old technology or not. You can find more information here. Regards: Balázs

Balázs , thank you for the update.

Hello, I would like MarvinSketch 5.4.1.1 repackaged and resigned.

Sorry for the late reply. You can download the resigned version from here: https://www.chemaxon.com/download.php?d=/data/download/marvin/5.4.1.1/marvin-bin-5.4.1.1-signed-patch-Java7u45.zip

Best Regards,

Efi

Thank you! For the record, I note that the linked package contains only the relevant jar files; it does not include auxiliary files such as templates, etc. I needed to copy the contents of the new marvin folder into my old one for everything to work properly. But it works properly now.

Hi Bob,

these patches are designed to simply overwrite the directory where you have the Marvin Applet package installed, and it does contain only the changed files. That is the reasn behind the missing files.

Regards,
Istvan