Results 1 to 6 of 6
  1. #1
    New Lounger
    Join Date
    Dec 2009
    Location
    Southfield, Michigan
    Posts
    12
    Thanks
    0
    Thanked 2 Times in 2 Posts
    The Secunia Personal Software Inspector reports that I have a number of "patched" older Java extensions installed in Firefox. Yet, Firefox itself reports only the very latest, Update 20.

    I am very diligent about updating Java and did so after reading Susan's article in the latest issue of WS, without waiting for auto updates to kick in. I have verified that only the very latest version of Java is installed on this XP SP3 desktop. (I am one of those users who was well-aware of the fact that--until recently--older versions had to be removed manually, that updating Java did NOT automatically remove older, insecure versions.)

    None of these installations shows up in Control Panel > Add/Remove. Instead they all are located in the following folder: Mozilla Firefox\extensions\Obsolete.

    These so-called "obsolete" extensions are embodied in sub-directories named: {CAFEEFAC-0016-0000-00??-ABCDEFEDCBA}, where ?? corresponds to the Java Update number.

    1. Why is there a folder for "obsolete" Firefox extensions in the first place if there is only one (the most recent) underlying version of Java installed?

    2. Does their presence even in an "obsolete" folder pose any kind of security risk?

    3. If there is no valid reason for keeping them around, do they have to be uninstalled in some fashion (say by moving them up one folder tier) or can the folders merely be deleted?

    4. Is this issue really nothing more than a tempest in a teapot, a misplaced reporting error for Secunia to resolve?

    Many thanks for any and all responses.

  2. #2
    2 Star Lounger Katz's Avatar
    Join Date
    Feb 2010
    Location
    NYS
    Posts
    169
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Use Java Ra from now on. It deletes the old files and installs the new ones.
    2 desktops: Win XP Pro SP3 / 3 GHZ/3 GB RAM/ Firefox, Thunderbird /
    Open Office

  3. #3
    Super Moderator jscher2000's Avatar
    Join Date
    Feb 2001
    Location
    Silicon Valley, USA
    Posts
    23,112
    Thanks
    5
    Thanked 93 Times in 89 Posts
    Quote Originally Posted by Michael G Dworkin View Post
    None of these installations shows up in Control Panel > Add/Remove. Instead they all are located in the following folder: Mozilla Firefox\extensions\Obsolete.

    These so-called "obsolete" extensions are embodied in sub-directories named: {CAFEEFAC-0016-0000-00??-ABCDEFEDCBA}, where ?? corresponds to the Java Update number.

    1. Why is there a folder for "obsolete" Firefox extensions in the first place if there is only one (the most recent) underlying version of Java installed?

    2. Does their presence even in an "obsolete" folder pose any kind of security risk?

    3. If there is no valid reason for keeping them around, do they have to be uninstalled in some fashion (say by moving them up one folder tier) or can the folders merely be deleted?

    4. Is this issue really nothing more than a tempest in a teapot, a misplaced reporting error for Secunia to resolve?
    I've never heard of the Obsolete folder. I would just clear out all the old Java stuff from there. After all, it's easy enough to install Java again if one of those updates turns out to be important.

  4. #4
    New Lounger
    Join Date
    Dec 2009
    Location
    Southfield, Michigan
    Posts
    12
    Thanks
    0
    Thanked 2 Times in 2 Posts
    I am disappointed and somewhat surprised, at this forum in particular, that the first two persons to respond self-evidently did not read what I wrote very carefully.

    JSCHER2000, I had not heard of such a folder either, until Secunia PSI revealed that that was where they were stored. Sure enough, when I checked, therer really is such a folder! Did you make any effort to verify if such a folder exists on your machine?

    MGD

  5. #5
    Super Moderator jscher2000's Avatar
    Join Date
    Feb 2001
    Location
    Silicon Valley, USA
    Posts
    23,112
    Thanks
    5
    Thanked 93 Times in 89 Posts
    Quote Originally Posted by Michael G Dworkin View Post
    Did you make any effort to verify if such a folder exists on your machine?
    Yes, of course I checked my system before posting. On my PC running Fx 3.5.9, the various Java updates are in the top-level extensions folder, and there is no Obsolete subfolder.

    I also conducted numerous Google searches to try to find any references to an "extensions\Obsolete" folder or directory. Nothing useful came up.

    I also spared you an extensive discourse I had started writing about the Mozilla plugin checker, when I realized it doesn't check extensions.

    Apologies for not spelling out that research in my post, but most people find that sort of thing tiresome so I just went straight to my recommendation.

    == Edit ==

    This is a work PC, so I cannot run Secunia PSI on it.

  6. #6
    5 Star Lounger
    Join Date
    Dec 2009
    Location
    Slough, Berkshire UK
    Posts
    928
    Thanks
    61
    Thanked 52 Times in 50 Posts
    Quote Originally Posted by Ted Myers View Post
    I would go to add/remove programs in control panel and see what is listed there. Any other than the latest should be uninstalled. Java does not update existing installations, just installs new installations. You have to manually uninstall the older versions.
    I have looked and ther is no folder called obsolete on my comp. I suggest you just delete that folder and its contents.
    Clive

    All typing errors are my own work and subject to patents pending. Except errors by the spell checker. And that has its own patients.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •