VM Security Patch

[Andrea]

I searched and couldn't find an answer to this here. I'm using Windows XP
Pro with SP2. Microsoft has a security patch for VM for some versions of
Windows, but it's not recommended for Windows XP with SP2. Does that mean
it's not necessary? I've read that it either needs to be updated with the
patch or that Java VM should be deleted because it's not supported anymore.
I seem to remember something about this having become a legal issue, unless
I'm thinking of something else. I just want to know whether this is
something I should install, and if so, where I would find it because when I
go to the Windows Update page, the scan indicates that my computer is
completely updated.

[Touch Base]

Microsoft Java software gets a reprieve until 2007
http://www.infoworld.com/article/04/04/14/HNmsjavareprieve_1.html

Users of Microsoft Corp.'s Java Virtual Machine (JVM) have an extra
three years to drop the software and migrate to Microsoft's .Net or a
competing Java product following the company's broad deal with Sun
Microsystems Inc. early this month.

Microsoft was set to end support for its JVM on Sept. 30, much to the
dismay of developers who built applications to work with the software.
Now Microsoft has extended security patch support for its JVM until
Dec. 31, 2007, Brian Keller, a Microsoft product manager, said
Tuesday. Security patches are the only support Microsoft currently
provides for the JVM.

"This is certainly very good for many of our customers. It means they
have over three additional years to migrate their applications. In
some cases those applications were already set to retire before 2007,"
Keller said. The extension was agreed on in the settlement and
collaboration pact Microsoft struck with Sun Microsystems Inc. early
this month.

A JVM is software that enables users to run applications written in
Java, the programming language created by Sun. Many developers have
built applications for Microsoft's JVM because the software is widely
distributed. Most Windows users have Microsoft's JVM installed,
according to Keller.

Java applets are widely used to make Web sites, such as banking and
shopping sites, more dynamic.

After a feud over Microsoft's alleged misuse of Sun's Java technology,
the companies agreed in a legal settlement in 2001 that Microsoft
would retire its JVM on Jan. 2, 2004. Microsoft and Sun last October
agreed to an extension until September 2004 and earlier this month
further extended the period in which Microsoft can provide security
patches for its JVM until the end of 2007.

Microsoft advises customers not to put off moving from its JVM. The
software is outdated because Microsoft, under its agreement with Sun,
has not been allowed to enhance it but only to provide critical
security patches, Keller said.

Extending support is good news for users, said John Rymer, a Santa
Clara, California-based vice president at Forrester Research Inc.
"Users faced a forced migration, essentially one that created no
value, replacing one JVM with another," he said. Many users aren't
interested in migrating to Microsoft's .Net platform but want to stay
with Java, he said.

"There is cost and time involved in the migration. Users have gotten a
reprieve as a result of this peace treaty with Sun. However, they
still will face migration at some point, Microsoft has been pretty
adamant about not supporting Java," Rymer said. Keeping the Microsoft
JVM after support expires would be a security risk, he said

Going forward, Rymer sees two basic scenarios. Customers will have to
drop the Microsoft JVM -- "2007 is a pretty relaxed schedule," he said
-- or Microsoft will reach a new licensing agreement for Java with
Sun.

"I don't think it is an immediate possibility, but depending on how
they get along and how their businesses coincide, we may see Microsoft
license Java from Sun again," Rymer said. .

Microsoft has set up a Web site (http://www.microsoft.com/java) to
advise customers of their options, which includes migrating to the
Microsoft .Net framework or to a different JVM such as Sun:
http://www.java.com/en/index.jsp

Microsoft provides tools, such as its Visual J# .Net, to help developers
migrate their
Java applets and applications to its .Net framework, Keller said.

Keller couldn't say if Microsoft, as a result of its newfound
friendship with Sun, would take out a new Java license from the Santa
Clara, California-based company in the future. "At this point our
technology investment is the .Net framework. I am not aware of any
decisions to relicense Java," Keller said.

The Microsoft JVM is no longer available for distribution from
Microsoft. Microsoft products that currently include the Java software
will continue to be retired or replaced by versions that do not, the
company said.

"Andrea" > wrote in message
news:CgL5d.1257$gm.872@okepread07...
>I searched and couldn't find an answer to this here. I'm using Windows XP
>Pro with SP2. Microsoft has a security patch for VM for some versions of
>Windows, but it's not recommended for Windows XP with SP2. Does that mean
>it's not necessary? I've read that it either needs to be updated with the
>patch or that Java VM should be deleted because it's not supported anymore.
>I seem to remember something about this having become a legal issue, unless
>I'm thinking of something else. I just want to know whether this is
>something I should install, and if so, where I would find it because when I
>go to the Windows Update page, the scan indicates that my computer is
>completely updated.
>