MacOS – Is it safe to install a deprecated Java version

javamacosmalwareSecurity

I have an old version of Photoshop that requires an outdated Java runtime.

"More info" takes me to this Apple support page where you can download the older JRE.

Seems reasonable enough, but I am slightly concerned.

My question:

Could installing this deprecated, unsupported JRE make my system more vulnerable to malware?

Additional details:

  • I'm running macOS 10.13.6 (17G65) High Sierra.

  • As far as I'm aware, I'm only using Java to (prospectively) run Photoshop.

  • I never install Java extensions for browsers, so this question only has to do with desktop applications.

  • Under "Security & Privacy" I've selected "Only allow apps from the App Store and identified developers".

Best Answer

I don’t consider java a safe tool to install period. Unless you have a very compelling reason, or some specific threat model, don’t install java if you want security in your Mac. It’s worse to install older versions that don’t get current security patches in general.

I’d look at something like Pixelmator or Acorn or even a newer Photoshop since your photoshop won’t get security patches anymore either.

https://www.engadget.com/2013/05/14/pixelmator-and-acorn-economic-practical-image-editors/

Your mitigation steps in additional details are all solid and well reasoned and each reduces your risk to security. so I can’t say the risk wouldn’t be worth it to you once you evaluate the alternatives I’ve mentioned.

I can say, I’d choose to not use photoshop CS 5.1 and java in my case.