nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Child Item

JAVA security risk announced

mike65

Any reason to worry?

http://www.h-online.com/security/news/item/Dangerous-vulnerability-in-latest-Java-version-1781156.html

http://www.h-online.com/security/news/item/Java-plugins-unplugged-by-Mozilla-and-Apple-1782628.html

Find more posts tagged with

Quick Links

Comments

limnam

Do you use any browser plugins such as NoScript? Usual story, avoid "dodgey" sites if you're worried disable java until patched.

fcerullo

The Department of Homeland Security is advising to disable Java until a patch is released by Oracle.

More information on how to do this and full details of the vulnerability in the link below:

http://www.us-cert.gov/cas/techalerts/TA13-010A.html

Regards,
Fabio Cerullo

BrianHonan

Latest version of Java is now available for download to address the above issues http://java.com/en/download/installed.jsp

BrianHonan

And wouldn't you know it. As soon as I submit my previous comment this pops up in my inbox

Emergency patch for Java fails to fix cybercrime holes, warn experts
http://www.independent.ie/business/technology/emergency-patch-for-java-fails-to-fix-cybercrime-holes-warn-experts-3351321.html

BaconZombie

The main issue is that Oracle only Certified JRE 7u10 and 6u38 on Oracle R12 on 12 December 2012.

So evening people keeping on top of Oracle updates will probably not roll this out for >3 months.

BrianHonan wrote: »

And wouldn't you know it. As soon as I submit my previous comment this pops up in my inbox

Emergency patch for Java fails to fix cybercrime holes, warn experts
http://www.independent.ie/business/technology/emergency-patch-for-java-fails-to-fix-cybercrime-holes-warn-experts-3351321.html

LoLth

does java have any "location" based settings? For example, if I need java for an internal application that runs in a browser, is there a way to restrict java from running except when connected to the LAN/Intranet but be disabled for any sites outside of the organisation? (I'm thinking of Explorer's security zones in particular, does firefox have a way to restrict plugins based on the target server?).

whoever said "workstations dont need Java" has never tried to configure a brocade switch from their machine...

LoLth

a quick google later:

IE using GPO:
http://blogs.msdn.com/b/ieinternals/archive/2011/05/15/controlling-java-in-internet-explorer.aspx

Chromium discussion involving restriction of Java plugin to locations:
http://code.google.com/p/chromium/issues/detail?id=155743

with a link to Policy:
http://www.chromium.org/administrators/policy-list-3

PluginsAllowedForURLs and DefaultPluginsPolicy allows you to disable all plugins except for whitelisted URLs.

nothing for firefox yet but there's always NoScript.