RE: [tdf-discuss] LibreOffice and Java Security: OpenJDK Vulnerability

2013-01-18 Thread Dennis E. Hamilton
Hamilton Cc: lj; Libreoffice Discussion List Subject: Re: [tdf-discuss] LibreOffice and Java Security: OpenJDK Vulnerability I'm investigating, but the issue is a sandbox security manager bypass using unauthorised reflection and that's exploited using Rhino Javascript. So the context has

Re: [tdf-discuss] LibreOffice and Java Security: OpenJDK Vulnerability

2013-01-18 Thread Jonathan Aquilina
To: Dennis Hamilton Cc: lj; Libreoffice Discussion List Subject: Re: [tdf-discuss] LibreOffice and Java Security: OpenJDK Vulnerability I'm investigating, but the issue is a sandbox security manager bypass using unauthorised reflection and that's exploited using Rhino Javascript. So

RE: [tdf-discuss] LibreOffice and Java Security: OpenJDK Vulnerability

2013-01-16 Thread Dennis E. Hamilton
Hamilton Cc: lj; Libreoffice Discussion List Subject: Re: [tdf-discuss] LibreOffice and Java Security: OpenJDK Vulnerability I'm investigating, but the issue is a sandbox security manager bypass using unauthorised reflection and that's exploited using Rhino Javascript. So the context has

RE: [tdf-discuss] LibreOffice and Java Security: OpenJDK Vulnerability

2013-01-15 Thread Dennis E. Hamilton
: [tdf-discuss] LibreOffice and Java Security: This just out: https://blogs.oracle.com/security/entry/security_alert_for_cve_2013 (Thanks to Simon Phipps for the link.) Note that the vulnerabilities only affect Oracle Java 7 versions. - Dennis -Original Message- From: lj [mailto:ljelou

RE: [tdf-discuss] LibreOffice and Java Security:

2013-01-13 Thread Dennis E. Hamilton
This just out: https://blogs.oracle.com/security/entry/security_alert_for_cve_2013 (Thanks to Simon Phipps for the link.) Note that the vulnerabilities only affect Oracle Java 7 versions. - Dennis -Original Message- From: lj [mailto:ljelou...@gmail.com] Sent: Saturday, January 12,

Re: [tdf-discuss] LibreOffice and Java Security:

2013-01-13 Thread lj
Hi, Thank you for the links. I am currently on Mac OSX 10.6 Snow Leopard with Java disabled on LibreOffice and it is working normally. I will test out the Java 7 on Mac OSX Mountain Lion for the fixed vulnerability in Java. The Mac OSX Mountain Lion System is running Java SE6 with LibreOffice

Re: [tdf-discuss] LibreOffice and Java Security:

2013-01-12 Thread Terrence Enger
I cannot address the important question, but ... On Sun, 2013-01-13 at 14:22 +1100, lj wrote: Can I use LibreOffice without Java enabled on my computer?? As I receive annoying pop up windows when I first use libreoffice to install Java on Apple OS X Mountain Lion. One of my systems lacks