On 01/12/2013 10:42 PM, George R. Crossman wrote:
I'm seeing warnings saying that one should disable embedded Java to
avoid hacking. Does this apply to linux users? If so, what is the
procedure?
George Crossman
George,
Yes, all OS's are affected because Java is cross platform. I am not sure
if any of the previous version are affected or if only the current
release is affected.
The primary concern is Java applets run by your browser. The
vulnerability allows a zero-day browser exploit that as yet is not
patched by Oracle. The primary concerns I have heard of are installation
of keyloggers and installation of ransomware. I would assume the malware
will use the JVM to run and would be cross platform. AFAIK, Oracle has
not yet announced when a patch will be available.
It is highly recommended that Java be disabled in your browser(s)
regardless of the version. Note JavaScript is not affected, it is
entirely different than Java. Currently this warning does not cover
non-browser applications that use the JVM.
--
Jay Lozier
jsloz...@gmail.com
--
For unsubscribe instructions e-mail to: users+h...@global.libreoffice.org
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://listarchives.libreoffice.org/global/users/
All messages sent to this list will be publicly archived and cannot be deleted