site Search:


 
    All Forums Hot Topics Gallery






how-to block ads


 
Search Topic:
Uniqs:
5250
Share Topic
Posting?
Post a:
Post a:
Links: ·Hijack This logs? ·Panda Free Tools ·Vundo Removal
page: 1 · 2
AuthorAll Replies


Triple Helix
Go Blue Jays Go
Premium
join:2007-07-26
Oshawa, ON
kudos:7
Reviews:
·Rogers Hi-Speed

JAVA 7u11 now available for download

Go get it.

»www.oracle.com/technetwork/java/···261.html

Cheers,

TH


Triple Helix
Go Blue Jays Go
Premium
join:2007-07-26
Oshawa, ON
kudos:7
Reviews:
·Rogers Hi-Speed

1 edit

Release Notes & Changelog:

Bug Fixes

This release contains fixes for security vulnerabilities. For more information, see Oracle Security Alert for CVE-2013-0422.

In addition, the following change has been made:

Area: deploy
Synopsis: Default Security Level Setting Changed to High
The default security level for Java applets and web start applications has been increased from "Medium" to "High". This affects the conditions under which unsigned (sandboxed) Java web applications can run. Previously, as long as you had the latest secure Java release installed applets and web start applications would continue to run as always. With the "High" setting the user is always warned before any unsigned application is run to prevent silent exploitation.

»www.oracle.com/technetwork/java/···856.html
--
Triple Helix - Microsoft® MVP Consumer Security 2012/13
VIP Member Of ASAP - (Alliance of Security Analysis Professionals™)
Official Webroot SecureAnywhere (Prevx) Support Forum Helper.
(H59 Clan)


StuartMW
Who Is John Galt?
Premium
join:2000-08-06
Galt's Gulch
kudos:2

reply to Triple Helix
Thanks TH.

Another 0-day in 3 ... 2 ... 1



TheJoker
Premium,VIP,MVM
join:2001-04-26
Charlottesville, VA
kudos:5

reply to Triple Helix
Thank, I just had the update notice pop-up myself. I already did have the security level set to high on my system.
--
Proud ASAP member since 2005
Microsoft MVP/Consumer Security 2009-2010



La Luna
Survived Ashraful
Premium
join:2001-07-12
Warwick, NY
kudos:3

reply to Triple Helix
Got it, thank you!

However, still leaving it disabled.



DrStrange
Technically feasible
Premium
join:2001-07-23
West Hartford, CT
kudos:1

reply to Triple Helix
Thanks.

We'll see if I can patch everything I need to before the next zero-day shows up.



TheJoker
Premium,VIP,MVM
join:2001-04-26
Charlottesville, VA
kudos:5

reply to La Luna
I keep it enabled, but since I only use Firefox, and use the NoScript add-on, it's essentially disabled by default for most sites. I only enable scripting permanently on sites I regularly visit that need it to work properly. Go to read an article somewhere else, and as long as the sites works properly, I won't temporarily enable scripting. No need to allow scripting on sites that don't need it.
--
Proud ASAP member since 2005
Microsoft MVP/Consumer Security 2009-2010



Dustyn
Premium
join:2003-02-26
Ontario, CAN
kudos:10

reply to Triple Helix
Saw this on the Symantec news forums a little while ago, thanks for the update!



Oregonian
Premium
join:2000-12-21
West Linn, OR

reply to Triple Helix
Thanks.


baess

join:2011-01-28

Yesterday I disabled my Java but only after manually updating it to 7u10. Java never told me that the update was available. Checked the settings and even though it is set to auto run an update check one hadn't been run since October. Lousy program.



jadinolf
I love you Fred
Premium
join:2005-07-09
Ojai, CA
kudos:9
Reviews:
·DSL EXTREME

reply to La Luna

said by La Luna:

Got it, thank you!

However, still leaving it disabled.

Me too.
--
Printed on 100% recycled bytes


gugarci
Premium
join:2004-02-25
Lyndhurst, NJ

reply to Triple Helix
Thanks.



beck
Premium,MVM
join:2002-01-29
On The Road
kudos:1

reply to Triple Helix
Thank you!



L_ance

join:2002-05-14
Newark, OH

reply to Triple Helix
Thanks...
--
Lance


grumpi

join:2001-03-28
*****

reply to Triple Helix
Thanks!



Triple Helix
Go Blue Jays Go
Premium
join:2007-07-26
Oshawa, ON
kudos:7

reply to Triple Helix
More info: »isc.sans.edu/diary/Java+0-Day+pa···ed/14932

TH


slajoh01

join:2005-04-23

4 edits

I had disabled Java 7 u10 from both IE and Firefox only, but now I do not see the Java plugins at all. Before, I just DISABLED the plugin.
Where did those Java plugins go in Firefox now???

Just installed this new latest version.

Strange. as I re-enabled Java from the Java control panel, it re-appeared under the plugins in Firefox. Would this be normal with Firefox if I enable and disable Java from the Java control panel?

Thanks



StuartMW
Who Is John Galt?
Premium
join:2000-08-06
Galt's Gulch
kudos:2
Reviews:
·CenturyLink

reply to Triple Helix
Java update still has bugs, says expert

quote:
Java security expert Adam Gowdiak, who has discovered several bugs in the software over the past year, said that the update from Oracle leaves unfixed several critical security flaws.

I'm shocked I tells ya, shocked!
--
Don't feed trolls--it only makes them grow!

sludgehound

join:2007-03-12
New York, NY

reply to Triple Helix
Thanks. Very fast Run for Win 8 x64 Pro & IE10. No reboot.



angussf
Premium
join:2002-01-11
Tucson, AZ
kudos:4

reply to baess

said by baess:

Yesterday I disabled my Java but only after manually updating it to 7u10. Java never told me that the update was available. Checked the settings and even though it is set to auto run an update check one hadn't been run since October. Lousy program.

Every time you update Java, it resets the "automatic update" frequency to ONCE A MONTH. You need to change that to daily yourself after every update if you want to rely on Java updating itself.
--
Angus S-F
GeoApps, Tucson, Arizona, USA
»geoapps.com/
»www.linkedin.com/in/angussf
»geoapps.blogspot.com/

Wednesday, 19-Jun 01:34:34 Terms of Use & Privacy | feedback | contact | Hosting by nac.net - DSL,Hosting & Co-lo
over 13.5 years online © 1999-2013 dslreports.com.
Most commented news this week
Hot Topics