Date: Tue, 29 Sep 2009 13:05:27 +0800 From: Wenliang Cai <wcai@xwarelabs.org> To: Robert Huff <roberthuff@rcn.com> Cc: Greg Lewis <glewis@freebsd.org>, cpghost <cpghost@cordula.ws>, freebsd-questions@freebsd.org, freebsd-java@freebsd.org Subject: Re: java/jdk16 vulnerability? Message-ID: <fb734c250909282205yafe36dbqc8020b21335ae1ed@mail.gmail.com> In-Reply-To: <19137.36221.789093.590674@jerusalem.litteratus.org> References: <20090928101048.GA1189@phenom.cordula.ws> <20090929034837.GA56588@misty.eyesbeyond.com> <19137.36221.789093.590674@jerusalem.litteratus.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--0050450176f4dd84020474b05cf4 Content-Type: text/plain; charset=UTF-8 Perhaps we can have a specific page to show the recommended JDK version for all people including these who are not in the list... [?] On Tue, Sep 29, 2009 at 12:30 PM, Robert Huff <roberthuff@rcn.com> wrote: > > Greg Lewis writes: > > > > Your installed version of Java is vulnerable to a severe remote > > > exploit (remote code execution!). You must upgrade to at least Java > > > 5 update 20 or Java 6 update 15 as soon as possible. Freenet has > > > disabled any plugins handling XML for the time being, but this > > > includes searching and chat so you should upgrade ASAP! > > > > We're almost certainly vulnerable. The jdk16 port is at Update 3. > > > > We need an entry in the VUXML database I guess. > > > > Updating java/jdk16 is going to be a slow process. There are > > lots of changes between Update 3 and Update 15. I've partially > > merged Update 4, but obviously that still leaves many to go... > > As someone with zero knowledge of Java internals: what is the > recommended version at the moment? > > > Robert Huff > > _______________________________________________ > freebsd-java@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-java > To unsubscribe, send any mail to "freebsd-java-unsubscribe@freebsd.org" > --0050450176f4dd84020474b05cf4--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?fb734c250909282205yafe36dbqc8020b21335ae1ed>