Java security hole

[Noid]

Update to either 1.4.2_06 or 1.5.0 to fix the vulnerability.

You can download 1.5.0 (aka 5.0) here:
http://java.sun.com/j2se/1.5.0/download.jsp
Get the J2SE 5.0 JRE package.

You can get 1.4.2_06 from here:
http://java.sun.com/j2se/1.4.2/download.html

Some of the sites at Sun.com still report 1.4.2_05 as being current. If you check there it will say that the version of Java you have installed is current. That is not correct. Verify that you have 1.4.2_06 or 1.5.0 installed. There is a Control Panel applet for Java that will tell you what version you have.

There do not appear to be any actual malicious exploits taking advantage of this one yet. But there will be soon. There is proof of concept code out there and it won't be long till the malicious code is out there.

Linux is also vulnerable to this one. So you Linux users need to update too.

 

[kamper]

http://forums.anandtech.com/me...3&threadid=1449151 (but this needed more attention anyways...)

As a note: this is not a hole in the jvm. This is a hole in the security restrictions placed on code run by browser plugins.

 

[Noid]

I paged back a few pages to see ... but not that far back ...

The 'bigger?' problem is that the update feature is broke, like I highlighted.

Sorry for the repost

 

[AFB]

People are still using 1.4* ?:Q

Edit: I guess we can't all be Java freaks