Re: [libreoffice-users] What is the status of Java security vs. LibreOffice?

On 08/30/2012 02:14 PM, Fabian Rodriguez wrote:
> Hi all
>
> I saw this a few days ago, I'd like to know what should I make of it?:
> http://arstechnica.com/security/2012/08/critical-flaw-under-active-attack-prompts-calls-to-disable-java/
>
> I never install Java when I install LibreOffice, but a few people end up
> installing it.
>
> I have seen a few threads about it in the fr-discuss list, but nothing
> clear/concise (although I may have missed a post or two).
>
> Thanks for any information.
>
> Cheers,
>
> Fabian Rodriguez
> http://libreoffice.magicfab.ca
AFAIK Java is primarily used by the embedded Base engine and possibly
some extensions. If you use a non-Java database (MySQL, Postgres,
MariaDB, etc) that does not use Java you do not need Java.

The security problems are Java problems and are not OS or app related
and can affect any computer running the unpatched Java version(s). My
understanding is the transmission is likely via rogue or corrupted
websites that use Java rather than via a downloaded Java app.

I do not know if this issue affects the openJRE project.

-- 
Jay Lozier
jslozier@gmail.com


-- 
For unsubscribe instructions e-mail to: users+help@global.libreoffice.org
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://listarchives.libreoffice.org/global/users/
All messages sent to this list will be publicly archived and cannot be deleted