Re: [libreoffice-users] Embedded Java

On 01/13/2013 03:28 AM, Jay Lozier wrote:
> On 01/12/2013 10:42 PM, George R. Crossman wrote:
> > I'm seeing warnings saying that one should disable embedded Java to 
> > avoid hacking. Does this apply to linux users? If so, what is the 
> > procedure?
> >
> > George Crossman
> George,
>
> Yes, all OS's are affected because Java is cross platform. I am not 
> sure if any of the previous version are affected or if only the 
> current release is affected.
>
> The primary concern is Java applets run by your browser. The 
> vulnerability allows a zero-day browser exploit that as yet is not 
> patched by Oracle. The primary concerns I have heard of are 
> installation of keyloggers and installation of ransomware. I would 
> assume the malware will use the JVM to run and would be cross 
> platform. AFAIK, Oracle has not yet announced when a patch will be 
> available.
>
> It is highly recommended that Java be disabled in your browser(s) 
> regardless of the version. Note JavaScript is not affected, it is 
> entirely different than Java. Currently this warning does not cover 
> non-browser applications that use the JVM.
         If you use Firefox and update your operating system regularly, 
Firefox should have already disabled the  JVM add-on. Check Tools -> 
Add-ons for it if you use Firefox. Also check the Help section for 
specific information about how to disable Java in your browser.

--Dan

--
For unsubscribe instructions e-mail to: users+help@global.libreoffice.org
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://listarchives.libreoffice.org/global/users/
All messages sent to this list will be publicly archived and cannot be deleted