{"id":32271,"date":"2013-01-22T10:36:03","date_gmt":"2013-01-22T17:36:03","guid":{"rendered":"http:\/\/hill-kleerup.org\/blog\/2013\/01\/22\/java-vulnerabilities-remain.html"},"modified":"2013-01-22T10:36:03","modified_gmt":"2013-01-22T17:36:03","slug":"java-vulnerabilities-remain","status":"publish","type":"post","link":"https:\/\/hill-kleerup.org\/blog\/2013\/01\/22\/java-vulnerabilities-remain.html","title":{"rendered":"Java vulnerabilities remain"},"content":{"rendered":"<p>Turned off at home. Poking our security group about it at work.<\/p>\n<p><strong>Reshared post from +<a href='https:\/\/plus.google.com\/103748887870095862080'>Les Jenkins<\/a><\/strong><\/p>\n<blockquote><p>That&#39;s not good. The patch they released apparently wasn&#39;t enough to close the hole.<\/p><\/blockquote>\n<p style='clear:both;'>\n<p style='margin-bottom:5px;'><strong>Embedded Link<\/strong><\/p>\n<p>\t\t\t\t\t\t\t\t\t\t\t\t<a href='http:\/\/arstechnica.com\/security\/2013\/01\/critical-java-vulnerabilies-confirmed-in-latest-version\/'>Critical Java vulnerabilities confirmed in latest version<\/a><br \/>\n\t\t\t\t\t\t\t\t\t\t\t\tSecurity researchers have confirmed that the latest version of Oracle&#8217;s Java software framework is vulnerable to Web hacks that allow attackers to install malware on end users&#8217; computers.<br \/>\n&#8220;We have successfully confirmed that a complete Java security sandbox bypass can be still gained under the recent version of Java 7 Update 11 (JRE version 1.7.0_11-b21),&#8221; Adam Gowdiak, CEO of Poland-based Security Explorations, wrote in an advisory posted Friday&#8230;\n\t\t\t\t\t\t\t\t\t\t\t<\/p>\n<p style='clear:both;'> <strong>Google+:<\/strong> <a href='https:\/\/plus.google.com\/101083456815352083930\/posts\/eWgZR6MykHJ' target='_new'>View post on Google+<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Turned off at home. Poking our security group about it at work. Reshared post from +Les Jenkins That&#39;s not good. The patch they released apparently wasn&#39;t enough to close the hole. Embedded Link Critical Java vulnerabilities confirmed in latest version Security researchers have confirmed that the latest version of Oracle&#8217;s Java software framework is vulnerable &hellip; <a href=\"https:\/\/hill-kleerup.org\/blog\/2013\/01\/22\/java-vulnerabilities-remain.html\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Java vulnerabilities remain&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[106],"tags":[],"class_list":["post-32271","post","type-post","status-publish","format-standard","hentry","category-plusposts"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":10001,"url":"https:\/\/hill-kleerup.org\/blog\/2006\/09\/27\/movable_type_security_ale.html","url_meta":{"origin":32271,"position":0},"title":"Movable Type security alert","author":"***Dave","date":"Wed 27-Sep-06 10:47pm","format":false,"excerpt":"SixApart is releasing what it's calling \"required updates for both Movable Type and Movable Type Enterprise to fix a number of vulnerabilities affecting all previous versions of the platform,\" bringing...","rel":"","context":"In &quot;Blogging &amp; Internet&quot;","block_context":{"text":"Blogging &amp; Internet","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":16604,"url":"https:\/\/hill-kleerup.org\/blog\/2010\/01\/29\/new-machine-firefox-configuration.html","url_meta":{"origin":32271,"position":1},"title":"New machine: Firefox configuration","author":"***Dave","date":"Fri 29-Jan-10 6:25am","format":false,"excerpt":"One of the questions I have to ask myself about my new work machine is, what browser do I want to run on it? Ha ha ha ha ha ha haha ha ha hah ha! (sniff) Wow, I do make a funny now and again. No, honestly, I'll be putting\u2026","rel":"","context":"In &quot;Blogging - Technical&quot;","block_context":{"text":"Blogging - Technical","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/blogging-technical"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hill-kleerup.org\/blog\/wp\/wp-content\/uploads\/2010\/01\/old-computer.jpg?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":38305,"url":"https:\/\/hill-kleerup.org\/blog\/2013\/07\/16\/java-jiving.html","url_meta":{"origin":32271,"position":2},"title":"Java-Jiving","author":"***Dave","date":"Tue 16-Jul-13 1:50pm","format":false,"excerpt":"I do wonder. \u00a0(h\/t +Les Jenkins) View this post on Google+","rel":"","context":"In &quot;~PlusPosts&quot;","block_context":{"text":"~PlusPosts","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/plusposts"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":32199,"url":"https:\/\/hill-kleerup.org\/blog\/2013\/01\/14\/turning-off-java.html","url_meta":{"origin":32271,"position":3},"title":"Turning off Java","author":"***Dave","date":"Mon 14-Jan-13 4:58pm","format":false,"excerpt":"I really have no idea what sites I visit that still require Java. I guess I'll find out, since I've disabled it on our browsers at home.\u00a0(And, yes, I know that Oracle has done an about-face and put out a fix for the current Java flaw, but t'heck with 'em,\u2026","rel":"","context":"In &quot;~PlusPosts&quot;","block_context":{"text":"~PlusPosts","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/plusposts"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":9773,"url":"https:\/\/hill-kleerup.org\/blog\/2006\/11\/06\/gmail_mobile_on_the_treo.html","url_meta":{"origin":32271,"position":4},"title":"GMail Mobile on the Treo 650","author":"***Dave","date":"Mon 6-Nov-06 8:08am","format":false,"excerpt":"While GMail can be accessed via any web-enabled phone (at http:\/\/m.gmail.com\/), there's a new Java-based GMail applet that works much more slickly than the native web application. And it's supported...","rel":"","context":"In &quot;My Computer&quot;","block_context":{"text":"My Computer","link":"https:\/\/hill-kleerup.org\/blog\/category\/my-computer"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":48391,"url":"https:\/\/hill-kleerup.org\/blog\/2014\/11\/18\/the-artistic-side-of-the-java-jive.html","url_meta":{"origin":32271,"position":5},"title":"The Artistic Side of the Java Jive","author":"***Dave","date":"Tue 18-Nov-14 7:45am","format":false,"excerpt":"Yes, quite amusing. Time for more coffee. Originally shared by +Les Jenkins: These are awesome. Funny Comics Drawn on Coffee Cups [Picture Gallery] Artist Josh Hara has a lot of people following him on the Internets, and there's a very good reason for it: Everyone likes his coffee cup art.\u2026","rel":"","context":"In &quot;~PlusPosts&quot;","block_context":{"text":"~PlusPosts","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/plusposts"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"_links":{"self":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/posts\/32271","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/comments?post=32271"}],"version-history":[{"count":0,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/posts\/32271\/revisions"}],"wp:attachment":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/media?parent=32271"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/categories?post=32271"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/tags?post=32271"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}