Re: A new Java Zero Day exploit is affecting Java 1.8.0.45

2015-07-14 Thread seijoed
Looks like complete and utter FUD. In the latest attack, malicious emails containing links to sites hosting the Java exploit are said to have been sent to armed forces of an unnamed NATO country, and a US defense organization. So this has nothing to do with J2SE or EE running containers.

Re: A new Java Zero Day exploit is affecting Java 1.8.0.45

2015-07-14 Thread Ali Akhtar
If anyone finds that this effects servers / c*, please update us so we can take mitigation measures. Thanks. On Wed, Jul 15, 2015 at 12:48 AM, Ariel Weisberg wrote: > Hi, > > Sounds like this isn’t an issue with the runtime. It’s another > plugin/webstart/whatever desktop issue that doesn’t eff

Re: A new Java Zero Day exploit is affecting Java 1.8.0.45

2015-07-14 Thread Ariel Weisberg
Hi, Sounds like this isn’t an issue with the runtime. It’s another plugin/webstart/whatever desktop issue that doesn’t effect servers. I Googled but didn’t find a precise description of what the issue is. Regards, Ariel > On Jul 14, 2015, at 3:31 PM, Marcos Ortiz wrote: > > Regards to all Cas

A new Java Zero Day exploit is affecting Java 1.8.0.45

2015-07-14 Thread Marcos Ortiz
Regards to all Cassandra´s users. I just wanted to inform there is a new Java Zero Day exploit recently discovered by Trend Micro around the Hacking Team massive leak. This exploit is affecting the latest Java version 1.8.0.45, not Java 1.6 or 1.7, so, I´m just informing this to be aware of this