Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Security Alert: Java Security Alert

Date: Aug 30, 2012

StatusOpen

Description:

SUMMARY

A critical vulnerability has been discovered in the Java Runtime Environment that affects Windows, Mac, and Linux. Exploits have been released in the wild that target the Java plugin in all browsers on these platforms. Users may fall victim to having malicious software installed without their consent.

WHO IS AT RISK

Computers that have Java 7 update 6 (1.7.6) or earlier installed.

WHO IS NOT AT RISK

Computers that do not have Java installed, have the Java browser plugin disabled, or those that have Java 6 (1.6.x) installed.

WHAT VERSION AM I RUNNING?

Use this web page to determine if Java is enabled in your web browser. Scroll down to see the exact version of Java that is running.

http://www.h-online.com/security/services/Java-747799.html

This can also be determined from your command shell with the following command:

java -version

WHAT TO DO

Update your computer to the latest version of Java, which is Java 7 update 7. Windows users can use the Java control panel applet or download the patch directly from Oracle. Mac users are only affected if Java 7 was manually installed on the system with a package directly from Oracle. If this is the case, you must also manually upgrade. Linux users should use the package manager from their distribution. RPMs and tarballs are also available directly from Oracle.

http://www.oracle.com/technetwork/java/javase/downloads/jre7u7-downloads-1836441.html

Disable the Java Plug-in

Disabling the Java web browser plug-in will prevent Java applets from from running. Here are instructions for several common web browsers:

...