Oracle java zero-day attack

All Gurus once were Newbies
Forum rules
There are no such things as "stupid" questions. However if you think your question is a bit stupid, then this is the right place for you to post it. Please stick to easy to-the-point questions that you feel people can answer fast. For long and complicated questions prefer the other forums within the support section.
Before you post please read how to get help

Oracle java zero-day attack

Postby Denko on Mon Jan 14, 2013 5:20 am

There has been much 'noise' about Oracle java zero-day attack lately.

Since Mint uses opensource java & icedtea instead - should I be concerned at all?
Denko
Level 1
Level 1
 
Posts: 41
Joined: Fri Jan 08, 2010 8:55 am
Location: Bornholm, DENMARK

Linux Mint is funded by ads and donations.
 

Re: Oracle java zero-day attack

Postby xenopeek on Mon Jan 14, 2013 6:32 am

That attacks are on Oracle Java, so you wouldn't be immediately at risk with OpenJDK and IcedTea that you are using. However, Java being Java, probably any implementation has security issues. I'd recommend you disable or remove IcedTea from your web browser (Firefox > Tools > Add-ons > Plugins). Don't run Java in your browser, or if you do use an extension like NoScript so only websites that you have allowed will be able to use Java.

To remove IcedTea from your browser, open a terminal and run the following command to completely remove IcedTea:
Code: Select all
sudo apt-get --purge autoremove icedtea-*
User avatar
xenopeek
Level 21
Level 21
 
Posts: 15261
Joined: Wed Jul 06, 2011 3:58 am
Location: The Netherlands

Re: Oracle java zero-day attack

Postby altair4 on Mon Jan 14, 2013 8:21 am

I haven't found a definitive answer to this question since there seems to be so many related questions.

** Does openjdk / icedtea have the same vulnerability?
** Is it specific to only Java7 or is Java6 also affected?

I do not have the answer but if you go to the following site it will check what version Oracle ( and presumably any evil-doer ) thinks you are running:
http://www.java.com/en/download/testjava.jsp

On Mint14 it will come back with:
Java SE 7 Update 09

On Mint13 it will come back with:
Java SE 6 Update 24


You can always disable the plugin in Firefox: Tools > Addons > Plugins > IcedTea > Disable. You can go back to the link above and retest it to see if it gives you a "This Plugin is Disabled" error.
Please add a [SOLVED] at the end of your original subject header if your question has been answered and solved.
altair4
Level 16
Level 16
 
Posts: 6213
Joined: Tue Feb 03, 2009 10:27 am

Re: Oracle java zero-day attack

Postby Denko on Mon Jan 14, 2013 8:30 am

Thank you.
Unfortunately in Denmark we are all forced to use java, since we otherwise could not use on-line banking or log on to government sites.
I do use NoScript though, so I should be OK.
Denko
Level 1
Level 1
 
Posts: 41
Joined: Fri Jan 08, 2010 8:55 am
Location: Bornholm, DENMARK


Return to Newbie Questions

Who is online

Users browsing this forum: Bing [Bot], Majestic-12 [Bot] and 17 guests