full-disclosure

Open Source and information security mailing list archives

Message-Id: <E022B69C-D0A9-4826-9B48-A6A3BFAE97D9@alexburke.ca>
Date: Sat, 7 Mar 2015 20:06:26 +0100
From: Alexander Burke <alex@...xburke.ca>
To: "paul.szabo@...ney.edu.au" <paul.szabo@...ney.edu.au>
Cc: "fulldisclosure@...lists.org" <fulldisclosure@...lists.org>
Subject: Re: [FD] Java 8u40 released: why?

Java 8u40 includes adware on OS X for the first time ever:

http://www.zdnet.com/article/oracle-extends-its-adware-bundling-to-include-java-for-macs/

Sorry for the poor quality of the link; I don't have time to find a better one.

— Alex

El 06/03/2015, a les 21:02, paul.szabo@...ney.edu.au va escriure:
>>> I notice that Java (JDK, JRE) update 8u40 has been released.
>>> Though
>>>  http://www.oracle.com/technetwork/java/javase/downloads/index.html
>>> says "this release includes important security fixes" ...
>> 
>> My reading of the first WWW page is that only Java SE 7 u75/76 contains
>> security fixes and that there are no security fixes in Java SE 8 u40.
> 
> Yes, they changed the wording since I wrote that! Noting that 7u75/76
> are not new now, but were released in January.
> 
> Seems that 8u40 is simply a useability release; previous must have been
> very bad, unusual that Oracle would release out-of-band.
> 
> Thanks, Paul
> 
> Paul Szabo   psz@...hs.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
> School of Mathematics and Statistics   University of Sydney    Australia
> 
> _______________________________________________
> Sent through the Full Disclosure mailing list
> https://nmap.org/mailman/listinfo/fulldisclosure
> Web Archives & RSS: http://seclists.org/fulldisclosure/

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives