You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@cassandra.apache.org by Marcos Ortiz <ml...@uci.cu> on 2015/07/14 21:31:37 UTC
A new Java Zero Day exploit is affecting Java 1.8.0.45
Regards to all Cassandra´s users.
I just wanted to inform there is a new Java Zero Day exploit recently
discovered by Trend Micro around the Hacking Team massive leak.
This exploit is affecting the latest Java version 1.8.0.45, not Java 1.6
or 1.7, so, I´m just informing this to be aware of this issue.
To find more information, you can read more here:
http://blog.lumension.com/10334/java-zero-day/
http://blog.trendmicro.com/trendlabs-security-intelligence/pawn-storm-update-trend-micro-discovers-new-java-zero-day-exploit/
--
Marcos Ortiz <http://about.me/marcosortiz>, Sr. Product Manager (Data
Infrastructure) at UCI
@marcosluis2186 <http://twitter.com/marcosluis2186>
Re: A new Java Zero Day exploit is affecting Java 1.8.0.45
Posted by Ali Akhtar <al...@gmail.com>.
If anyone finds that this effects servers / c*, please update us so we can
take mitigation measures.
Thanks.
On Wed, Jul 15, 2015 at 12:48 AM, Ariel Weisberg <ar...@weisberg.ws> wrote:
> Hi,
>
> Sounds like this isn’t an issue with the runtime. It’s another
> plugin/webstart/whatever desktop issue that doesn’t effect servers. I
> Googled but didn’t find a precise description of what the issue is.
>
> Regards,
> Ariel
>
> On Jul 14, 2015, at 3:31 PM, Marcos Ortiz <ml...@uci.cu> wrote:
>
> Regards to all Cassandra´s users.
> I just wanted to inform there is a new Java Zero Day exploit recently
> discovered by Trend Micro around the Hacking Team massive leak.
> This exploit is affecting the latest Java version 1.8.0.45, not Java 1.6
> or 1.7, so, I´m just informing this to be aware of this issue.
>
> To find more information, you can read more here:
> http://blog.lumension.com/10334/java-zero-day/
>
> http://blog.trendmicro.com/trendlabs-security-intelligence/pawn-storm-update-trend-micro-discovers-new-java-zero-day-exploit/
>
> --
> Marcos Ortiz <http://about.me/marcosortiz>, Sr. Product Manager (Data
> Infrastructure) at UCI
> @marcosluis2186 <http://twitter.com/marcosluis2186>
>
>
>
>
Re: A new Java Zero Day exploit is affecting Java 1.8.0.45
Posted by Ariel Weisberg <ar...@weisberg.ws>.
Hi,
Sounds like this isn’t an issue with the runtime. It’s another plugin/webstart/whatever desktop issue that doesn’t effect servers. I Googled but didn’t find a precise description of what the issue is.
Regards,
Ariel
> On Jul 14, 2015, at 3:31 PM, Marcos Ortiz <ml...@uci.cu> wrote:
>
> Regards to all Cassandra´s users.
> I just wanted to inform there is a new Java Zero Day exploit recently discovered by Trend Micro around the Hacking Team massive leak.
> This exploit is affecting the latest Java version 1.8.0.45, not Java 1.6 or 1.7, so, I´m just informing this to be aware of this issue.
>
> To find more information, you can read more here:
> http://blog.lumension.com/10334/java-zero-day/ <http://blog.lumension.com/10334/java-zero-day/>
> http://blog.trendmicro.com/trendlabs-security-intelligence/pawn-storm-update-trend-micro-discovers-new-java-zero-day-exploit/ <http://blog.trendmicro.com/trendlabs-security-intelligence/pawn-storm-update-trend-micro-discovers-new-java-zero-day-exploit/>
>
> --
> Marcos Ortiz <http://about.me/marcosortiz>, Sr. Product Manager (Data Infrastructure) at UCI
> @marcosluis2186 <http://twitter.com/marcosluis2186>
>
>
Re: A new Java Zero Day exploit is affecting Java 1.8.0.45
Posted by se...@gmail.com.
Looks like complete and utter FUD.
In the latest attack, malicious emails containing links to sites hosting the Java exploit are said to have been sent to armed forces of an unnamed NATO country, and a US defense organization.
So this has nothing to do with J2SE or EE running containers.
On Tue, Jul 14, 2015 at 1:34 PM, Marcos Ortiz <ml...@uci.cu> wrote:
> Regards to all Cassandra´s users.
> I just wanted to inform there is a new Java Zero Day exploit recently
> discovered by Trend Micro around the Hacking Team massive leak.
> This exploit is affecting the latest Java version 1.8.0.45, not Java 1.6
> or 1.7, so, I´m just informing this to be aware of this issue.
> To find more information, you can read more here:
> http://blog.lumension.com/10334/java-zero-day/
> http://blog.trendmicro.com/trendlabs-security-intelligence/pawn-storm-update-trend-micro-discovers-new-java-zero-day-exploit/
> --
> Marcos Ortiz <http://about.me/marcosortiz>, Sr. Product Manager (Data
> Infrastructure) at UCI
> @marcosluis2186 <http://twitter.com/marcosluis2186>