News for hackers. Stuff that matters.

A comment on Java 6 exploit found in the wild.

Re:Java 6 exploit found in the wild by jsight on Tuesday August 27, 2013 @09:22AM (#6283214)
It's worth noting that OpenJDK has had this fixed for a couple of months now: https://access.redhat.com/security/cve/CVE-2013-2463

AFAIK, Oracle Java 1.6.0 is EOL, and thus does not receive patches in a timely manner (if at all).

[ Parent | on HN ]
Re:Java 6 exploit found in the wild by benjarrell on Tuesday August 27, 2013 @12:04PM (#6284278)
The freely available updates have ceased, you have to buy Java for business[1] to continue to receive updates.

1: http://www.oracle.com/technetwork/java/javase/training/index...

[ Parent | on HN ]
Re:Java 6 exploit found in the wild by yuhong on Tuesday August 27, 2013 @02:39PM (#6285294)
Yea, until recently they even continued to provide updates for 1.4.2 if you pay.
[ Parent | on HN ]