Oracle Corp to fix Java security flaw "shortly"

[Eugene]

Source: Reuters

Oracle Corp to fix Java security flaw "shortly"

By Jim Finkle
BOSTON | Sat Jan 12, 2013 1:15pm EST

(Reuters) - Oracle Corp said it is preparing an update to address a flaw in its widely used Java software after the U.S. Department of Homeland Security urged computer users to disable the program in web browsers because criminal hackers are exploiting a security bug to attack PCs.

"A fix will be available shortly," the company said in a statement released late on Friday.

Company officials could not be reached on Saturday to say how quickly the update would be available for the hundreds of millions of PCs that have Java installed.

The Department of Homeland Security and computer security experts said on Thursday that hackers figured out how to exploit the bug in a version of Java used with Internet browsers to install malicious software on PCs. That has enabled them to commit crimes from identity theft to making an infected computer part of an ad-hoc computer network that can be used to attack websites.

[font size=1]-snip-[/font]

Read more: http://www.reuters.com/article/2013/01/12/us-usa-java-security-idUSBRE90B0EX20130112

[Buzz Clik]

1. Frickin' amazing.

I get Java updates constantly, and at work it's a total pain in the butt because I have no admin rights on my desktop. I have to call the IT guy who signs in, clicks the link, and off it goes.

So, bunches of updates, and they missed this? And now that it's here, we can look forward to yet another update but sometime in the future?

I wonder if people disabling their Java is hurting business.

[Logical]

2. Java is a pain in the ass. Constant updates, 100s of versions.

[CountAllVotes]

3. My infected ThinkPad just snapped up a security update

Date of update January 2013.

I hope this fixes it. It is a god damned nightmare from hell and I'm wondering if my laptop is a goner.