Even if you turned it off in Java Preferences, this will keep it from running if you ever change that setting (which we are about to do). Because, to be honest, these Java attacks aren’t about to slow down anytime soon.įirst, manually disable Java in your Web browsers. They will reduce your risk, and I recommend them as an ongoing security practice even if you aren’t on the vulnerable version of Java. If, like me, you still need to use Java in your web browser, I recommend the following steps. In summary, we have at least two exploitable vulnerabilities affecting anything running the latest version of Java, both are being used in active attacks, and one is bundled with one of the most popular bad-guy toolkits on the market (BlackHole) and a very popular (and free) security testing tool. Only time will tell if the company will break its quarterly patch cycle and release an emergency update sooner. Knew about the vulnerabilities since April and was planning to release a patch in its October update.
The Metasploit penetration-testing framework, which is freely available and favored by script kiddies and security professionals (myself included) throughout the world.Īt this time, Oracle-which inherited Java when it acquired Sun Microsystems-has not commented on the exploits, although we now know that the company The exploit is also now available as an attack in Quickly added to the BlackHole exploitation kit-one of the most widely used malicious hacking tools.
Sudo installer -pkg /Volumes/JDK\ 8\ Update\ 121/JDK\ 8\ Update\ 121.The exploit for the first vulnerability was pkg file instead of an installer app: cd ~/DownloadsĬurl -v -j -k -L -H "Cookie: oraclelicense=accept-securebackup-cookie" > jdk-8u121-macosx-圆4.dmg The URL contains an additional directory (i.e. To install the latest Oracle JDK (at the time of writing this answer it's Java 8u121 JDK) the various paths (besides the version number) are slightly different compared to the older JRE version. Install: sudo installer -pkg /Volumes/Java\ 8\ Update\ 112/Java\ 8\ Update\ 112.app/Contents/Resources/JavaAppletPlugin.pkg -target /Ĭlean-up: diskutil umount /Volumes/Java\ 8\ Update\ 112
Mount: hdiutil attach jre-8u112-macosx-圆4.dmg
Java 8u112 JRE do the following:Ĭurl -v -j -k -L -H "Cookie: oraclelicense=accept-securebackup-cookie" > jre-8u112-macosx-圆4.dmg To entirely use a (bash) shell to install e.g.
0 kommentar(er)
