Re: JDK 1.7.0_11 is out.
On 1/14/2013 11:01 PM, Roedy Green wrote:
On Sun, 13 Jan 2013 18:24:23 -0800, Roedy Green
<see_website@mindprod.com.invalid> wrote, quoted or indirectly quoted
someone who said :
Presumably will fix the 0-day exploit.
I will find out after I get it myself.
the release notes are at
http://www.oracle.com/technetwork/java/javase/7u11-relnotes-1896856.html
As I read them the "fix" is just to turn off Applets entirely, by
default -- hardly a fix. Perhaps one of the group's language lawyers
could see if I interpreted that correctly.
I don't read it that way.
<quote>
This release contains fixes for security vulnerabilities. For more
information, see Oracle Security Alert for CVE-2013-0422.
In addition, the following change has been made:
Area: deploy
Synopsis: Default Security Level Setting Changed to High
The default security level for Java applets and web start applications
has been increased from "Medium" to "High".
</quote>
.... contains fixes ... in addition ... security level
setting changed ...
I can not interpret that other than there are both a fix
and a change in default security level.
Arne