wraggster
August 30th, 2012, 23:25
Polish security researcher Adam Gowdiak submitted bug reports months ago (http://www.techworld.com.au/article/435007/oracle_knew_about_currently_exploited_java_vulnera bilities_months_researcher_says/) for the current Java 7 zero-day exploit that's wreaking havoc all over the Internet. It seems that Oracle can't — or won't? — take such reports seriously. Is it really time to ditch Oracle's Java and go for an open source VM?
http://developers.slashdot.org/story/12/08/30/134237/polish-researcher-oracle-knew-for-months-about-java-zero-day
http://developers.slashdot.org/story/12/08/30/134237/polish-researcher-oracle-knew-for-months-about-java-zero-day