CVE-2013-1493

995193

Not sure if I am posting in th erifht forum. I am newbie to the forum. The new security update released says that " These vulnerabilities are not applicable to Java running on servers, standalone Java desktop applications or embedded Java applications. They also do not affect Oracle server-based software". Does this affect only the web browsers? Not able to figure out exactly. Can any one clarify? Thanks

gimbal2

user12241313 wrote:
Does this affect only the web browsers? Not able to figure out exactly. Can any one clarify? Thanks

999/1000 times the answer is yes. The security stuff that everyone is harping about is only for the consumer side of Java, most notably the browser plugin sandbox. But other bugs are also fixed, so it is never a bad idea to update regularly even on servers.

PhHein

First result in Google for CVE-2013-1493:
http://www.oracle.com/technetwork/topics/security/alert-cve-2013-1493-1915081.html

gimbal2

user12241313 wrote:
Does this affect only the web browsers? Not able to figure out exactly. Can any one clarify? Thanks

999/1000 times the answer is yes. The security stuff that everyone is harping about is only for the consumer side of Java, most notably the browser plugin sandbox. But other bugs are also fixed, so it is never a bad idea to update regularly even on servers.

995193

Thanks. Appreciate your response.