After the announcement yesterday about the security problems plaguing Java
implementations, Sun issues a press release.
“Sun Microsystems, Inc. today announced it has created a fix to
a newly discovered implementation bug in the JavaTM Development Kit
(JDKTM) that affects both JDK 1.1.x and the Java 2 platform. The
bug poses a potential security risk by allowing an untrusted applet
to execute unverified code under certain circumstances. There are
no reports of any attacks based on this bug.”
“After being briefed on the bug, Sun created and tested a fix.
Releases of the patch for all Java 1.1.x platforms and the Java 2
platform are imminent. The fix will also be available as a part of
JDK 1.1.8 and Java 2, v 1.2.1, both scheduled for release in
April.”