Hi!
I would like to say for you, if you have env which open from internet time to update JRE.
Project Zero from Google found that things during fuzzing with fonts True Type (which used in my internal Confluence as well). That analysis was done on Java 1.8.0_202-b08
Patch is here:
https://twitter.com/0patch/status/1113797743955402754
I hope Oracle will provide patch as well soon.
Also, it is very good identifier to update to the Java 11:
Of course, to reuse that bugs so complicated, but better upgrade in one restart and sleep well instead of waiting that leak time :)
Cheers,
Gonchik Tsymzhitov
Gonchik Tsymzhitov
Solution architect | DevOps
:)
Cyprus, Limassol
175 accepted answers
0 comments