eEye Digital Security disappointed with Sun’s update cycle of Java

eEye Digital Security disappointed with Sun’s update cycle of Java

eEye Digital Security has said in a report that Sun is literally putting millions of users of their Java application by staggering the release of security patches for the software.

The security company had discovered a bug in the Java Network Launching Protocol in January this year. eEye claims that the bug was patched by the company in June this year but it is yet to be released by the company.

In fact, Sun has made available a developer release on their Java website which is not the correct way to deliver the update to users who have already installed one of the previous versions.

Sun Spokeswoman Jacki Decoster stated about the delayed release: “There’s an additional round of testing that happens before we blast it out to consumers.”

Marc Maiffret, CTO with eEye had this to say about the delayed release: “Sun has such a horrible update process that they released patches for this flaw a couple weeks ago, and more patches for different versions. If people were reverse-engineering the patch a few weeks ago, they have a head start on the good guys.”

Checkout: Java Technology