press room

This year's election process to determine the Executive Committee (EC) of the Java Community Process (JCP) is now complete. The London Java Community (LJC) and PaaS (Platform-as-a-Service) provider CloudBees prevailed against seven other nominees and will join the ratified members, Cinterion Wireless Modules, Credit Suisse, Fujitsu and Hewlett-Packard to form the committee that steers the development of Java. At 23.7 per cent, the voter turnout was slightly higher than in 2011 (23 per cent). 1,131 persons were eligible to vote.
The LJC had held a place on the committee last year, and its re-election is an acknowledgement of its contribution. The JCP Executive Committee consists of 24 members, 16 of whom are ratified and eight are elected. More than half of the committee seats are re-appointed every year; Oracle, as the owner of the Java trademark, is the only permanent member. The term of office is two years. Ratified members are nominated by the Program Management Office and approved or rejected via a majority vote. Among the EC's tasks are the selection of Java Specification Requests (JSRs) for development within the Community Process, the checking of draft specifications before they are submitted to the public review process, and the monitoring and recommendation of Java maintenance adjustments.
The exact distribution of votes and the candidates' profiles are available on the JCP page.

In a blog post, Yahoo has said there is a security vulnerability in its JavaScript framework YUI version 2. It does not, though, give a detailed description of the bug. The issue only, now, relates to any project where the developers have hosted their own version of the YUI 2 SWF files (from version 2.4.0 to 2.9.0). Those who have used Yahoo's yui.yahooapis.com CDN or another CDN for YUI 2 or use YUI 3 are not affected by the issue said Yahoo.
The only information in the post is a connection with "SWF"; this could therefore be something in connection with the presence of the class SWFStore which supports the persistence of data using the Flash Player. The affected version of the framework has, though, been superseded by YUI 3 since 2009; YUI 3 does not include SWFStore.
The Yahoo developers ask affected user to contact them via email to security@yuilibrary.com for further information and support.