NYU Psych & CNS IT

The EyeLink package install in particular   /Applications/EyeLink/EDFConverter.app.

This app contains a vulnerable jar file.

=================================

Fix vulnerable jar file

=================================

gzip /Applications/EyeLink/EDFConverter.app/Contents/Resources/JRE/lib/jrt-fs.jar

=================================

Obtain Coretto AWS JDK 11

=================================

macOS ARM

curl -L https://corretto.aws/downloads/latest/amazon-corretto-11-aarch64-macos-jdk.tar.gz | tar xz -C /Library/Java/JavaVirtualMachines

macOS Intel

curl -L https://corretto.aws/downloads/latest/amazon-corretto-11-x64-macos-jdk.tar.gz | tar xz -C /Library/Java/JavaVirtualMachines

cd /Library/Java/JavaVirtualMachines

ln -s amazon-corretto-11.jdk jdk-11 

cd  /Applications/EyeLink/EDFConverter.app/Contents/Resources/JRE/lib

ln -s /Library/Java/JavaVirtualMachines/jdk-11/Contents/Home/lib/jrt-fs.jar