+ Reply
Results 1 to 5 of 5

Your favorite Apple, iPhone, iPad, iOS, Jailbreak, and Cydia site.


Thread: Both Apple and Oracle Issue Yet Another Patch for a Recently Discovered Java Exploit

is a discussion within the

Mac News

forums, a part of the

General Apple/Mac

section;
...
  1. #1
    MMi Staff Writer Akshay Masand's Avatar
    Join Date
    Sep 2011
    Location
    New York City
    Posts
    3,742
    Thanks
    3
    Thanked 117 Times in 103 Posts

    Default Both Apple and Oracle Issue Yet Another Patch for a Recently Discovered Java Exploit


    Oracle recently released update 17 of Java 7 after researchers discovered multiple new vulnerabilities in the software once again. One of the vulnerabilities was found being actively exploited in the wild, which is what led to the patch. Oracle’s release notes mentioned the following:

    This Security Alert addresses security issues CVE-2013-1493 (US-CERT VU#688246) and another vulnerability affecting Java running in web browsers. Due to the severity of these vulnerabilities, and the reported exploitation of CVE-2013-1493 "in the wild," Oracle strongly recommends that customers apply the updates provided by this Security Alert as soon as possible.
    For those of you who have been unaware, Java has seen an alarmingly high number of exploits since the start of the year, with Apple and Oracle both being forced to issue multiple patches to deal with ongoing issues. It was previously stated by the Department of Homeland Security that all Java 7 users disable or uninstall the program until a solution was found for a previously discovered exploit. Java was forced to end up issuing multiple patches to deal with ongoing issues and Apple’s XProtect anti-malware found another issue with the patched version, blocking Java 7 from running on Macs once again.

    Apple pushed out an update on February 19th to help cope with a similar vulnerability. The latest Java update for OS X Lion and Mountain Lion weighs in at 63.48 MB, while the Snow Leopard version comes in at 69.32 MB. Both of the updates can be downloaded from Apple’s support webpage or via Software Update.

    Source: Oracle

    Twitter: @AkshayMasand

  2. #2
    iPhone? More like MyPhone
    Join Date
    Oct 2009
    Posts
    103
    Thanks
    2
    Thanked 3 Times in 2 Posts

    **** Java its always some security **** with u guys now

  3. #3
    My iPhone is a Part of Me ddonuts4's Avatar
    Join Date
    Dec 2008
    Posts
    536
    Thanks
    17
    Thanked 22 Times in 21 Posts

    And to add insult to injury, you almost never even need java. I'm disabling java in all my browsers until I see a website that requires it.

    Edit: minecraft uses java so I'll just disable it in my web browser. Minecraft can run offline for now.

  4. #4
    Green Apple
    Join Date
    Sep 2007
    Location
    West Palm Beach, FL
    Posts
    77
    Thanks
    1
    Thanked 4 Times in 4 Posts

    Java must be the most unsecured, buggy software platform to ever exist, given that I get asked to update at least 3 times a week on my Windows machines. No joke.

  5. #5
    My iPhone is a Part of Me
    Join Date
    Jan 2012
    Posts
    642
    Thanks
    2
    Thanked 88 Times in 70 Posts

    Quote Originally Posted by steeda763 View Post
    Java must be the most unsecured, buggy software platform to ever exist, given that I get asked to update at least 3 times a week on my Windows machines. No joke.
    If you update the first time, you don't get asked as much. Just do the update. It's quick easy and painless.

Posting Permissions
  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts