October 25, 2014

In brief: Apple updates Java after Oracle’s October patches

(LiveHacking.Com) – Apple has once again updated the versions of Java running on its Mac OS X operating system soon after Oracle released its patches. This is in contrast to the fiasco which took place earlier this year which Apple took until April 2012 to push out a patch that had been available to Windows users since February.

This time Apple has been quick off the mark. According to the security advisory: Multiple vulnerabilities exist in Java 1.6.0_35, the most serious of which may allow an untrusted Java applet to execute arbitrary code outside the Java sandbox. Visiting a web page containing a maliciously crafted untrusted Java applet may lead to arbitrary code execution with the privileges of the current user. These issues are addressed by updating to Java version 1.6.0_37.

Additionally, for OS X 10.6 and OS X 10.7 this update removes the Apple-provided Java applet plug-in from all web browsers. It also removes the Java Preferences application, which is no longer required to configure applet settings. For Mac users who need a Java plugin (and you really must need it, other wise don’t bother) click on the region labeled “Missing plug-in” to download the latest version of the Java applet plug-in directly from Oracle.

The update is available for the last three versions of Mac OS X: Mac OS X Snow Leopard v10.6.8, OS X Lion v10.7 or later, and OS X Mountain Lion v10.8 or later.

Share and Enjoy:
  • Print
  • Digg
  • StumbleUpon
  • del.icio.us
  • Facebook
  • Yahoo! Buzz
  • Twitter
  • Google Bookmarks