Apple fixes Java today is the three Mac OS X 10.5, or Leopard to use version 15 of the loophole, by making amendments to the operating system up to standard, Sun issued a month ago.
Today's Leopard update to seriously consider this the same version of Java 6 operating system, and the snow leopard, Apple shipped last week, included. At the same time, however, does not include the latest Java update on the restoration, while the Sun, August 11.
According to Apple's announcement, in the upgrade patch 15 in the Java apparent weaknesses, and updated Java 6 version of the 1.6.0_15, Java 5 to version 1.5.0_20, and Java 4 to version 1.4.2_22. Sun issued August 4 update.
All of the vulnerabilities could allow "arbitrary code execution," Apple's fault attacks can be used to speak the type of plant malicious code on the computer. While other major software vendors such as Microsoft, Oracle, distribution threaten their ranking bug fixes, Apple does not. For example, Microsoft dubbed as "critical flaws are not the same."
"Access to web pages containing a maliciously crafted Java applet of trust could lead to the current user's permissions to execute arbitrary code," Apple said in its advisory on how to attack might work.
Java update applies only to the client and the Mac OS X 10.5, which is currently in v. 10.5.8 Server Edition. Users still running Mac OS X 10.4, also known as the tiger, still have the old versions of Java. Tiger Woods of the Java components Last updated on June 15, when it comes to most Java 5 1.5.0_19, and Java 4 1.4.2_21 Apple Computer.
Although the June update - which also affects the leopard - block, Sun 6 months ago to fill the hole more difficult in today's update to the Windows and Linux, Sun's revised heel. "It's not bad apples, in fact, said:" Andrew Storm, security, network security firm nCircle, Chief Operating Officer, instant messaging.
Apple Computer in its own Java version of the patch is responsible for providing to the user. Under normal circumstances, it's very slow fix the problem, the sun repair of 6-month lag are not uncommon. When Apple in September 2008 update Java, for example, than a fixed two 12 holes, some of which have Java updated Windows, Linux and Solaris patches as early as March 2008.
Apple has been slowing down the speed of fire. Last year in May, for example, a security researcher has released attack code takes advantage of the delay are angry at the time did not fix the error, one of Java.
Even if today's update, but Leopard has not yet the most advanced Java 6, the latest version is 1.6.0_16. Sun Yun-August 11th the update.
Snow leopard, in particular, attracted the Flash vulnerability of the shipping services bullet-proof this week, it is not in line with Sun's latest Java synchronization. Computer in the world today confirmed that snow leopard during the installation of the Java 1.6.0_15 upgrade, so that no less than an updated version of Leopard today, but still lag behind Sun's latest products. Java security updates, identified as Mac OS X 10.5 Update 5 for Java, you can download manually from Apple, or installed using Mac OS X's integrated update service.
Users can confirm that the updates have in use by means of the JavaTester.org site.



Reply With Quote
Copyright Techfuels
Bookmarks