MacNN Forums (http://forums.macnn.com/)
-   Tech News (http://forums.macnn.com/tech-news/)
-   -   Oracle, Apple update Java to fix newly-discovered exploits (http://forums.macnn.com/113/tech-news/498588/oracle-apple-update-java-fix-newly/)

 
NewsPoster Mar 4, 2013 04:53 PM
Oracle, Apple update Java to fix newly-discovered exploits
Oracle has released a new version of Java 7, <a href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">Update 17</a>. The patch is being released early, Oracle says, to cope with a security hole that is being "actively exploited by attackers to maliciously install the McRat executable onto unsuspecting users' machines." The vulnerability was <a href="http://www.electronista.com/articles/13/03/01/real.world.malware.called.inconsistent/">made public late last week</a>. It also fixes a second, previously undocumented flaw, <a href="http://thenextweb.com/insider/2013/03/04/oracle-ships-emergency-java-7-update-17-to-patch-two-vulnerabilities-after-one-is-exploited-in-the-wild/?utm_source=feedburner&utm_medium=feed&utm_campaig n=Feed:+TheNextWeb+(The+Next+Web+All+Stories)">bel ieved</a> to be likewise connected to Java SE's 2D component.<br /><br />Correspondingly, Apple has posted <a href="http://macnn.com/rd/280283==http://support.apple.com/kb/DL1573" rel='nofollow'>Snow Leopard</a> and <A href="http://support.apple.com/kb/DL1572">Lion/Mountain Lion</a> versions of Java SE 6. In each case, the releases bring Java up to v1.6.0_43.

A Polish security company, Security Explorations, today sent Oracle notice of five more vulnerabilities. Oracle says it has received the report, and is investigating. Numerous new exploits have been discovered in Java since the start of 2013; while Oracle has already switched to an accelerated update schedule, it has been forced to post a collection of emergency updates as well, especially as Apple has been periodically disabling Java in OS X when new problems are found.
 
All times are GMT -4. The time now is 06:00 PM.

Copyright © 2005-2007 MacNN. All rights reserved.
Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2015, vBulletin Solutions, Inc.


Content Relevant URLs by vBSEO 3.3.2