Apple releases security, Java updates

Start your engines -- er, Apple menus -- it's Software Update time! Apple has just issued two security updates today. The first is aimed at Java for OS X 10.5.6 and the Java Web Start and Java Applet components. The second update is for both Mac OS X 10.4.11 and Mac OS X 10.5.6 is a broader security update that addresses the Safari RSS vulnerability we discussed last month, as well as a number of other components (including perl, AFP Server and Remote Apple Events).

You'll need to restart your system after installing the security update -- but we recommend you do so, this stuff looks important!

Thanks Vivek!

Postscript: Brian Mastenbrook, who discovered the Safari RSS vulnerability has posted a blog entry detailing how he discovered the problem, why he issued a warning and how long it ultimately took Apple to respond (6 months!). It's good reading and a good discourse on how our favorite company handles security threats and how they might want to improve.

View Tags

Source: http://support.apple.com/kb/HT3374

Source: http://support.apple.com/kb/HT1222

Categories

Software Update Security

Start your engines -- er, Apple menus -- it's Software Update time! Apple has just issued two security updates today. The first is aimed...

Add a Comment

Sign in »

8 Comments

Filter by:

Brent

Nice update. Totally pooched my new Mac Mini.

Seriously getting tired of this crap...

February 15 2009 at 6:35 PM Report abuse Permalink rate up rate down Reply

BRockNYLA

This update totally screwed up my iMac. The security update failed and when I try to reboot I get the loathed blue screen. After attempting the safe mode boot and the fsck -fy fix I'm still stuck at the blue screen. Argh!!!!

February 13 2009 at 9:26 AM Report abuse Permalink rate up rate down Reply

1 reply to BRockNYLA's comment

Will

Same here.

Updating a 17" Powerbook, and the machine refuses to boot now - just hangs on the grey Apple logo screen for hours. Restarted a couple of times, same deal.

Joy.

February 13 2009 at 7:14 PM Report abuse Permalink rate up rate down Reply

antotelesys

the security of java language the another company theaf . the attack of the service
the security is very different of security services the system main use of internet.

tom

February 13 2009 at 7:48 AM Report abuse Permalink rate up rate down Reply

Andre

Strange - the release notes here list details about the update to Safari 3.2.2 but mine still reports 3.2.1 after the update.

http://support.apple.com/kb/HT3439

February 12 2009 at 11:48 PM Report abuse Permalink rate up rate down Reply

Bill Eccles

On MacOS X Server, it's PHP-neutral, for those of you who are worried about this kind of thing, but it can seriously screw up your mail server.

PHP-neutral: http://www.bill.eccles.net/bills_words/2009/02/macos-x-server-security-update-2.html

Screwed-up amavisd (with solution): http://www.bill.eccles.net/bills_words/2009/02/macos-x-server-security-update-1.html

February 12 2009 at 9:38 PM Report abuse Permalink rate up rate down Reply

Kermit

Hey guys, check your links

The 'The' in "The second update" link is linked to the first update

February 12 2009 at 6:40 PM Report abuse Permalink rate up rate down Reply

Matthew

What about Java 6 on all machines, not just special Intel 64 bit ones.

February 12 2009 at 5:29 PM Report abuse Permalink rate up rate down Reply